Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa
File: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (raw, json)
Hash identifier: 6cj5uI59cR8iuhB+dGI9lfG37MPFAcebdXbUM0Dv2Ak=
Subject key identifier: 20:C8:65:D9:11:46:95:F2:44:E2:74:86:17:36:10:32:44:AE:C9:C9
Certificate issuer: /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Certificate serial: 6533804EBAB05503F0E7DEDEE474264EDA929C4A
Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa
Signing time: Fri 24 Jan 2025 10:00:00 +0000
ROA not before: Fri 24 Jan 2025 09:55:00 +0000
ROA not after: Fri 23 Jan 2026 10:00:00 +0000
asID: 132669
IP address blocks: 103.112.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:33:80:4e:ba:b0:55:03:f0:e7:de:de:e4:74:26:4e:da:92:9c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Validity
Not Before: Jan 24 09:55:00 2025 GMT
Not After : Jan 23 10:00:00 2026 GMT
Subject: CN=20C865D9114695F244E274861736103244AEC9C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:fa:e8:c9:4e:1e:ec:4a:5a:0f:91:bf:ce:
40:3a:8e:52:b0:08:6f:d7:21:67:eb:25:4a:9b:73:
42:c2:1f:47:b6:ef:51:e9:fb:1d:eb:e3:9e:d3:be:
50:ab:0e:5b:c4:c2:ea:9c:21:a6:9b:f4:7d:a6:a1:
b4:a0:7a:93:df:c3:4d:f1:41:d5:ae:4b:63:2b:95:
5c:5c:31:3a:82:64:10:83:62:02:a6:85:a7:f4:33:
2b:50:df:bf:79:66:b9:06:cc:65:74:f8:ea:6e:7c:
ac:52:38:ef:09:6a:f1:e3:ad:f2:8d:a4:23:2f:10:
eb:15:b3:98:47:0e:8e:79:16:c2:1c:d9:da:0d:41:
cd:01:28:d9:44:47:b1:0d:21:fb:ae:aa:5d:04:b6:
41:53:85:51:0e:6e:71:e5:0d:3a:61:ca:64:2c:1f:
47:dc:c6:ff:b0:a6:45:57:f2:82:97:ff:03:cc:72:
30:51:55:0e:8e:7e:de:c6:75:15:51:83:53:ca:9a:
ad:19:9a:9e:44:50:ed:c0:5b:b0:66:17:52:b2:14:
48:d4:fb:b3:01:41:20:c5:6d:76:a1:fd:b5:36:c4:
0e:8a:e9:35:03:2c:6c:99:79:f7:9b:e3:0c:23:b0:
33:46:d3:8b:10:84:bc:ee:37:bc:7b:8f:2a:b7:7e:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:65:D9:11:46:95:F2:44:E2:74:86:17:36:10:32:44:AE:C9:C9
X509v3 Authority Key Identifier:
keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.44.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:fd:0e:68:f0:ad:74:e3:4e:a2:5d:55:93:d5:ce:a1:ff:37:
3e:b9:ec:31:27:68:93:ad:7d:ce:28:b4:66:cc:a9:09:00:fc:
21:5e:35:60:51:02:51:9e:44:f3:c4:a0:44:e9:91:45:7d:c7:
32:93:76:f4:a0:49:74:31:f4:0c:ab:94:37:e9:18:36:78:28:
fc:4f:8e:9f:21:96:21:75:98:0f:96:a6:bf:6d:c4:20:91:fe:
87:3e:2b:45:70:2e:63:23:73:d2:23:94:e7:a9:f2:50:eb:1f:
19:5b:d7:a1:f4:1a:6d:be:12:77:5a:e3:56:3f:62:c4:77:fe:
47:49:a4:c6:ac:a7:99:2d:05:1f:37:bb:38:1d:c2:be:43:53:
20:49:02:9b:e8:60:c5:22:a6:dd:22:00:89:6f:17:04:39:da:
f6:e5:cc:3c:22:a1:28:80:69:d1:86:f2:f8:62:b1:44:17:99:
36:9b:a0:53:fb:e1:76:96:b1:ad:d4:1a:78:36:2b:f8:74:03:
6e:b3:58:81:91:bf:16:5f:a2:43:83:f0:8a:04:72:2b:6a:46:
99:92:d4:a9:49:88:e3:cd:3a:40:55:62:25:b9:11:aa:62:1d:
d7:14:b8:ef:73:a7:e4:01:cc:87:71:d8:de:43:f5:b1:8d:43:
f9:86:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:31:30 2025 by rpki-client