Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3130332e32342e3134382e302f32322d3234203d3e203233393439.roa
File: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (raw, json)
Hash identifier: QcCFSy1tRIsKFSX6IkNuBrgL6WXKmEv8YDcrJ9oZAms=
Subject key identifier: C9:92:56:80:29:2C:9D:40:02:5C:09:33:4C:AC:83:A1:2B:EE:4F:53
Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5
Certificate serial: 6DA743E40325A8D1FA705286CA629FA139EC6C92
Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3130332e32342e3134382e302f32322d3234203d3e203233393439.roa
Signing time: Mon 01 Jul 2024 01:02:52 +0000
ROA not before: Mon 01 Jul 2024 00:57:52 +0000
ROA not after: Mon 30 Jun 2025 01:02:52 +0000
asID: 23949
IP address blocks: 103.24.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a7:43:e4:03:25:a8:d1:fa:70:52:86:ca:62:9f:a1:39:ec:6c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5
Validity
Not Before: Jul 1 00:57:52 2024 GMT
Not After : Jun 30 01:02:52 2025 GMT
Subject: CN=C9925680292C9D40025C09334CAC83A12BEE4F53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:96:66:ff:76:89:fa:4b:24:7b:a1:a2:42:
56:8a:9b:aa:01:80:db:fd:15:57:bc:1f:06:4c:2f:
d3:2f:ff:73:5e:56:a6:47:c0:88:8c:f6:ba:51:55:
e9:68:79:50:ac:7d:fa:99:06:30:e0:37:d3:4a:e0:
8e:6c:11:a8:6e:b5:c9:3c:40:0b:98:bf:1f:6a:d1:
6d:6e:4f:f7:0d:39:0a:2d:a8:01:09:d6:45:3c:45:
c5:d7:8a:24:07:57:24:a3:49:1c:67:7e:9b:34:7d:
39:ab:32:9b:41:6d:0c:02:e0:53:54:58:f6:eb:d7:
18:08:00:74:0a:c4:c1:fa:fb:eb:93:a2:60:0e:7b:
93:88:25:68:72:71:49:74:09:72:72:22:32:4e:d7:
b8:6e:c9:c7:c5:ef:d0:a0:09:0c:17:14:53:d6:83:
b6:b1:f6:46:12:c9:e1:53:ca:91:48:dd:dc:17:ad:
ae:95:46:d3:4f:59:b1:99:37:11:69:aa:6a:87:79:
f3:b5:26:3f:16:56:98:dc:05:59:e8:46:19:b0:d1:
ad:28:94:37:2b:17:16:ea:ce:16:9f:c0:90:b0:29:
44:15:89:ec:13:0e:b5:de:ab:9e:17:fd:51:9c:71:
bc:a4:05:e1:6a:c3:a4:1c:e8:06:93:98:62:82:c4:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:56:80:29:2C:9D:40:02:5C:09:33:4C:AC:83:A1:2B:EE:4F:53
X509v3 Authority Key Identifier:
keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3130332e32342e3134382e302f32322d3234203d3e203233393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.148.0/22
Signature Algorithm: sha256WithRSAEncryption
83:68:69:f6:52:d2:17:b2:29:2e:5e:c6:65:78:77:c4:bb:25:
28:f2:04:d6:c4:08:ea:34:63:c6:32:08:f5:bf:ae:3d:d1:f2:
00:20:27:e0:09:16:c0:77:5e:65:96:a7:a8:45:98:a8:ec:70:
e1:95:31:7b:57:c7:5d:8d:90:13:94:01:2b:cb:30:c9:ee:b4:
5a:38:ff:ae:af:d6:b6:23:74:c4:96:15:4e:30:eb:89:be:d5:
d9:ab:9e:d9:7b:13:91:56:1a:34:40:51:99:5a:dc:8d:af:5c:
1f:3a:62:cf:48:ae:23:7e:9b:5c:20:5a:7a:d6:d2:6d:5e:4f:
24:86:1a:ba:f5:67:a8:17:ac:8d:04:e7:0e:51:10:10:e5:eb:
77:0c:b6:7b:a1:4d:bc:1a:a3:b1:b9:ca:40:e3:66:a4:13:52:
e9:15:43:79:22:02:95:ce:4e:e1:e9:1e:bf:2a:f2:0f:88:28:
3b:81:d4:e0:00:d5:4e:ec:64:54:2a:f7:94:7f:21:62:a4:f8:
63:bc:d1:cb:41:e7:f1:b5:69:de:53:f3:80:3d:1c:67:5a:a7:
ab:ac:05:97:95:3b:63:37:84:02:19:df:8e:6c:d7:ac:10:e8:
2d:3a:e3:c3:96:86:0f:79:60:e9:56:12:2d:ca:06:61:aa:bd:
f5:72:db:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:40 2025 by rpki-client