Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
File: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (raw, json)
Hash identifier: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=
Subject key identifier: 55:10:28:E8:F0:48:11:AE:8D:D4:70:5F:9F:99:9E:18:6E:70:93:C4
Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial: 04B19074D4FDE9043EDE18A02EA810845D8BDA50
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
Signing time: Sun 09 Mar 2025 05:35:44 +0000
ROA not before: Sun 09 Mar 2025 05:30:44 +0000
ROA not after: Sun 08 Mar 2026 05:35:44 +0000
asID: 58485
IP address blocks: 103.247.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b1:90:74:d4:fd:e9:04:3e:de:18:a0:2e:a8:10:84:5d:8b:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Validity
Not Before: Mar 9 05:30:44 2025 GMT
Not After : Mar 8 05:35:44 2026 GMT
Subject: CN=551028E8F04811AE8DD4705F9F999E186E7093C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:83:37:01:8b:0c:6b:2a:13:5d:14:0a:08:
d1:5a:59:98:9a:40:6a:0d:24:20:c4:9f:82:af:ff:
8a:a6:8f:c6:7f:24:09:d8:27:4a:25:75:61:1a:83:
e8:3b:70:5e:16:34:70:af:4e:f7:7e:d4:ce:3c:70:
97:df:16:52:7e:f4:a8:27:38:f1:f7:3c:c5:a5:86:
4e:86:92:7a:3a:ae:e0:73:0a:3c:c7:20:db:9d:db:
e1:cf:f7:44:d1:b5:58:57:7b:8f:bf:d1:3f:51:06:
11:9b:79:19:d8:7d:2e:c4:77:47:86:b5:84:46:12:
2b:2c:5f:86:7c:25:25:82:09:13:ea:1d:8b:e5:20:
05:f7:8d:32:69:fa:89:be:56:4b:e4:da:33:f5:e8:
f0:25:76:da:1b:c1:25:31:f8:0f:ba:a6:cd:3b:50:
73:31:07:6e:5a:d9:c6:c4:a7:dc:18:7e:da:03:61:
81:ec:2a:1a:27:69:b1:6c:1f:89:70:05:4b:8c:21:
2b:31:8f:92:8d:f4:f4:9f:7d:dc:41:f5:9f:7a:09:
a7:1c:72:09:f3:e5:0a:e5:d5:1d:da:30:93:51:12:
ec:c3:57:b0:e7:96:50:a4:45:fd:f1:22:59:0c:57:
eb:aa:59:08:33:f7:2e:4b:20:74:65:bf:0f:d2:7c:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:28:E8:F0:48:11:AE:8D:D4:70:5F:9F:99:9E:18:6E:70:93:C4
X509v3 Authority Key Identifier:
keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32312e302f32342d3234203d3e203538343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.21.0/24
Signature Algorithm: sha256WithRSAEncryption
46:47:65:71:25:f7:8c:21:83:26:08:e4:be:69:51:18:3a:2b:
af:bc:5f:5d:da:4c:57:d8:84:68:ad:2c:9d:cc:f5:d7:05:f5:
57:58:be:20:94:53:7d:64:2d:66:8d:cf:e6:aa:18:51:6b:37:
19:57:e0:29:22:4e:53:23:ef:29:b8:e5:bd:5a:ab:83:6f:0d:
61:2d:04:a7:e1:ab:10:bd:ec:2f:35:57:a9:c3:7a:41:08:6f:
51:51:09:e0:77:20:12:1b:a8:62:60:31:da:58:bf:cb:2f:25:
7e:a3:11:ee:ee:e5:fb:3a:c2:d0:d3:f7:70:17:64:2c:da:50:
54:ee:55:2f:06:0e:58:7c:f8:ab:2b:cd:40:79:db:71:a9:22:
d4:3b:47:f9:0c:98:97:ab:c4:d7:b7:5c:86:46:cb:4b:64:19:
9f:e8:e2:2b:34:95:a2:cc:26:50:16:ab:b4:1d:0d:2e:5f:ff:
86:48:b9:a9:04:80:50:5a:72:68:c9:32:bb:92:c8:e1:42:4b:
85:0a:47:70:49:4a:aa:da:f5:e3:1d:97:ea:f8:c4:a9:2a:7e:
11:42:06:6c:4a:c4:f0:66:4b:3f:22:64:46:53:04:dc:f1:46:
fa:92:4b:27:69:76:fc:98:d3:f7:4c:7a:4e:d1:25:9b:cc:04:
b1:2a:7f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:21 2025 by rpki-client