Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa
File: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (raw, json)
Hash identifier: CkioTeBJV4sL++uAeWAcKZDwePzlaEoJ8Dt/Q+Ec1n8=
Subject key identifier: 57:C2:AC:4A:FD:34:AE:AC:5B:C9:72:18:11:E4:F5:7E:53:9D:E8:1C
Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400
Certificate serial: 4F1AF70CB2CCF230B0A6A6AD750786DE5EA73FE0
Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa
Signing time: Sun 29 Dec 2024 00:00:02 +0000
ROA not before: Sat 28 Dec 2024 23:55:02 +0000
ROA not after: Sun 28 Dec 2025 00:00:02 +0000
asID: 151595
IP address blocks: 103.42.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1a:f7:0c:b2:cc:f2:30:b0:a6:a6:ad:75:07:86:de:5e:a7:3f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400
Validity
Not Before: Dec 28 23:55:02 2024 GMT
Not After : Dec 28 00:00:02 2025 GMT
Subject: CN=57C2AC4AFD34AEAC5BC9721811E4F57E539DE81C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:d1:09:70:da:1f:0f:4b:b9:c9:6c:22:73:
38:da:13:60:3f:93:59:d4:c9:63:5c:c1:f2:dd:98:
e2:59:dc:63:de:7e:1a:b9:1c:75:bd:86:cb:83:7f:
16:6e:06:e3:b1:38:8d:4b:3a:79:3e:5c:dd:48:d2:
79:d9:f9:67:b8:e7:42:a8:ec:66:dc:b8:20:0f:4f:
03:e8:dd:69:5b:3a:74:d6:7c:88:ef:9a:77:cd:88:
8c:cf:be:96:96:3a:b6:2d:62:f8:80:90:96:1d:4b:
1c:88:1d:98:94:09:2f:83:18:bf:ed:56:a8:fa:a9:
b6:0c:39:25:bb:84:e1:5d:82:d7:e8:e8:d1:f4:2d:
67:4b:2a:6b:94:8d:a7:4c:55:af:c1:0f:d2:9d:7e:
f0:8e:52:eb:d7:3b:32:b7:72:0c:31:bf:1e:5c:3a:
2b:32:97:72:2e:3e:b6:a6:7c:bc:9d:d3:6e:4a:0d:
be:88:2f:f1:8c:61:70:e9:d8:4c:bd:ec:c2:37:1e:
86:9c:77:ab:bd:c7:df:b1:ca:3e:91:f9:2f:af:c3:
c7:b0:22:91:12:53:20:dc:35:cf:91:b6:cf:f8:e3:
03:b1:03:53:d7:f9:3c:57:21:26:24:1e:44:48:89:
89:54:aa:84:32:5c:a9:65:db:98:d0:75:58:e0:55:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:AC:4A:FD:34:AE:AC:5B:C9:72:18:11:E4:F5:7E:53:9D:E8:1C
X509v3 Authority Key Identifier:
keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.243.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f4:d1:5b:a1:a0:31:bc:c5:0f:3d:4f:53:ad:7e:ea:fa:11:
ad:bc:e1:33:e4:32:96:d0:af:37:2c:67:63:dd:b7:c0:5e:7e:
4a:04:8d:75:c9:41:06:ff:52:40:02:1b:a1:7b:3d:8f:ec:b6:
53:db:78:23:57:93:08:0a:5a:97:7f:14:04:61:21:db:73:91:
f6:6e:0c:f8:d7:11:69:25:ef:f4:f9:eb:5a:ab:73:0e:9c:77:
cb:7e:e5:e4:cb:9b:65:8a:9a:e2:0d:e2:56:ab:19:c4:38:26:
33:e3:25:6b:4b:fb:39:19:6c:99:31:9e:5c:2c:dd:9c:f5:e0:
e9:16:ef:1f:c9:96:ea:37:10:3f:df:29:34:43:fe:40:42:af:
b9:26:7f:03:6a:e8:7a:5a:fa:e7:01:5c:a2:46:5b:a2:0a:66:
c9:b5:d1:ba:d9:d3:20:5a:3c:e1:51:0f:92:b7:11:0d:97:c2:
91:4f:31:eb:49:6b:09:f0:89:d4:7f:25:e8:72:35:69:84:45:
b5:43:9b:a9:7c:ce:06:b7:c0:4e:d1:7f:05:66:e1:6f:79:a9:
ca:b9:84:8c:67:e4:dc:7c:3a:ff:de:3f:54:af:74:ce:e0:e5:
ab:b6:28:27:bd:8d:fd:80:dd:83:41:8b:bb:a2:e6:8c:e1:09:
88:09:64:c0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTxr3DLLM8jCwpqatdQeG3l6nP+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0
NzU3QzQwMDAeFw0yNDEyMjgyMzU1MDJaFw0yNTEyMjgwMDAwMDJaMDMxMTAvBgNV
BAMTKDU3QzJBQzRBRkQzNEFFQUM1QkM5NzIxODExRTRGNTdFNTM5REU4MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYNEJcNofD0u5yWwiczjaE2A/
k1nUyWNcwfLdmOJZ3GPefhq5HHW9hsuDfxZuBuOxOI1LOnk+XN1I0nnZ+We450Ko
7GbcuCAPTwPo3WlbOnTWfIjvmnfNiIzPvpaWOrYtYviAkJYdSxyIHZiUCS+DGL/t
Vqj6qbYMOSW7hOFdgtfo6NH0LWdLKmuUjadMVa/BD9KdfvCOUuvXOzK3cgwxvx5c
Oisyl3IuPramfLyd025KDb6IL/GMYXDp2Ey97MI3Hoacd6u9x9+xyj6R+S+vw8ew
IpESUyDcNc+Rts/44wOxA1PX+TxXISYkHkRIiYlUqoQyXKll25jQdVjgVfLXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUV8KsSv00rqxbyXIYEeT1flOd6BwwHwYDVR0j
BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE
NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3
QzQwMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmOTNiODE2LWU3YmUtNDY0Yy04
Nzg1LTQ5OGJmODRkMzczNS8wLzMxMzAzMzJlMzQzMjJlMzIzNDMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyrzMA0GCSqG
SIb3DQEBCwUAA4IBAQCD9NFboaAxvMUPPU9TrX7q+hGtvOEz5DKW0K83LGdj3bfA
Xn5KBI11yUEG/1JAAhuhez2P7LZT23gjV5MIClqXfxQEYSHbc5H2bgz41xFpJe/0
+etaq3MOnHfLfuXky5tlipriDeJWqxnEOCYz4yVrS/s5GWyZMZ5cLN2c9eDpFu8f
yZbqNxA/3yk0Q/5AQq+5Jn8Dauh6WvrnAVyiRluiCmbJtdG62dMgWjzhUQ+StxEN
l8KRTzHrSWsJ8InUfyXocjVphEW1Q5upfM4Gt8BO0X8FZuFveanKuYSMZ+TcfDr/
3j9Ur3TO4OWrtignvY39gN2DQYu7ouaM4QmICWTA
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:33 2025 by rpki-client