Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39342e302f32342d3234203d3e20313333383233.roa
File: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier: TmlDYYFpoUzNq8ZR6YwWBT4mIzmdRv82c4JZfaIsztM=
Subject key identifier: 17:A4:DC:4C:25:5E:04:D0:07:B4:8C:4B:B7:14:95:93:20:86:62:C8
Certificate issuer: /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial: 0B66C8A11C2BFFD0A6902AC2E289EDEEF8619C58
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39342e302f32342d3234203d3e20313333383233.roa
Signing time: Fri 09 Aug 2024 08:00:01 +0000
ROA not before: Fri 09 Aug 2024 07:55:01 +0000
ROA not after: Fri 08 Aug 2025 08:00:01 +0000
asID: 133823
IP address blocks: 103.54.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:66:c8:a1:1c:2b:ff:d0:a6:90:2a:c2:e2:89:ed:ee:f8:61:9c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Validity
Not Before: Aug 9 07:55:01 2024 GMT
Not After : Aug 8 08:00:01 2025 GMT
Subject: CN=17A4DC4C255E04D007B48C4BB7149593208662C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9a:0a:30:34:4a:26:63:49:ce:71:7c:68:8d:
f2:9f:37:bb:ef:34:34:58:b8:a3:d0:20:29:0c:9c:
fa:76:4f:65:62:05:48:80:06:a5:2c:ea:b4:0d:c2:
0b:3e:3b:62:4e:81:55:a9:32:b5:97:e7:71:da:28:
79:98:fb:8b:39:8f:3c:9a:09:8d:13:8b:52:3e:57:
7b:76:00:80:6b:b1:3a:dd:36:ae:42:f6:fe:98:2e:
e1:fa:7b:5a:2b:b0:d9:1b:70:28:3a:ae:e8:e9:a5:
a2:a8:9e:0a:34:25:41:15:cf:bc:aa:20:35:cf:e7:
aa:e3:f2:13:66:83:b5:de:ca:ae:c1:3e:4d:cd:45:
e9:35:92:9f:89:9a:d1:f1:f5:9d:ed:77:45:a1:6d:
18:b2:f3:02:2f:09:91:31:17:84:28:ed:6f:3a:2e:
cc:57:54:a2:ad:90:94:71:6e:c9:05:60:c9:4c:7a:
17:e3:43:77:75:11:15:16:34:ca:86:5f:d8:ab:f2:
5d:57:26:7e:c9:4f:0c:8d:68:07:1f:ae:d6:7b:43:
e4:a2:76:f8:d5:35:5b:a1:1d:69:96:dd:41:c3:13:
b6:07:e7:05:b1:5b:85:3b:98:85:a7:07:73:b9:19:
cd:7e:2e:2b:fe:08:71:0e:2d:db:14:c3:74:1a:eb:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A4:DC:4C:25:5E:04:D0:07:B4:8C:4B:B7:14:95:93:20:86:62:C8
X509v3 Authority Key Identifier:
keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39342e302f32342d3234203d3e20313333383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.94.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e9:72:c6:94:48:59:b1:f0:bd:8c:44:3e:a8:0a:8f:89:10:
07:bc:68:ac:20:00:dd:cd:7a:cd:b7:15:9a:a0:0e:8a:50:2a:
0f:d5:8e:74:6c:bd:4d:96:bd:b8:88:65:d8:f6:d6:10:47:b0:
17:45:0a:33:65:ac:5f:32:dc:61:51:2b:8b:bf:df:5a:5c:df:
6c:ca:57:04:ec:19:06:9f:1b:58:3a:bb:13:5c:8a:1b:5e:76:
0d:08:b2:76:3e:84:63:36:1d:17:4e:2b:bc:23:22:04:22:f9:
7e:45:ff:5e:21:40:a3:32:a8:5b:ff:c7:4e:68:fb:29:1f:7a:
50:3e:f0:3e:8c:31:d2:ea:69:a1:da:5b:b0:1d:7b:f3:e3:fa:
03:94:f1:6e:83:e4:c9:66:bf:21:4b:cb:5c:7c:29:d4:e1:d0:
d9:4a:a1:53:cf:9c:5c:3b:aa:46:e9:94:4e:c9:ef:de:37:18:
b9:62:d4:ea:c5:99:a7:f9:6b:f1:d9:98:fb:5f:52:cb:d3:e8:
69:e0:a5:73:3f:40:bc:a3:71:89:90:23:fe:36:18:22:a7:c5:
64:5a:b2:b1:8f:55:f4:0b:69:6a:50:68:b1:a1:35:ed:3f:76:
73:8f:23:33:6b:90:68:40:14:56:ec:35:61:4c:eb:0d:71:e2:
5a:4c:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:19:37 2025 by rpki-client