Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa
File: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (raw, json)
Hash identifier: 5+zXGETugAPi3HrPmviCFDgLbg2lDQPrtwA1t0d5+aI=
Subject key identifier: 8C:9E:B4:DF:64:EA:19:DC:16:01:4C:35:4C:34:B8:10:48:D0:1D:F6
Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Certificate serial: 08EF597055549EE98D4A48B397CC2776C5FFD37C
Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa
Signing time: Fri 06 Sep 2024 16:00:29 +0000
ROA not before: Fri 06 Sep 2024 15:55:29 +0000
ROA not after: Fri 05 Sep 2025 16:00:29 +0000
asID: 149401
IP address blocks: 103.182.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ef:59:70:55:54:9e:e9:8d:4a:48:b3:97:cc:27:76:c5:ff:d3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Validity
Not Before: Sep 6 15:55:29 2024 GMT
Not After : Sep 5 16:00:29 2025 GMT
Subject: CN=8C9EB4DF64EA19DC16014C354C34B81048D01DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:47:d1:b9:90:55:9d:38:4b:95:83:1b:44:3a:
da:bf:c6:c7:d2:db:2c:f1:56:f3:ca:86:ba:0c:43:
27:d9:b4:90:22:ce:dd:05:47:60:89:a3:c6:64:d8:
84:5c:5f:65:8c:52:a6:bd:4d:af:da:6c:49:02:a0:
96:a5:09:7e:25:b8:7b:e7:4e:01:dd:e2:ba:cd:bc:
5a:9c:4c:d2:93:49:03:95:e7:5c:07:df:7d:1c:0b:
a2:78:f5:86:6b:a7:e5:09:46:c1:e0:cf:05:42:9e:
6c:cc:57:93:7d:b5:6a:9e:f3:5a:21:7d:48:c8:bd:
c8:02:d6:e1:69:a8:a9:27:a2:41:06:22:e6:96:70:
fc:45:98:04:02:2e:8a:45:52:de:0a:84:2e:49:f3:
37:b7:54:39:ca:d6:0a:d6:d6:7f:1d:87:44:eb:63:
a7:21:20:15:3e:1a:bb:85:dc:39:15:67:e6:b6:56:
7b:6d:fd:b5:5f:ad:dc:5a:a8:c6:d2:7d:dd:80:54:
3e:af:32:b0:d9:5a:12:b9:1d:12:73:94:94:31:10:
55:35:25:36:8a:87:c3:ce:4c:75:0d:74:65:34:2a:
f9:2d:68:6a:69:84:ef:d3:a4:f2:27:c1:91:d9:96:
1c:8e:3e:5d:00:79:d3:67:f2:46:60:09:4e:2f:be:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9E:B4:DF:64:EA:19:DC:16:01:4C:35:4C:34:B8:10:48:D0:1D:F6
X509v3 Authority Key Identifier:
keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.80.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:8b:ca:af:ef:b4:3c:ac:cb:42:bf:a3:06:8f:ca:d1:7f:0b:
66:af:05:29:28:2a:a3:9d:12:10:f9:7a:65:2a:df:55:f9:25:
33:65:0a:b3:75:59:c1:36:8f:74:84:50:dd:53:18:17:a9:38:
d4:67:2e:bf:a7:d3:29:d5:08:bf:8d:4d:84:ca:80:a7:ae:ce:
07:8e:e7:4b:26:96:18:c9:62:b9:1a:4f:85:91:d1:65:59:f8:
64:0c:a5:fb:52:7b:94:da:6d:96:0d:b6:80:df:bb:df:da:0a:
bd:6d:77:e3:37:89:f5:5b:07:10:f4:dc:44:31:47:1c:d0:81:
85:be:5e:28:f3:4d:7c:87:96:5a:61:7d:a4:d3:de:b1:cd:63:
56:57:e7:1a:63:9a:2b:03:52:6b:62:76:61:fe:eb:76:0e:1e:
ef:06:50:a0:3e:ae:9b:98:61:f3:87:f2:06:14:5a:a9:e2:43:
a7:63:77:a8:18:50:bb:ed:21:d8:ba:e2:b6:b1:cf:75:ce:10:
0f:56:e0:9a:7c:d2:99:03:f2:f4:67:1b:6d:6f:9b:36:a9:30:
a2:14:c9:58:67:6d:95:fd:c2:ee:f6:90:a3:74:6a:63:56:ba:
87:72:ce:2b:e2:30:0e:4e:1d:71:84:8b:ee:54:f7:41:25:75:
9b:f7:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:48 2025 by rpki-client