Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa
File: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (raw, json)
Hash identifier: 2o2Ekkt+3oPedQ6t7WSvFM6gdfyWmdr+vQqMDBCvSgE=
Subject key identifier: CB:A2:B5:9F:49:22:1D:FC:D1:2E:4D:13:90:EB:21:A9:ED:05:14:48
Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8
Certificate serial: 7B7E4C4C544D1EC6D983AF72A61687EF1767B789
Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa
Signing time: Thu 08 Aug 2024 04:58:32 +0000
ROA not before: Thu 08 Aug 2024 04:53:32 +0000
ROA not after: Thu 07 Aug 2025 04:58:32 +0000
asID: 141606
IP address blocks: 103.160.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7e:4c:4c:54:4d:1e:c6:d9:83:af:72:a6:16:87:ef:17:67:b7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8
Validity
Not Before: Aug 8 04:53:32 2024 GMT
Not After : Aug 7 04:58:32 2025 GMT
Subject: CN=CBA2B59F49221DFCD12E4D1390EB21A9ED051448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:42:ad:93:c0:56:76:04:c4:af:88:28:3d:
88:cd:a4:b4:02:33:31:12:b1:15:0c:7c:63:9f:fd:
3c:6c:48:f7:e6:91:57:06:78:44:5d:84:33:59:bc:
e9:66:90:18:2e:44:85:49:fa:58:71:a3:d7:74:e3:
f5:9f:6a:e6:15:98:81:30:c0:1b:a3:f1:7e:c2:09:
91:bc:d2:90:69:1c:e4:56:10:c9:c8:93:46:c3:8b:
be:96:94:9a:42:7e:7b:f1:d3:4d:b1:f0:eb:cc:94:
1a:a7:2d:38:6b:46:b8:a5:92:84:ba:e6:93:4f:ab:
db:45:31:51:6b:78:fc:5c:3f:6f:8f:87:b9:f9:ea:
46:74:46:1f:26:db:fb:c0:9b:3c:cd:20:b1:2c:c7:
b7:eb:28:64:b9:1c:ba:8d:81:f6:8e:63:e8:08:42:
5b:01:70:c4:bb:83:c5:97:5b:26:fe:3b:1c:17:53:
90:2f:4a:ec:54:60:f0:71:f5:2e:19:2c:e3:19:5b:
65:ed:7e:b6:f7:e0:b7:61:e6:d8:9e:3e:0c:c0:d1:
25:5b:6f:bf:80:76:3f:fa:3d:04:14:2f:df:59:af:
d5:b7:a4:3a:1c:6a:ef:12:c3:4d:62:fd:2f:6c:c1:
b4:86:e7:ec:74:45:a7:73:45:1b:62:9f:36:3a:e7:
0f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A2:B5:9F:49:22:1D:FC:D1:2E:4D:13:90:EB:21:A9:ED:05:14:48
X509v3 Authority Key Identifier:
keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:76:e3:76:0e:d7:f9:9b:fb:2c:18:83:b5:72:f2:37:4e:a9:
59:25:be:3d:39:6b:ff:51:52:10:39:ff:7d:1d:00:b7:b2:05:
74:da:77:d5:b8:76:a3:ff:33:93:95:d1:4f:91:92:69:43:4b:
42:d0:55:36:85:92:35:58:f7:32:ef:8d:f8:33:3a:9f:a9:72:
3f:a8:2d:67:70:ff:21:54:e5:2f:9d:4e:32:fb:58:b0:a6:86:
1f:bf:99:e8:98:e9:b1:bc:aa:07:a3:97:b3:60:fe:a7:e7:4b:
17:51:e3:84:a5:c9:93:5a:4e:43:45:6a:08:49:0a:b3:8b:bc:
6f:41:3e:9b:56:cd:0b:e6:28:1e:be:99:bd:53:1a:81:89:4a:
d5:1a:b6:8c:77:be:1d:34:e8:a5:fa:29:e7:da:05:a3:f0:30:
6d:e4:56:51:92:8c:e1:e1:3b:c5:50:47:11:5f:98:f2:76:47:
97:b6:36:5f:fe:cb:c7:17:9f:2b:5f:91:88:e4:09:cb:b8:49:
2e:26:8e:47:17:44:8a:b6:34:cd:b0:47:9f:1a:2b:7f:58:9a:
e4:73:1e:f8:97:1f:d9:03:44:55:41:8f:0d:75:64:94:c3:8f:
54:92:59:03:6c:5b:86:4f:ca:98:9b:ad:4a:d1:cd:02:3e:0a:
ee:cc:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:06:27 2025 by rpki-client