Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa
File: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (raw, json)
Hash identifier: 9VCyBS9IIeec/M2Dmo8IoJQFogFZ4Fro1YlaePTTG58=
Subject key identifier: D4:99:EE:1C:87:74:30:79:93:6E:49:33:86:24:A0:95:8E:29:28:02
Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413
Certificate serial: 133C1694D0182CBF83C3AC603C4A434E67718B2E
Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa
Signing time: Fri 13 Sep 2024 03:01:25 +0000
ROA not before: Fri 13 Sep 2024 02:56:25 +0000
ROA not after: Fri 12 Sep 2025 03:01:25 +0000
asID: 149934
IP address blocks: 103.191.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3c:16:94:d0:18:2c:bf:83:c3:ac:60:3c:4a:43:4e:67:71:8b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413
Validity
Not Before: Sep 13 02:56:25 2024 GMT
Not After : Sep 12 03:01:25 2025 GMT
Subject: CN=D499EE1C87743079936E49338624A0958E292802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:81:cf:99:8a:91:51:2c:ee:fb:da:94:be:
e2:68:f3:ba:c6:46:c8:82:13:83:be:5c:76:be:fb:
36:2c:47:9c:1e:0c:e1:0a:64:db:43:55:2f:24:15:
bf:71:eb:81:28:21:e4:89:27:34:10:b7:fd:2e:2b:
00:00:ad:13:d1:2f:f5:07:99:80:2b:c1:df:a3:8b:
33:66:ff:ab:39:ac:14:97:ca:36:4a:81:f7:1a:28:
42:6e:6b:71:52:21:d5:83:b3:e1:5e:45:ed:e6:1e:
85:5c:7b:3d:cf:d6:7d:a0:b2:4a:30:bc:dd:98:41:
76:3a:03:8d:4e:d3:1f:e0:cd:b8:05:22:62:3f:72:
67:c8:30:c1:59:d7:7d:1c:ea:f4:0a:93:74:be:01:
3c:ea:3a:55:0a:69:c8:b1:a9:1e:75:4a:4d:db:e9:
74:64:c4:b7:a0:4b:6f:18:1f:fe:52:55:89:6c:9a:
ff:c5:fd:53:23:46:43:61:53:1a:32:39:76:39:27:
fe:3b:60:7b:43:2d:3b:1b:64:cc:41:8a:df:f5:ff:
a3:6a:54:8f:90:21:76:38:7f:6e:46:54:74:9e:ee:
d9:23:16:63:9b:9f:2c:5d:5d:2b:44:c8:2a:51:1e:
3e:68:33:96:e0:04:60:0f:37:34:0e:ce:e7:3f:23:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:99:EE:1C:87:74:30:79:93:6E:49:33:86:24:A0:95:8E:29:28:02
X509v3 Authority Key Identifier:
keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:67:b8:9a:7d:13:08:8c:92:97:27:d3:43:2a:cb:0b:04:20:
ec:c2:d7:8e:70:66:c9:da:31:80:8e:f0:0e:05:6a:bd:6d:46:
b5:27:11:0a:71:16:59:5c:dc:2b:a5:37:19:1f:4b:74:a9:da:
76:ca:cd:09:25:72:8c:5d:32:e0:2f:aa:b7:18:1b:df:20:4f:
f0:c4:6d:31:49:91:bc:81:73:f7:eb:91:d2:b1:d1:31:83:89:
f5:ea:21:cc:a7:33:92:ba:cb:1d:d0:69:36:5e:26:18:9d:2f:
c2:f1:e4:00:52:94:92:27:70:da:88:47:b0:7f:af:a9:58:7c:
c9:22:88:fd:66:27:11:ec:43:49:29:b4:64:37:eb:94:c0:1f:
58:7f:87:38:ca:d5:4d:10:06:e5:d9:4d:82:93:83:da:5a:f9:
44:bc:44:d7:6d:39:6f:ec:35:f0:1f:6b:c7:ea:11:42:ee:24:
95:5f:13:c2:22:0f:d7:14:dd:01:be:67:5e:24:3e:ee:6a:6a:
f7:4c:9f:16:00:02:ed:e4:5d:21:5f:fe:ca:5e:54:2c:8e:d9:
f2:5f:6b:28:39:d7:7a:58:95:6c:5e:6e:77:0f:9c:5d:3d:01:
f2:76:3a:9e:7e:0f:11:65:ed:65:1c:e7:63:1d:ff:68:f2:3c:
5f:cb:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:02 2025 by rpki-client