Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa
File: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (raw, json)
Hash identifier: Iwe0dzDJZkpbM2oh646F2V9fsbgZmXXnVXfbPIdM3Aw=
Subject key identifier: AC:B8:C8:3C:AD:4F:C2:36:9E:F8:0B:52:0C:34:40:7E:E3:F0:2A:F0
Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0
Certificate serial: 7942D7F3812F099EF4BB376EFED4AF8141A2A4D0
Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa
Signing time: Wed 31 Jul 2024 03:01:27 +0000
ROA not before: Wed 31 Jul 2024 02:56:27 +0000
ROA not after: Wed 30 Jul 2025 03:01:27 +0000
asID: 149902
IP address blocks: 103.190.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:42:d7:f3:81:2f:09:9e:f4:bb:37:6e:fe:d4:af:81:41:a2:a4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0
Validity
Not Before: Jul 31 02:56:27 2024 GMT
Not After : Jul 30 03:01:27 2025 GMT
Subject: CN=ACB8C83CAD4FC2369EF80B520C34407EE3F02AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:6b:f7:8f:d5:43:2b:96:96:a5:92:54:d1:
20:52:1a:b6:90:b7:82:f5:e6:2b:0e:10:78:f8:95:
32:6f:f3:a3:5b:00:e4:36:1a:2c:69:e9:95:4a:4e:
0f:7b:7f:36:f5:f5:2b:98:9d:a6:73:2a:39:d9:e1:
6d:8a:ae:9c:6d:a1:ca:db:27:1d:c1:76:a6:61:ec:
b8:66:14:81:bc:cb:24:fa:7b:b4:d9:fc:aa:b7:f7:
f9:55:c3:a5:d9:4c:7f:4b:97:38:48:c5:be:06:02:
2c:fe:03:5a:7f:d5:57:ae:57:29:da:a7:33:3e:40:
1b:98:26:a8:bf:5a:47:18:51:45:03:a6:e0:14:90:
97:1b:0b:7b:7f:e5:95:ac:e2:3d:5c:ef:35:35:51:
65:69:20:fa:d3:a1:fe:d3:42:e3:01:5f:e9:1f:e7:
33:c7:53:0d:17:57:37:fc:91:f2:29:ae:f7:68:79:
94:4e:46:5a:1c:3b:a9:f6:38:37:36:fc:82:13:00:
7d:e7:56:76:ef:dd:91:b7:62:bd:ce:90:26:fb:8d:
be:05:6a:24:a0:a1:92:c3:21:0d:53:b6:48:2e:0d:
fe:d6:3d:ff:3b:7f:11:37:6c:56:12:87:8c:46:48:
ad:c5:9a:1b:50:81:bf:85:47:64:e9:c0:f5:c6:c4:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B8:C8:3C:AD:4F:C2:36:9E:F8:0B:52:0C:34:40:7E:E3:F0:2A:F0
X509v3 Authority Key Identifier:
keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:c6:e8:e0:ef:05:b9:70:8f:29:0a:b1:7b:d5:97:02:8e:d1:
42:fe:17:51:71:5a:c2:b2:5a:a0:d2:5e:22:bd:b5:02:be:5d:
13:ba:c9:b8:31:eb:f7:db:50:a9:8b:4c:f7:ae:2b:c1:d2:c4:
60:01:0c:59:b2:b1:0a:b7:2a:bd:38:bd:6d:70:b5:af:46:ef:
ff:d0:46:dc:f5:f5:7b:32:1b:91:21:a3:99:34:4e:66:6d:3e:
74:78:f3:16:44:49:ca:4e:69:08:04:c9:1d:d6:88:b8:e0:a6:
ad:34:b1:27:f3:5a:20:7a:f9:00:97:7c:76:9b:2f:01:08:6c:
5d:9d:9f:89:f1:79:d8:64:0f:2b:d0:d6:66:c1:08:3d:92:12:
e2:73:fb:48:13:72:41:80:32:0f:05:85:3f:00:19:5f:31:7a:
c3:6c:1e:61:24:1e:e9:6e:9c:55:a8:6d:ef:cf:05:fa:45:b1:
d2:6c:8a:8f:34:92:64:24:0d:b8:28:33:94:f5:ff:1a:a7:04:
b1:07:d3:9c:b6:6d:b0:0f:f3:63:e2:bd:af:6a:a6:85:41:08:
f3:06:ed:ed:b6:11:d9:22:8b:75:5e:c2:29:26:aa:5e:57:48:
43:69:f7:31:93:e4:d1:6e:e4:1f:c7:a1:bc:c7:07:19:36:a2:
82:c1:87:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:34 2025 by rpki-client