Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa
File: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (raw, json)
Hash identifier: dehAdCQa2rj7pyUCMHYZPbkXEG87vkJWPD4EN4G4cvU=
Subject key identifier: 8D:0F:03:E2:2B:04:2C:88:C7:9D:30:55:0C:B4:F0:43:C9:02:87:F6
Certificate issuer: /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Certificate serial: 2D6AAC14605BC17E7080B3893C6FE205F937672B
Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa
Signing time: Tue 03 Dec 2024 06:37:52 +0000
ROA not before: Tue 03 Dec 2024 06:32:52 +0000
ROA not after: Tue 02 Dec 2025 06:37:52 +0000
asID: 149320
IP address blocks: 103.178.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:6a:ac:14:60:5b:c1:7e:70:80:b3:89:3c:6f:e2:05:f9:37:67:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Validity
Not Before: Dec 3 06:32:52 2024 GMT
Not After : Dec 2 06:37:52 2025 GMT
Subject: CN=8D0F03E22B042C88C79D30550CB4F043C90287F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:a1:cf:33:29:42:71:98:7b:76:18:72:75:
d4:9b:c7:2d:8f:5d:cd:75:67:c7:02:81:c7:2b:a3:
13:bb:50:f2:51:9d:98:db:81:e7:2d:6e:c0:d9:9e:
5c:2c:05:d4:46:2c:8e:22:1f:76:e9:b3:c6:4d:c7:
ed:7b:e2:f0:89:14:7e:54:76:98:d6:95:df:fd:8a:
9e:39:9d:7b:fa:d9:38:7f:0d:88:f9:d7:12:50:8b:
86:ea:ea:e4:91:ee:93:45:5f:5b:52:cb:a8:c6:4c:
37:3a:64:c4:4b:4b:64:04:ca:f4:e5:a0:a6:ac:a4:
be:50:7c:d7:76:a5:28:2e:42:9b:e8:0c:77:1a:44:
76:aa:39:68:46:13:5a:58:86:f5:24:b4:66:9f:d3:
85:08:ea:11:9a:d7:02:bb:e8:0a:ec:6e:3d:91:40:
5d:56:5e:e5:40:9b:e4:c7:f9:e8:70:27:bf:bd:db:
39:00:9c:a3:71:1b:66:f8:c0:c8:38:89:f6:fa:eb:
0b:6d:f9:93:06:9e:ff:c8:07:f1:47:f1:fc:ac:53:
47:4a:10:2e:f2:6f:36:71:5c:9a:03:d1:70:b4:2c:
bb:9c:68:24:ee:3b:42:41:ff:77:5b:1e:52:ad:89:
11:c1:fe:5c:fd:21:7c:90:b9:8e:ac:61:c7:4d:62:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0F:03:E2:2B:04:2C:88:C7:9D:30:55:0C:B4:F0:43:C9:02:87:F6
X509v3 Authority Key Identifier:
keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.87.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0c:42:ca:f2:fd:26:38:9a:f8:85:4a:a0:d1:02:03:53:1d:
30:28:4a:bb:fb:d6:82:77:10:04:cb:23:92:13:06:01:26:78:
28:d9:01:68:b1:a0:93:d6:d0:6c:2c:67:84:b5:f4:3e:b0:6c:
52:b7:6d:d2:57:05:f1:f3:45:a7:de:cb:1c:a8:fd:09:11:c7:
18:8d:bd:8f:96:f4:bb:eb:91:18:b1:23:ea:c7:7a:b0:d2:77:
0a:30:a4:63:f0:88:6a:0e:b7:a6:7f:c0:bc:86:35:79:c8:6a:
8b:37:bf:f6:e2:5c:ea:47:b3:9c:b9:f0:01:92:7a:e1:09:50:
d7:75:81:d9:e6:1c:aa:39:9e:9e:b2:ca:e2:d9:85:d8:a5:32:
91:80:a6:1a:dd:38:32:b9:94:44:2a:96:c3:a9:6b:27:75:8b:
02:a8:3e:70:01:32:44:54:e0:95:58:68:f6:27:77:1a:be:09:
2a:fd:63:3b:83:13:77:72:95:a9:97:bf:61:6b:1e:52:44:b3:
a5:2f:21:6f:16:27:15:ec:05:08:1d:16:54:f1:2e:06:bc:30:
b2:68:98:92:fe:92:e3:c5:32:37:d0:39:7e:2a:62:ea:5a:68:
f1:6e:8e:d0:55:d1:d8:f0:88:87:0c:e7:7e:45:51:56:7d:9f:
e0:75:e9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:21 2025 by rpki-client