Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa
File: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (raw, json)
Hash identifier: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=
Subject key identifier: C0:94:97:79:1F:1C:C5:18:2F:5A:86:1B:E6:ED:5E:A1:AD:53:19:F5
Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial: 2DEBE73BDE2FF5E24FB428AB264640615B6A5C8E
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa
Signing time: Fri 14 Feb 2025 06:00:01 +0000
ROA not before: Fri 14 Feb 2025 05:55:01 +0000
ROA not after: Fri 13 Feb 2026 06:00:01 +0000
asID: 136052
IP address blocks: 103.54.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:eb:e7:3b:de:2f:f5:e2:4f:b4:28:ab:26:46:40:61:5b:6a:5c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Validity
Not Before: Feb 14 05:55:01 2025 GMT
Not After : Feb 13 06:00:01 2026 GMT
Subject: CN=C09497791F1CC5182F5A861BE6ED5EA1AD5319F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:bf:62:3b:1f:cc:82:26:81:a7:66:64:64:
f3:53:67:ea:eb:38:4c:16:ec:4c:da:b9:48:c6:b2:
66:f6:13:54:30:49:7d:31:75:83:35:49:04:26:ad:
b7:00:cc:6a:ed:00:b4:76:ff:59:e8:13:85:91:bc:
e9:5d:32:49:13:14:ce:1e:14:b3:6a:97:c4:51:6c:
b0:5d:e1:25:b5:1e:e2:67:a3:94:7e:a9:9d:84:4b:
9a:5c:5e:17:db:f1:96:b8:e0:f1:4c:46:54:70:35:
4b:df:38:9b:ab:8b:0a:a0:67:8a:6c:54:02:08:bf:
37:fc:69:cd:2f:97:db:b8:84:7b:8d:a5:e5:32:38:
c1:5e:5b:2a:1b:b7:a7:38:58:4e:8c:4c:43:20:db:
2b:79:76:08:44:b7:94:aa:e2:7f:65:41:33:18:9c:
15:1a:de:ef:e8:63:c9:3a:34:63:2f:69:57:e7:c7:
00:4b:dd:05:e3:b0:bb:d4:51:a6:49:59:10:a6:b3:
d4:c9:08:33:68:97:3b:e8:12:1c:69:96:33:3c:53:
8b:ff:ff:69:fc:c6:17:93:e7:a0:7b:73:cf:92:21:
0e:09:0c:b0:60:e5:e6:c2:4f:32:2c:8d:9b:e8:8b:
b9:98:a8:7e:e6:a0:6a:b7:dd:73:d3:1e:62:f3:5b:
da:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:97:79:1F:1C:C5:18:2F:5A:86:1B:E6:ED:5E:A1:AD:53:19:F5
X509v3 Authority Key Identifier:
keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.170.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f9:2e:a6:fc:c4:d7:af:19:2b:f2:54:2d:0a:d6:de:80:8c:
ce:18:c5:0d:90:9d:8c:68:88:00:53:a2:11:86:5e:27:be:8a:
95:ba:65:87:a2:73:22:ea:bf:d0:ea:e4:ab:24:45:73:ad:fb:
10:58:47:a9:f1:df:b2:3d:82:2a:f8:d4:b8:cf:22:09:b7:38:
92:09:c5:8e:ef:1b:ed:08:eb:21:2d:03:34:9a:f6:7f:f0:28:
ea:8c:31:1f:ed:d8:42:c3:62:3c:b2:09:f4:82:5e:dd:00:f7:
e6:db:1f:66:4d:88:64:39:4e:e2:be:1c:20:87:c5:f2:92:a8:
96:99:63:62:bc:4a:21:27:aa:19:68:13:7d:72:7d:65:e3:0d:
1d:d6:74:fb:91:77:be:d6:42:a5:07:54:bd:6f:e7:2d:9c:9e:
f7:55:9f:73:62:d5:a2:e9:63:04:ab:0e:f3:78:b1:34:8d:34:
9a:70:22:db:a6:96:59:81:86:c2:ae:b1:31:46:9f:00:b7:3a:
0c:5f:31:03:7a:6f:e7:57:65:46:a8:58:64:ff:5e:10:87:6a:
e0:12:29:55:ae:7a:31:e0:27:ca:74:69:29:e0:d1:0e:55:97:
47:1f:32:39:0a:93:df:a5:0a:4c:3c:38:6e:81:07:99:ff:6e:
da:5b:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:50 2025 by rpki-client