Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130372e302f32342d3234203d3e203538343832.roa
File: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (raw, json)
Hash identifier: 4O8b726/lpcYZIzCbq+BOqW7rrh6L+bwyN5I34NP9Oc=
Subject key identifier: 1D:2D:65:C1:85:8F:23:55:D8:D0:38:B8:19:0C:00:AD:91:DC:B0:83
Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE
Certificate serial: 0FCCCA0D69958FAA0F5AABD3BC4CC765A5FAE133
Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130372e302f32342d3234203d3e203538343832.roa
Signing time: Tue 26 Nov 2024 10:02:34 +0000
ROA not before: Tue 26 Nov 2024 09:57:34 +0000
ROA not after: Tue 25 Nov 2025 10:02:34 +0000
asID: 58482
IP address blocks: 103.11.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:cc:ca:0d:69:95:8f:aa:0f:5a:ab:d3:bc:4c:c7:65:a5:fa:e1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE
Validity
Not Before: Nov 26 09:57:34 2024 GMT
Not After : Nov 25 10:02:34 2025 GMT
Subject: CN=1D2D65C1858F2355D8D038B8190C00AD91DCB083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:16:cb:93:aa:ea:a1:82:7c:81:c2:d1:0e:
5f:61:9b:1e:0b:67:ef:35:0c:4d:d1:c2:c7:b9:d1:
46:45:f3:eb:67:98:35:c0:d8:e7:47:85:9a:c2:5c:
f9:07:0c:f7:2c:22:fa:8a:5d:0f:80:fc:78:bb:85:
49:cd:5c:8d:93:7b:09:b2:db:7a:6f:8e:3a:ce:ef:
66:6d:65:5f:de:65:4f:36:6b:53:18:a2:71:e6:06:
a0:8f:59:59:a2:1a:c3:ad:75:e2:8e:61:ff:bd:36:
2a:40:b2:fa:e7:b1:60:04:ae:1f:1a:3d:f7:31:c1:
16:de:1c:6f:66:0d:36:7f:32:96:53:d1:ee:d5:21:
15:33:c7:24:26:6a:b7:b2:cb:8f:b5:bf:a4:35:94:
4f:0f:58:53:7b:30:0a:ec:b0:4a:b4:c8:62:6b:fa:
e2:d7:99:44:e5:81:1b:cd:c5:1e:c1:8f:38:ce:81:
e1:15:cc:8d:0b:7e:b6:f1:34:94:26:eb:24:de:91:
19:ce:50:36:66:cb:99:83:62:06:77:d7:97:17:60:
63:38:07:9a:c1:1a:82:ea:c0:60:ea:52:5b:71:1c:
2e:4d:08:2c:a3:68:56:09:8b:55:7e:b5:ba:62:e3:
a4:b6:7f:03:17:c0:ca:ad:b3:b8:32:5e:d9:f6:ff:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2D:65:C1:85:8F:23:55:D8:D0:38:B8:19:0C:00:AD:91:DC:B0:83
X509v3 Authority Key Identifier:
keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130372e302f32342d3234203d3e203538343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.11.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:34:4e:e3:77:c3:c6:71:d2:a3:e2:b0:a8:48:6e:06:84:fd:
a3:8a:e2:f8:81:0d:40:c7:a2:ad:ee:d2:a5:8b:dc:8a:1a:a5:
77:6a:28:12:b3:51:9d:ce:3d:39:36:b7:79:45:fc:7c:9b:76:
8f:65:47:22:ca:7a:0c:14:a2:9c:97:48:2a:17:81:60:81:5a:
e6:34:5c:7a:96:00:de:c6:ef:e8:81:2a:62:d5:88:24:b7:cc:
81:f0:3d:d7:5f:76:3e:1e:dd:4f:58:76:a6:1b:88:4c:46:98:
4c:e4:b5:7f:48:db:4d:c6:29:1c:ef:1d:90:e1:d6:65:f1:78:
c4:09:b0:a3:92:59:af:18:0b:76:b6:d6:9e:08:35:85:e7:08:
b3:4b:89:d4:e2:53:f8:92:28:89:86:34:e2:ab:b6:ba:d2:6d:
17:83:09:8c:af:82:52:85:fb:a3:7a:60:31:14:93:eb:61:70:
05:19:74:36:4e:c2:1a:0d:4b:7d:bd:a0:d8:8f:71:6f:65:71:
42:1c:c0:0f:c9:20:ba:57:0e:78:e7:99:e0:07:a3:d6:dc:fe:
f5:22:24:5e:61:ce:2c:24:d8:be:53:fe:8a:40:f2:4b:17:ff:
cb:74:16:b8:d7:68:1f:37:0d:48:23:a7:e8:13:66:04:2d:b5:
e8:ef:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:31 2025 by rpki-client