Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa
File: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (raw, json)
Hash identifier: PxQIpqbQq2jLhpu3Xowhx5fys0b4IY/JPo7Tka0HdFo=
Subject key identifier: B7:7D:54:CD:1A:5D:97:38:5B:7B:0D:A7:A6:37:FD:6D:64:8C:57:7E
Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE
Certificate serial: 28E423C00BC90A1071761BE26FA1D98F65185093
Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa
Signing time: Tue 26 Nov 2024 10:02:34 +0000
ROA not before: Tue 26 Nov 2024 09:57:34 +0000
ROA not after: Tue 25 Nov 2025 10:02:34 +0000
asID: 56260
IP address blocks: 103.29.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e4:23:c0:0b:c9:0a:10:71:76:1b:e2:6f:a1:d9:8f:65:18:50:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE
Validity
Not Before: Nov 26 09:57:34 2024 GMT
Not After : Nov 25 10:02:34 2025 GMT
Subject: CN=B77D54CD1A5D97385B7B0DA7A637FD6D648C577E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:b2:35:91:f8:46:7e:5a:8b:81:d9:d1:fc:
78:bb:bb:5c:e7:ac:22:53:a6:e7:45:98:a8:bb:bf:
67:95:1c:fe:d8:9c:c9:c2:d9:38:ef:58:a6:87:8c:
fe:5d:61:d3:b7:08:34:03:26:57:e8:b9:f7:23:d7:
95:65:67:8e:e3:52:03:44:63:96:6c:3a:44:e5:55:
14:f9:02:09:49:2b:03:b2:90:62:c5:d1:14:07:d3:
67:17:a7:46:11:b0:78:b8:3c:be:90:03:52:a0:58:
a5:51:55:d2:1d:36:b3:18:27:0e:6d:74:0a:10:a8:
5c:a7:4b:48:f7:64:4b:31:c8:4f:52:10:ab:9f:05:
f4:84:fa:25:68:5e:ab:bd:e9:2b:7b:45:68:e1:f1:
be:91:59:5a:91:d5:1c:27:17:fa:ed:df:c7:e5:41:
ab:66:4c:a9:42:f8:18:88:3c:7d:91:69:43:49:60:
7d:89:8a:cf:e3:d2:be:33:a6:85:57:da:31:e2:09:
a1:d2:52:30:cb:74:e4:af:61:1e:ca:7d:26:d3:a0:
d7:c1:9e:88:0a:b7:e4:2a:7d:57:61:73:cb:85:cb:
11:f7:2f:b3:4a:1c:16:f5:05:22:fd:56:89:4d:83:
02:1e:b9:06:81:4e:1e:63:ac:18:a1:2a:2e:63:13:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:54:CD:1A:5D:97:38:5B:7B:0D:A7:A6:37:FD:6D:64:8C:57:7E
X509v3 Authority Key Identifier:
keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:34:91:a3:9e:ac:77:04:5b:f3:63:27:15:c6:0b:c0:c3:78:
b2:d3:13:47:b9:ff:f6:92:b4:6a:4b:d3:f8:89:be:d4:98:e3:
49:fd:59:5a:a0:f0:83:45:1c:5e:35:de:40:ce:e3:00:ef:0a:
8d:19:a9:c1:2c:e7:57:65:14:b9:fe:4b:8c:05:6d:fe:5c:70:
83:6c:b5:4a:7a:84:13:53:fa:23:3e:de:13:c4:05:4c:0a:7c:
09:63:70:d2:4a:7b:4e:05:6c:7a:a5:99:e8:71:01:de:97:85:
08:f1:cc:cf:26:44:d6:4d:0d:86:d4:11:44:7d:17:80:e5:a4:
b1:c7:45:ae:4d:96:53:b5:37:b3:08:67:cf:72:42:45:42:41:
e4:04:e8:20:5f:a3:cb:6a:82:a3:36:b1:3d:87:ab:d7:33:0f:
f0:c1:2d:cc:2f:14:9e:46:9c:d4:b4:e5:72:a7:9a:56:81:45:
ee:80:a1:77:ac:c9:68:cc:8f:4c:83:04:02:49:e9:84:7b:97:
68:bd:9a:ac:95:ee:3a:b9:e9:4d:1b:b9:46:90:9b:54:43:f6:
3c:53:5b:7c:8f:d0:cd:da:6e:2c:4d:7a:d3:8a:9c:1b:5f:32:
5e:1b:94:49:5d:b3:8a:93:03:82:2d:7d:db:c0:49:ba:9b:ab:
3c:28:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:34 2025 by rpki-client