Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134342e302f32342d3234203d3e2034383030.roa
File: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (raw, json)
Hash identifier: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=
Subject key identifier: 0F:66:73:8A:4B:FE:64:81:12:54:58:41:65:8C:C7:C1:B4:BB:FF:05
Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365
Certificate serial: 24589260FF9179F5CAF6D31204A19C2E642A9FD9
Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134342e302f32342d3234203d3e2034383030.roa
Signing time: Thu 05 Dec 2024 07:00:01 +0000
ROA not before: Thu 05 Dec 2024 06:55:01 +0000
ROA not after: Thu 04 Dec 2025 07:00:01 +0000
asID: 4800
IP address blocks: 103.96.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:58:92:60:ff:91:79:f5:ca:f6:d3:12:04:a1:9c:2e:64:2a:9f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365
Validity
Not Before: Dec 5 06:55:01 2024 GMT
Not After : Dec 4 07:00:01 2025 GMT
Subject: CN=0F66738A4BFE648112545841658CC7C1B4BBFF05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:69:d2:8f:83:c9:21:83:10:1d:6e:19:e6:
5d:57:bc:6f:6c:8d:f6:fb:ec:be:a9:1f:a1:c6:b9:
b8:d4:cb:45:a9:05:97:f8:04:e5:b7:a9:8c:5c:ae:
c5:15:24:78:43:30:b0:27:ad:d8:ba:c5:b0:fb:b5:
71:86:0a:e9:a5:14:35:a4:99:9c:16:92:8f:80:75:
56:3b:e7:01:71:e2:19:e1:b7:45:4b:e1:26:1b:b3:
a8:a9:7a:69:9e:ee:87:08:19:61:c5:5a:4f:4b:e4:
6c:7a:9a:23:67:ff:ee:51:45:c8:b3:9b:43:b8:81:
0b:30:9e:ab:42:d8:39:85:a2:75:fb:30:9b:13:be:
c7:eb:96:2a:e7:32:3f:e6:44:79:d5:8f:f8:42:9d:
89:c6:f2:61:9f:83:94:d7:13:7e:aa:cd:0b:4b:43:
f9:42:f6:11:4b:62:10:ba:09:76:d1:3e:0d:6c:07:
75:ea:27:38:62:03:4a:cd:92:5f:3a:ac:5d:9f:4b:
2a:c0:b6:5e:22:af:b7:17:87:f1:b4:e7:cc:3e:dc:
b2:22:75:ad:d0:ee:ba:4f:b8:58:bd:15:c4:80:80:
26:63:6c:c8:18:3e:ad:07:9b:10:87:19:b4:e7:9f:
7d:c2:a8:87:e0:f9:f9:25:15:54:63:b8:d9:57:68:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:73:8A:4B:FE:64:81:12:54:58:41:65:8C:C7:C1:B4:BB:FF:05
X509v3 Authority Key Identifier:
keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3130332e39362e3134342e302f32342d3234203d3e2034383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.144.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1a:c3:01:bd:c0:ab:3d:0b:f8:ae:82:16:5c:46:79:d4:c5:
99:fc:b9:78:be:d9:a8:fe:dd:c9:56:99:ec:dd:59:dd:4c:c9:
69:42:7e:dc:58:14:af:34:dc:b5:b5:cb:27:0b:c4:22:d5:da:
ac:d9:b3:6c:ae:ae:e3:80:bb:88:78:24:4a:27:12:4e:07:f7:
d4:a2:b8:56:44:25:27:a0:aa:39:55:e3:2a:08:de:5b:d4:f9:
83:e9:db:82:7d:20:67:5d:d0:5b:79:6a:3d:46:a6:5a:41:2e:
77:61:4d:fa:c6:7f:fb:1a:bc:b7:4a:7c:79:8b:e0:f1:a8:23:
8a:dd:d9:8e:ae:9b:e9:4c:5e:32:9b:8c:4d:e3:d1:38:a6:8c:
d0:9f:f5:8e:34:c7:25:d0:8a:2d:1a:14:47:76:2e:6a:6d:2b:
63:47:df:ab:8e:77:b1:42:b4:b7:23:ca:10:e6:0e:45:45:d7:
b7:00:80:b4:1b:f6:c7:72:4c:6d:57:24:8f:da:e1:1c:19:84:
66:8d:5a:a8:61:da:f0:4c:70:34:0d:fe:64:5e:e1:65:15:24:
8c:97:c5:ba:d8:7e:77:e7:74:d5:c0:f3:09:01:c9:ca:a9:5c:
9d:f2:62:c6:60:e1:14:9c:cb:c5:84:08:90:71:c9:67:ba:16:
e6:07:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:49 2025 by rpki-client