Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa
File: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (raw, json)
Hash identifier: s3woNilAqQ5e2dgXjfA4LkNTSDClHTfmkA54qmgHa2s=
Subject key identifier: 24:B0:76:40:34:0A:5B:ED:7E:0F:F5:EA:1E:9E:4A:54:9B:C4:29:FE
Certificate issuer: /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Certificate serial: 178D17379B20E7647A32314EF0FF278BEF121525
Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa
Signing time: Fri 07 Feb 2025 08:42:45 +0000
ROA not before: Fri 07 Feb 2025 08:37:45 +0000
ROA not after: Fri 06 Feb 2026 08:42:45 +0000
asID: 139400
IP address blocks: 103.143.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8d:17:37:9b:20:e7:64:7a:32:31:4e:f0:ff:27:8b:ef:12:15:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Validity
Not Before: Feb 7 08:37:45 2025 GMT
Not After : Feb 6 08:42:45 2026 GMT
Subject: CN=24B07640340A5BED7E0FF5EA1E9E4A549BC429FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:a7:91:10:14:8b:9e:22:35:6a:34:10:81:
09:81:a0:f9:aa:f8:d2:31:09:6e:8c:b9:81:fa:bc:
f6:d4:0a:cd:b0:2a:43:44:a1:42:e1:12:8e:a6:14:
71:9a:0e:f1:34:d9:7e:4f:0c:ea:77:3a:cb:73:a8:
73:67:73:64:2d:94:4f:55:fe:4f:2c:0a:8b:14:ed:
8f:99:df:73:68:37:a5:68:4f:50:20:90:c3:98:f2:
8f:69:c6:c4:2d:8c:db:60:9a:93:88:b7:45:43:b4:
64:c3:d3:e4:1a:dc:d1:cd:a7:5d:2f:28:b8:be:ab:
e0:eb:1e:32:4e:d0:ba:8d:e0:c8:5d:62:ff:0c:a4:
5b:e3:96:bb:e0:3d:e3:ab:e1:29:5f:63:5f:43:e4:
d6:92:f4:f8:93:49:ec:74:a8:c6:80:33:80:29:a4:
14:0b:07:ea:20:ec:71:53:c9:43:ef:04:e2:fd:94:
dc:f7:11:59:8e:f2:5a:66:44:b9:1f:86:ac:65:63:
ae:5f:f4:31:58:25:37:f4:1b:a6:60:a4:62:9f:20:
58:1e:66:7d:ee:ff:4c:79:a3:1b:56:79:b1:c7:16:
8d:bb:94:38:18:41:71:81:03:c1:ab:67:11:8f:f2:
b4:50:b0:2f:74:60:d6:77:f7:65:16:37:b9:82:f5:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:76:40:34:0A:5B:ED:7E:0F:F5:EA:1E:9E:4A:54:9B:C4:29:FE
X509v3 Authority Key Identifier:
keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.170.0/23
Signature Algorithm: sha256WithRSAEncryption
67:cb:73:72:c1:40:5b:81:3a:5a:d5:46:0d:f4:af:5d:df:1f:
da:d5:0a:44:38:dc:18:95:47:2b:7c:48:0e:8b:42:81:41:8c:
03:39:ae:e7:e9:55:38:be:b3:dd:c8:86:41:c6:a5:16:77:12:
95:49:03:36:af:df:64:30:a6:bb:79:71:dc:54:b5:10:ba:7f:
51:df:0c:c9:2b:6b:18:02:84:42:09:1c:08:a7:0a:67:ad:de:
fc:23:3d:f2:72:e1:a2:ea:d0:83:58:0a:cc:03:1b:94:aa:06:
30:c5:e2:72:6f:b1:66:ad:73:9e:fa:e6:57:63:17:09:60:a6:
cd:b1:23:c7:28:e0:04:ea:6e:45:f4:b8:d6:f6:2f:da:b1:2a:
05:2b:1a:f9:eb:d2:10:04:ed:5a:e9:15:88:db:18:08:ab:84:
44:f5:a3:25:6d:06:20:42:71:b0:50:85:2c:e5:75:cf:42:f0:
e1:b0:26:6d:fa:93:bb:36:26:de:de:be:cc:29:c7:ff:bd:99:
c7:71:ce:dc:ca:26:ee:62:82:cd:ae:a6:29:89:4e:2a:bd:04:
ea:89:fe:b3:b3:66:d6:37:1a:75:ae:d1:ba:cb:53:2c:d2:44:
f5:09:2d:23:94:1e:a7:d2:8a:aa:28:97:9f:1a:35:2f:81:05:
fe:3d:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:10 2025 by rpki-client