Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32342d3234203d3e20313431313037.roa
File: 3130332e3134332e3137302e302f32342d3234203d3e20313431313037.roa (raw, json)
Hash identifier: llL/8pQb/2LABEEjhc9W4h7pY+PfclECH/JcgOOsdB8=
Subject key identifier: 5A:33:9B:A9:ED:F6:E0:E4:53:DD:07:CD:36:40:74:A6:55:C0:95:E1
Certificate issuer: /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Certificate serial: 1DC82E37827F43EFE8C21A8E7C369D97960B997D
Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32342d3234203d3e20313431313037.roa
Signing time: Tue 05 Nov 2024 12:36:34 +0000
ROA not before: Tue 05 Nov 2024 12:31:34 +0000
ROA not after: Tue 04 Nov 2025 12:36:34 +0000
asID: 141107
IP address blocks: 103.143.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c8:2e:37:82:7f:43:ef:e8:c2:1a:8e:7c:36:9d:97:96:0b:99:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Validity
Not Before: Nov 5 12:31:34 2024 GMT
Not After : Nov 4 12:36:34 2025 GMT
Subject: CN=5A339BA9EDF6E0E453DD07CD364074A655C095E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:46:ee:d1:a3:83:0e:13:73:8d:ee:b7:88:
7f:58:7a:be:22:7f:92:5b:e3:1b:0a:01:e3:6f:c3:
89:a1:56:6b:14:90:cc:13:ac:58:9c:49:99:62:41:
d9:af:bb:42:00:fd:ad:5f:ce:3a:0d:3d:d1:27:c8:
8a:93:9e:e6:f2:60:54:c2:cc:22:ff:61:cc:c8:1f:
7c:d7:a8:3f:a7:9c:71:5f:66:22:01:94:fb:57:5d:
c8:c1:ce:b9:ce:44:6f:0e:47:d1:80:b4:72:1a:f9:
d2:bf:2d:f6:ed:41:26:a7:54:30:16:b7:9f:e2:18:
48:e4:c0:09:c3:6a:69:66:ca:f8:5b:e3:ca:85:dc:
44:c8:48:3f:5b:89:b8:db:94:c8:5d:34:c6:97:06:
e2:19:be:0a:1e:c4:a3:f3:84:38:25:63:90:f4:18:
c1:42:af:bd:5e:77:86:4a:19:ab:8b:44:21:12:33:
c3:d5:31:e7:7b:7f:6c:50:c2:17:48:e5:78:02:1a:
aa:9b:78:14:87:d3:3c:2f:81:95:2e:f4:b5:c0:9f:
80:5b:d0:bd:fb:e2:6f:9e:b7:95:54:5f:79:e8:aa:
78:c0:41:7d:ad:dd:42:97:69:78:73:37:ae:09:55:
3d:68:69:93:9b:ee:a3:17:b5:5e:cf:b9:76:99:08:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:33:9B:A9:ED:F6:E0:E4:53:DD:07:CD:36:40:74:A6:55:C0:95:E1
X509v3 Authority Key Identifier:
keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32342d3234203d3e20313431313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.170.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:6c:79:ab:8a:b6:63:ec:4c:3a:a9:c5:1b:96:f4:ea:60:1d:
e4:00:31:15:43:b7:ec:61:b6:7c:b1:14:fc:c1:3d:d1:38:f8:
93:6e:8c:3c:b6:8d:ae:f7:6c:7e:f5:7e:56:c0:85:20:31:78:
92:4d:16:40:6d:13:70:c2:e6:13:86:de:68:c2:a3:6a:45:51:
90:89:73:72:a8:61:1a:5a:e9:ea:03:ef:ea:0f:a5:fc:31:a5:
bc:72:fd:48:83:5d:45:2c:26:ed:d1:26:18:6f:75:5c:39:48:
52:64:e9:67:d5:4c:12:7b:7a:42:cd:00:e1:a9:f8:8b:43:6d:
77:56:d3:70:76:82:fc:2c:57:c8:3d:78:2c:9f:66:3b:81:b1:
a9:22:84:a5:d9:11:7d:92:7f:bc:4d:38:df:58:9a:67:14:1d:
79:77:e8:24:a8:12:d4:49:a1:fa:52:3a:42:5f:4a:31:b5:20:
cb:1c:58:33:4f:e4:f4:ec:22:93:dc:75:78:cf:58:2b:b1:ec:
64:17:c8:2f:93:a7:59:3c:4e:9f:a9:5c:36:83:fa:a5:89:8b:
c4:b0:ed:1a:c7:6a:b4:70:3a:09:ff:1f:89:29:61:5a:01:08:
6e:65:d8:28:71:c3:4d:94:13:df:4a:d6:d4:9a:37:c0:8b:18:
55:34:67:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:38 2025 by rpki-client