Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa
File: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (raw, json)
Hash identifier: KcdGqHAlpMYH7r3ADsfnEJAYltqCVwLAupkGM5qHs14=
Subject key identifier: 86:C7:37:6D:FD:C0:2F:66:B6:88:61:EB:4B:90:C4:18:C4:50:FA:A0
Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA
Certificate serial: 07AB536FA1D2E24ADCADDFD19AAEC92F04B0FCA4
Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa
Signing time: Mon 01 Apr 2024 20:00:00 +0000
ROA not before: Mon 01 Apr 2024 19:55:00 +0000
ROA not after: Mon 31 Mar 2025 20:00:00 +0000
asID: 141069
IP address blocks: 103.155.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ab:53:6f:a1:d2:e2:4a:dc:ad:df:d1:9a:ae:c9:2f:04:b0:fc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA
Validity
Not Before: Apr 1 19:55:00 2024 GMT
Not After : Mar 31 20:00:00 2025 GMT
Subject: CN=86C7376DFDC02F66B68861EB4B90C418C450FAA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:08:b6:f2:f4:3d:cc:75:a8:7c:ee:b1:a8:
7c:24:48:2f:bd:f1:71:58:5d:f5:a4:3f:79:b8:dc:
99:93:8c:c4:43:8a:1b:96:5d:cd:be:8d:48:d4:42:
6a:4d:83:0b:d2:89:f8:94:a0:c3:17:fa:7e:88:44:
4e:36:c4:d7:ae:67:ae:46:bf:c4:9f:aa:65:9e:50:
fd:d9:82:42:56:b0:8f:19:e9:d6:6a:61:1c:ec:0f:
5f:2b:80:c3:ea:47:b2:42:e6:19:ca:f2:0c:84:61:
f2:80:75:3a:5b:c1:17:02:04:79:39:e0:4d:3a:bb:
4d:98:64:e0:63:55:bf:a9:1f:55:ee:08:33:ab:7e:
69:cc:c1:5a:59:24:a3:d4:fa:b5:ae:56:33:fd:a8:
de:a8:51:c9:43:8d:6e:84:d1:ad:05:5a:b1:a5:19:
dc:0f:19:00:b8:cb:15:04:1b:e9:32:bc:85:50:9a:
83:34:0f:fd:ea:61:97:c9:46:81:39:2b:10:b1:e7:
82:42:9f:83:aa:c5:7a:ff:42:7a:9e:88:9c:b4:6a:
f2:a1:f2:df:bb:0f:5f:2c:0d:d5:ef:39:70:f5:c6:
98:df:b5:9b:8f:7d:d4:bf:bd:71:b6:aa:d8:9e:14:
e2:63:24:46:1f:bf:b0:24:e1:fa:a8:2b:b6:53:59:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C7:37:6D:FD:C0:2F:66:B6:88:61:EB:4B:90:C4:18:C4:50:FA:A0
X509v3 Authority Key Identifier:
keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.192.0/24
Signature Algorithm: sha256WithRSAEncryption
82:85:9c:c3:47:8e:8c:6f:34:19:dc:dc:e5:31:63:b9:3f:3a:
10:48:f5:49:46:29:35:df:87:32:99:d3:92:0a:25:90:52:a7:
87:bd:bb:33:08:98:ea:12:6b:9c:4e:93:61:95:72:a9:39:ec:
10:b9:6c:02:c7:7b:60:58:9c:2c:c1:6e:f5:93:04:38:78:45:
bb:d0:6e:ac:2b:eb:34:5a:d0:cb:3e:d0:d8:c8:20:9c:89:ec:
c0:65:4a:26:96:ea:2c:08:9c:61:6a:b7:59:48:60:0f:3d:b9:
c8:aa:65:15:20:ad:a8:a1:c6:de:a6:5f:3f:45:f4:c0:f4:d7:
62:1c:8f:60:ae:91:a8:2a:8d:5d:0e:0f:4b:b3:1a:f1:33:78:
a4:d5:1c:39:66:cb:c9:f7:05:f5:53:32:a9:a6:38:8e:0f:b6:
45:cc:c4:ad:f9:ee:40:33:0e:b2:55:54:fd:0f:82:9f:c6:c8:
21:1f:54:1c:05:cc:ab:eb:71:dd:30:bf:88:4d:9e:2f:7f:37:
e8:e2:97:76:6c:f6:ce:dc:a4:fe:31:3c:8e:b3:32:0a:97:cb:
31:8b:26:c0:85:71:34:2e:c1:13:16:5a:0d:ba:c0:01:c8:42:
3a:75:59:ee:ed:1d:bf:1e:ec:34:fe:c4:82:f8:26:50:13:e8:
7a:39:35:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:31 2025 by rpki-client