Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa
File: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (raw, json)
Hash identifier: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o=
Subject key identifier: 8C:84:6B:94:E0:CB:C9:93:C1:D8:85:A7:46:22:B0:C6:51:50:31:80
Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E
Certificate serial: 1F90451685DEF13D597724F432A995F01C1190E5
Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa
Signing time: Mon 10 Feb 2025 08:00:01 +0000
ROA not before: Mon 10 Feb 2025 07:55:01 +0000
ROA not after: Mon 09 Feb 2026 08:00:01 +0000
asID: 147164
IP address blocks: 103.177.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:90:45:16:85:de:f1:3d:59:77:24:f4:32:a9:95:f0:1c:11:90:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E
Validity
Not Before: Feb 10 07:55:01 2025 GMT
Not After : Feb 9 08:00:01 2026 GMT
Subject: CN=8C846B94E0CBC993C1D885A74622B0C651503180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:4b:bd:44:11:9b:40:5e:41:dd:ac:9d:96:
ed:bf:04:d3:5a:b3:47:9a:8b:e8:11:9e:24:32:67:
24:d7:d6:4f:96:b3:82:0b:56:60:49:bc:9c:2c:5c:
a0:c4:19:b2:8e:68:07:4c:29:32:8e:34:1c:c7:96:
1a:1d:83:af:25:b5:32:9d:93:a4:af:58:7e:3c:c2:
97:5e:c6:67:72:be:af:a8:02:c3:f5:a8:4a:9a:b9:
ee:be:d8:05:36:e9:72:96:f4:07:99:55:cf:cf:9f:
d0:c9:ae:33:7b:83:5e:2c:e8:e3:7f:e4:80:ee:81:
0f:2d:2b:ee:07:29:91:92:76:76:1e:98:e0:97:35:
b6:ab:57:c2:29:f4:4e:5c:35:7e:2e:3a:bb:d2:ca:
63:ac:b3:05:02:60:c6:3b:01:69:24:c3:53:7d:2a:
e2:10:2a:4e:57:29:94:1c:aa:e8:c5:2f:8a:6f:0d:
34:a2:65:42:97:a2:77:f4:33:d2:4c:b6:87:b8:09:
61:94:2c:c4:c1:7d:bb:55:e2:b6:bb:6b:e7:13:1d:
bd:c0:87:30:05:5c:59:34:a1:38:5d:a4:3a:4b:5c:
9d:06:72:17:55:ec:5e:d4:79:09:d1:3f:0f:fe:f9:
51:6f:1e:76:07:7d:e7:0f:15:8d:ce:43:bb:13:59:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:6B:94:E0:CB:C9:93:C1:D8:85:A7:46:22:B0:C6:51:50:31:80
X509v3 Authority Key Identifier:
keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cf:31:d4:dc:fb:4a:3b:36:b5:0c:96:f6:81:84:36:c2:92:
33:4e:f4:8b:e3:92:6c:cf:fe:ca:23:c5:a2:ed:72:40:72:fd:
35:75:1d:ad:6f:9e:82:97:a1:00:ba:6e:75:dd:3a:d0:9b:8e:
0d:b9:bf:2d:71:d0:ac:71:b7:24:dd:5b:6b:ef:ae:d7:d4:66:
c4:f3:8f:a7:f4:18:e2:7f:f0:d2:a8:c5:c4:ae:2c:2d:9f:50:
42:c1:6c:94:5e:dc:3e:99:33:c4:ad:ba:d1:c8:19:7c:60:f3:
a2:99:d1:fa:ec:e8:23:4c:c4:5c:d0:1b:05:de:1d:b3:14:60:
24:80:b0:b6:5d:ba:fe:e2:c1:70:57:d6:40:42:fd:76:b8:55:
71:6d:1a:96:84:6f:ec:ed:67:8c:49:27:51:e1:2f:64:aa:bf:
9a:20:0e:c2:27:19:2b:fb:ed:dc:3e:44:73:12:1c:ac:11:8f:
56:04:d2:27:4d:03:2b:df:63:6d:e2:63:d2:49:48:9a:e4:b9:
77:af:5c:66:ab:8b:c7:be:0b:89:b2:14:a5:a1:8b:9e:24:6b:
05:ee:a0:77:31:eb:7f:95:da:ce:0e:61:f3:0c:eb:4c:73:f7:
2a:8b:0e:15:b3:ce:82:9e:6d:4b:74:31:a6:d9:a6:33:ac:34:
ec:d9:d9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:08 2025 by rpki-client