Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e322e302f32342d3234203d3e203138303539.roa
File: 3130332e342e322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: 3dlYrpFyf6GzfXt372v6hvIa7PiT/VBChxJ5omlpRJ0=
Subject key identifier: 2B:67:B3:C9:01:26:B2:A9:0E:B4:71:CA:8B:B3:D7:1E:DD:75:53:23
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 6360244B6B8A336D9F2C589A1BE6BDBF4C0E38E4
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e322e302f32342d3234203d3e203138303539.roa
Signing time: Fri 25 Oct 2024 03:00:01 +0000
ROA not before: Fri 25 Oct 2024 02:55:01 +0000
ROA not after: Fri 24 Oct 2025 03:00:01 +0000
asID: 18059
IP address blocks: 103.4.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:60:24:4b:6b:8a:33:6d:9f:2c:58:9a:1b:e6:bd:bf:4c:0e:38:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Oct 25 02:55:01 2024 GMT
Not After : Oct 24 03:00:01 2025 GMT
Subject: CN=2B67B3C90126B2A90EB471CA8BB3D71EDD755323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:a3:6e:52:00:a2:02:f4:de:69:f8:d2:59:
18:06:e2:de:14:bd:de:39:20:9f:d3:86:54:7a:e1:
e9:dd:1f:2a:79:4d:44:15:56:de:f9:80:70:16:b3:
26:57:53:a4:c8:cd:8e:5e:64:2b:6e:d7:e4:ae:ee:
27:9e:69:99:01:f9:a2:86:d9:29:11:ed:11:8a:9d:
78:37:f3:f6:07:d8:ff:07:d5:ad:7b:99:31:ff:69:
af:a9:16:bc:bf:0a:b6:d6:4e:cc:ad:36:bd:b3:8a:
6d:69:93:1d:6b:32:e5:22:36:e1:82:6e:e9:c8:e0:
c0:ad:d5:b8:ad:5f:57:78:ae:d4:c6:cb:b4:36:d4:
18:56:e1:62:5c:d7:57:03:3a:8b:eb:bd:7d:87:8e:
8c:c1:e9:47:01:9a:1e:8d:4e:5a:7f:8e:24:38:c4:
20:00:4f:16:b7:78:6a:0a:f4:03:c9:36:a3:5f:73:
f5:59:6a:97:85:d5:f6:6a:16:b3:27:82:89:a1:f7:
4f:4b:e8:3b:67:5e:97:48:17:73:2c:fd:b8:da:1a:
9a:31:32:ac:f1:4a:b2:2b:0f:a7:80:58:4c:df:73:
cd:ab:89:4b:14:a0:59:62:a1:75:9f:d6:38:6c:3b:
6e:cd:e3:07:f0:94:92:99:d9:65:fe:43:eb:29:88:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:B3:C9:01:26:B2:A9:0E:B4:71:CA:8B:B3:D7:1E:DD:75:53:23
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e322e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.2.0/24
Signature Algorithm: sha256WithRSAEncryption
04:40:a0:b7:f1:a9:5a:16:fd:8c:cb:8d:d1:31:88:18:0c:44:
2c:56:12:26:38:9d:c1:87:b0:9b:6d:1a:67:26:44:fc:fb:09:
3f:29:b5:03:61:46:72:ad:27:01:dc:e8:3a:1b:14:f4:e4:e6:
16:27:3f:ac:ab:d0:29:45:82:85:5b:cc:ae:49:4b:4d:6a:fa:
a1:30:a4:db:51:68:2a:6c:3a:b0:a0:27:64:a4:cd:dd:08:9a:
10:f8:b5:f7:c0:c8:2e:75:e6:2f:3a:5a:5e:db:e5:e6:e0:3e:
ab:63:73:10:cc:67:1b:cd:24:66:b8:6b:f1:e8:14:d3:9c:ea:
f1:1e:70:ca:68:f9:be:bf:85:0d:c4:3a:97:fa:fa:1f:6d:08:
00:d0:ab:fa:83:8e:0d:fe:b3:7e:e8:cc:48:79:ce:c3:95:8a:
f0:be:36:cf:c0:93:64:39:ee:4d:2d:f1:80:98:4a:ee:00:13:
43:eb:da:a6:4f:87:85:3a:91:8b:16:fa:ab:82:86:6c:51:8d:
83:3f:48:78:f6:7c:6e:8d:5a:96:36:1b:aa:30:d4:ed:23:66:
17:a1:76:e8:be:21:87:7d:a5:f3:c9:43:8d:c7:e9:9b:d5:2f:
0e:78:de:ef:02:ef:f7:b5:a4:2e:6f:80:22:8e:7c:e4:cf:11:
52:61:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:20:25 2025 by rpki-client