Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa
File: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier: Nqgcp/K4UevMl0PfyVMfy6C7HWJO5cOPcTMMdK4Juds=
Subject key identifier: 4D:27:09:EF:48:A2:7E:C2:C1:B1:12:2E:24:CE:A7:56:26:1D:D6:FA
Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE
Certificate serial: 4B44B389BF467AA8ADFB752BBB20E1E0B65C9D18
Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa
Signing time: Thu 28 Nov 2024 05:01:11 +0000
ROA not before: Thu 28 Nov 2024 04:56:11 +0000
ROA not after: Thu 27 Nov 2025 05:01:11 +0000
asID: 131111
IP address blocks: 103.175.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:44:b3:89:bf:46:7a:a8:ad:fb:75:2b:bb:20:e1:e0:b6:5c:9d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE
Validity
Not Before: Nov 28 04:56:11 2024 GMT
Not After : Nov 27 05:01:11 2025 GMT
Subject: CN=4D2709EF48A27EC2C1B1122E24CEA756261DD6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:e9:0e:4c:72:41:ee:6d:1c:a0:d4:02:50:
e9:ac:74:7f:85:d4:1e:6b:13:c7:ea:e8:d2:72:0e:
ab:33:5b:4c:81:13:2d:f2:d0:b1:ae:59:9f:65:1a:
2a:3d:1e:22:b7:86:2e:24:80:90:44:de:0f:63:ca:
74:8f:62:e9:fd:d8:da:2f:8b:b8:7c:96:c8:37:a5:
20:0c:fd:c5:9a:1c:6f:6d:73:e6:5d:2e:2d:08:74:
29:13:fc:e1:92:2f:cd:79:c5:40:e8:6e:29:99:c8:
6e:81:ec:35:e9:e7:a1:3c:62:bf:d0:a2:36:36:2e:
36:52:ca:2b:5c:18:16:12:e3:fe:a9:e9:20:a3:3a:
a1:53:31:6a:8c:48:14:88:d2:77:9b:fd:74:42:12:
4a:8e:15:77:76:5a:ba:f9:94:97:47:f4:af:30:52:
47:78:04:27:75:18:40:7b:d0:86:17:b6:63:10:69:
68:3c:16:2d:cb:c2:01:b0:4e:42:87:2d:56:bc:a1:
c4:7c:c6:0d:3b:17:81:f7:e9:8f:4e:64:0e:ab:c0:
03:1d:ad:c0:8b:5d:32:43:46:f5:03:4f:96:05:71:
57:22:b3:dc:6f:a9:af:2d:33:63:de:fe:47:e7:11:
2c:33:c9:15:17:03:26:d6:4d:86:a6:dd:3e:7e:e2:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:27:09:EF:48:A2:7E:C2:C1:B1:12:2E:24:CE:A7:56:26:1D:D6:FA
X509v3 Authority Key Identifier:
keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.154.0/23
Signature Algorithm: sha256WithRSAEncryption
19:52:ca:5f:14:75:be:29:0e:9a:3d:b4:54:a4:9e:78:86:ca:
ae:24:bc:cb:49:5e:26:c3:6d:4c:3e:86:bf:6f:63:38:9f:40:
94:e1:af:a8:f8:b6:2c:99:d2:04:73:05:be:2e:7c:e5:74:e6:
1e:7b:23:0c:1e:52:a8:1d:4f:87:3f:0f:b1:90:87:3a:2f:d0:
78:0a:8b:83:de:4d:90:00:18:a4:91:00:02:59:8c:61:34:f4:
65:25:f8:0e:82:b7:ab:65:25:06:3b:ab:a4:f7:d5:4d:46:64:
d1:72:a9:d9:b8:12:cb:7b:ce:2a:93:8e:b3:7d:3e:0b:b8:2c:
ec:9d:b6:b8:24:f7:a8:1f:3d:3f:3e:91:3d:44:f0:99:17:3e:
19:2b:da:ed:db:9b:00:25:20:a3:e8:fd:e4:64:d5:ac:37:ec:
dd:23:bd:43:03:ba:42:4a:07:df:96:fc:3b:af:92:55:07:8b:
d6:fd:89:68:4d:b2:5f:62:4b:4c:7b:c0:48:3f:c6:aa:fd:2f:
d9:31:d7:92:60:39:ee:b6:fe:64:e2:3e:bb:00:46:b3:13:7a:
cb:a8:d6:96:b9:31:e4:6c:05:bf:ab:e9:e6:90:6c:f0:bf:6e:
84:89:0a:c6:27:b1:b1:08:40:3c:3c:a5:1f:5c:c2:0c:d4:09:
8e:72:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:57 2025 by rpki-client