Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa
File: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (raw, json)
Hash identifier: qq/bBbe3IiCxD990Ap9csNsNIb9hOsP2lHF9VR4M/LM=
Subject key identifier: 39:C2:27:59:21:A0:B1:4A:1C:A9:B4:7C:FF:AC:B0:25:1F:BD:AE:89
Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9
Certificate serial: 0E71BCBB46C565873769792A24068741A979FE31
Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa
Signing time: Tue 30 Jul 2024 10:00:02 +0000
ROA not before: Tue 30 Jul 2024 09:55:02 +0000
ROA not after: Tue 29 Jul 2025 10:00:02 +0000
asID: 64024
IP address blocks: 103.210.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:71:bc:bb:46:c5:65:87:37:69:79:2a:24:06:87:41:a9:79:fe:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9
Validity
Not Before: Jul 30 09:55:02 2024 GMT
Not After : Jul 29 10:00:02 2025 GMT
Subject: CN=39C2275921A0B14A1CA9B47CFFACB0251FBDAE89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:5b:c0:44:f2:e4:31:57:e5:db:2a:c9:d1:
3c:6b:99:48:b5:9c:54:bc:fc:b2:7c:34:d2:1d:dc:
c9:92:46:18:80:9e:68:6d:cd:45:0c:e5:87:51:60:
03:ee:4b:24:30:6d:ff:bc:d0:ff:2f:50:31:11:cb:
38:d8:f9:56:5a:42:e8:44:0f:f3:f3:6a:82:ce:a1:
fb:e5:d0:c6:21:fe:ea:ce:c3:78:33:c1:a8:52:9d:
a3:cb:bd:f6:4b:c3:16:68:76:36:81:82:02:f2:8f:
cc:e5:cc:e1:2c:0a:80:e8:7a:29:30:94:46:dd:a0:
24:c8:72:8a:0c:3a:1f:0b:55:e8:9a:b3:e2:24:0e:
42:3c:a3:b8:a8:23:e1:a4:ba:d3:54:f3:ab:3b:0f:
c2:a0:08:ac:fb:c0:c9:90:5a:fa:87:6d:60:ab:5a:
93:eb:4a:18:dc:77:93:82:24:59:24:92:e9:b8:e1:
31:93:28:da:25:78:d1:0b:b5:68:2a:2e:42:b4:4f:
a3:d6:55:d3:35:a0:77:35:46:37:ff:7c:65:6a:b7:
51:94:8e:b3:92:1c:dd:9b:03:82:98:6d:fd:3b:5b:
8a:1a:bd:f6:c7:00:59:31:46:c6:b4:57:84:62:4e:
25:1d:0c:2a:b3:97:12:e8:8d:4f:d9:23:b3:63:46:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C2:27:59:21:A0:B1:4A:1C:A9:B4:7C:FF:AC:B0:25:1F:BD:AE:89
X509v3 Authority Key Identifier:
keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.118.0/24
Signature Algorithm: sha256WithRSAEncryption
75:83:a2:77:bc:16:f7:a7:e3:32:f8:13:59:a6:a0:78:b0:b4:
e8:d6:36:ef:dc:de:98:2c:13:0d:22:e7:ba:67:57:0e:82:42:
16:b3:a9:f1:4a:d3:e5:3c:25:f6:ea:ca:ea:4c:3e:08:21:ea:
dd:66:66:22:e3:bf:f1:01:27:d9:e5:95:bf:d2:0b:90:cd:ae:
e4:3a:9e:d3:4d:fc:d3:ec:2e:5b:f8:af:e2:fa:81:02:fa:88:
be:18:3f:43:5e:fd:1a:b7:66:48:66:34:c3:2d:c8:a2:ca:a5:
cb:a2:d2:f6:24:86:fa:42:9d:df:4b:5f:6d:f3:d0:c5:60:7c:
13:6e:66:9c:44:1a:de:11:59:23:5a:54:48:c7:16:4d:c3:2f:
c7:3e:9c:7d:df:b4:9c:70:6d:0d:7c:ae:1c:2c:93:cb:07:90:
db:dc:7f:7b:54:00:94:d2:18:23:e4:e6:a0:97:33:70:2e:2e:
6e:b8:9a:44:6b:50:90:8c:a2:0e:08:ac:b5:0f:e2:d0:ad:8d:
00:6a:63:1b:55:4a:0b:96:3a:bb:7d:d0:a0:e6:67:37:42:71:
18:fa:19:ed:5a:7a:0c:75:40:12:d8:c1:99:00:ec:fd:e2:a8:
4f:cd:be:c9:fd:5e:3b:bf:3f:a8:00:3d:df:c0:46:96:05:22:
61:3c:ae:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:54 2025 by rpki-client