Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa
File: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (raw, json)
Hash identifier: T5ujnMBfrRFq+9a4Ins8EQ3CJj6sZJk55UE2urIjcWM=
Subject key identifier: B2:2A:AB:E7:22:F0:AF:58:9A:47:2F:AA:D1:9E:20:34:8B:80:EB:69
Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF
Certificate serial: 55C44C8D22A0B3BB9F344B37F2817241ACDB5700
Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa
Signing time: Sun 05 Jan 2025 03:00:02 +0000
ROA not before: Sun 05 Jan 2025 02:55:02 +0000
ROA not after: Sun 04 Jan 2026 03:00:02 +0000
asID: 149917
IP address blocks: 103.191.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c4:4c:8d:22:a0:b3:bb:9f:34:4b:37:f2:81:72:41:ac:db:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF
Validity
Not Before: Jan 5 02:55:02 2025 GMT
Not After : Jan 4 03:00:02 2026 GMT
Subject: CN=B22AABE722F0AF589A472FAAD19E20348B80EB69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:04:f8:b7:b4:0d:d8:65:c3:7c:8a:ad:df:
fe:d9:db:a8:05:16:7a:d2:b8:0d:54:79:ce:99:a8:
88:30:82:ae:1b:f9:ec:0a:5b:8e:08:8d:cc:e9:7e:
93:99:49:25:83:ee:f2:80:c1:35:3a:d4:62:85:1a:
c8:5f:35:45:61:54:f4:03:57:20:6c:7e:78:ed:79:
56:f7:5b:e5:be:0a:88:9d:a4:f8:35:b0:ac:8b:91:
fd:50:33:f4:0e:f7:f3:d2:5d:fa:69:96:78:10:44:
57:8a:9f:33:dd:37:3b:ee:24:16:be:78:57:32:87:
b9:1a:17:80:5d:cb:1b:bb:d1:50:e4:2d:14:d6:3c:
ab:be:01:d6:5c:81:d3:77:05:78:2e:94:19:1e:df:
99:7f:4e:f6:ba:d7:b7:c3:cd:ce:69:f7:56:43:2b:
5c:c7:52:38:57:b9:67:4f:d4:16:0c:ca:8e:3c:96:
c1:5e:dc:12:68:eb:81:35:a9:06:4a:e1:0e:e1:60:
e2:b0:02:b6:23:0a:63:80:86:fd:c8:27:d7:17:07:
1f:cb:57:ca:74:47:cd:be:e6:d7:cd:e3:02:94:71:
f8:9d:65:ec:58:3a:7d:4a:c7:1c:c9:ea:48:f2:84:
ba:7b:77:eb:a6:c6:ce:0d:e5:3a:c4:90:5e:7d:eb:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:AB:E7:22:F0:AF:58:9A:47:2F:AA:D1:9E:20:34:8B:80:EB:69
X509v3 Authority Key Identifier:
keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.117.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:79:ae:a3:ff:12:3f:1e:5b:f6:1b:86:d0:a0:fb:a6:84:39:
98:e4:d6:8a:4d:0f:33:cb:de:b5:27:ea:20:df:67:73:b5:9d:
8f:c7:cd:23:a6:3b:58:5b:3a:bc:f5:f4:90:fb:c8:92:3c:cf:
17:e9:97:28:e1:b6:c4:13:18:00:f6:6b:77:d6:8d:32:49:13:
04:c2:f0:de:64:7f:5f:e6:d0:2b:4b:ec:5b:d5:75:a0:4d:cf:
f6:7f:1c:96:2e:8d:86:15:74:89:42:ff:06:02:3a:20:b9:59:
fe:c6:53:13:d6:80:67:64:76:27:da:f7:ee:1c:48:fa:a5:5a:
1b:bc:af:87:0c:84:66:ea:4f:bd:b3:a5:be:ab:c0:06:34:9d:
fa:7e:4a:fe:a7:6f:31:42:bf:8a:58:36:6a:05:31:7e:68:4f:
cf:9e:1c:dc:c5:52:77:98:f3:80:35:c6:01:d2:ba:85:36:24:
f2:0a:16:c0:d5:4c:bd:03:46:ab:e5:e3:7f:98:f3:eb:3d:80:
4e:ac:d3:98:d4:b2:99:44:29:10:41:37:e2:0b:fa:bf:4e:74:
71:70:83:e7:39:ed:2a:fc:da:96:3f:9e:54:de:fa:af:a3:79:
b5:5d:0e:e9:13:06:19:7e:44:84:3b:08:ce:c8:8a:d1:e7:98:
24:27:ca:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:27 2025 by rpki-client