Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa
File: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (raw, json)
Hash identifier: q4M2q2KFusV9WALClaWNLjI5YHGqNj7u0KWUCOIzdx0=
Subject key identifier: CA:85:13:5F:31:B1:55:69:22:1D:8B:52:73:41:AB:BC:D3:99:15:AE
Certificate issuer: /CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD
Certificate serial: 151C0140D140681979F19E6C8658A3D74869566B
Authority key identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa
Signing time: Mon 03 Feb 2025 04:00:00 +0000
ROA not before: Mon 03 Feb 2025 03:55:00 +0000
ROA not after: Mon 02 Feb 2026 04:00:00 +0000
asID: 58824
IP address blocks: 103.242.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1c:01:40:d1:40:68:19:79:f1:9e:6c:86:58:a3:d7:48:69:56:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD
Validity
Not Before: Feb 3 03:55:00 2025 GMT
Not After : Feb 2 04:00:00 2026 GMT
Subject: CN=CA85135F31B15569221D8B527341ABBCD39915AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:f7:c0:40:8a:19:79:77:64:98:9d:8d:18:
fb:4d:f7:68:28:40:b3:97:c7:53:c0:d1:7b:4a:89:
8e:66:58:57:e0:f4:04:12:98:80:79:40:d3:a7:52:
6d:81:c3:0f:ec:8a:d5:b1:d2:76:54:77:d6:ba:23:
55:b7:af:a4:16:09:01:4d:80:df:78:76:d9:77:02:
48:19:4b:99:34:0a:1c:77:69:d0:15:3d:19:11:a9:
6c:cc:5e:35:36:52:7b:c1:24:eb:af:dd:29:34:38:
42:de:0e:1e:1e:ce:1d:25:2b:53:29:2d:be:37:f0:
6b:2c:22:26:7f:b0:9f:bd:e0:27:4f:af:d4:1c:ff:
0e:7f:bf:62:b1:09:cd:7f:d2:aa:ef:a0:94:3d:fb:
b9:9a:4d:aa:d6:42:56:d5:3b:aa:c1:0b:a9:ff:91:
98:d1:3c:24:6f:0b:0a:e7:fe:42:f2:22:e6:b0:8d:
c7:df:39:a2:b3:be:6d:57:f2:c7:7c:fc:78:70:4b:
4e:80:42:e8:91:6a:69:15:76:02:e6:60:f2:24:66:
3b:0e:d7:76:03:6f:1f:ae:6c:69:50:d1:b9:2b:df:
c1:4b:1d:2e:81:28:53:cb:0f:da:63:fa:08:10:31:
8f:48:70:b7:16:bf:0f:ca:9f:7c:5b:f9:c6:1c:c5:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:85:13:5F:31:B1:55:69:22:1D:8B:52:73:41:AB:BC:D3:99:15:AE
X509v3 Authority Key Identifier:
keyid:17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.242.233.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:b6:b1:4f:1e:f5:47:f2:18:d0:4e:a9:2a:a5:17:dd:80:63:
a1:d0:9e:c4:c3:53:56:06:ab:6e:28:f7:61:f3:71:b9:c8:96:
70:d6:df:bd:41:0b:aa:ff:c2:d4:33:79:39:a8:2c:8b:98:f1:
97:e1:37:22:4e:84:9e:37:1b:94:61:8e:ed:d3:79:5f:a2:97:
67:db:17:e9:ba:b5:f6:2c:f9:a2:06:87:9b:6a:4c:9c:a4:66:
a0:d0:83:ec:4a:4b:51:01:23:74:dd:50:a0:27:03:83:94:a9:
10:ff:bb:d2:22:61:aa:c3:5d:5b:5e:b3:a5:50:19:bd:99:6e:
55:4b:bf:aa:13:75:18:75:a4:ad:2f:ae:50:8e:b4:61:de:a8:
1e:df:48:8b:c5:95:11:a8:91:39:06:13:32:df:3c:1d:99:bc:
c9:30:e8:c1:ad:df:e8:5e:86:ff:b7:81:bf:ef:bc:8b:27:a5:
61:27:66:f3:28:37:8c:d7:ae:40:b4:62:fb:1c:12:b2:2b:30:
fd:0a:09:17:37:cf:2b:c5:99:2a:c0:f2:f8:89:d3:2b:52:f6:
5f:53:e6:79:e3:7a:31:fd:42:c7:45:c9:36:08:aa:45:22:4e:
ab:f7:67:91:b1:cd:87:2a:e6:40:58:38:f3:e2:66:3a:58:d6:
60:2a:ce:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:10:36 2025 by rpki-client