Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
File: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (raw, json)
Hash identifier: 8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=
Subject key identifier: 6E:AB:16:10:F5:61:13:1E:5E:CF:92:EE:13:82:4B:22:89:97:89:7A
Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
Certificate serial: 44737CBC7D02BB4112D9041AECFFCB4C8089DD9F
Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
Signing time: Sun 24 Nov 2024 06:00:00 +0000
ROA not before: Sun 24 Nov 2024 05:55:00 +0000
ROA not after: Sun 23 Nov 2025 06:00:00 +0000
asID: 139449
IP address blocks: 103.179.216.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:73:7c:bc:7d:02:bb:41:12:d9:04:1a:ec:ff:cb:4c:80:89:dd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
Validity
Not Before: Nov 24 05:55:00 2024 GMT
Not After : Nov 23 06:00:00 2025 GMT
Subject: CN=6EAB1610F561131E5ECF92EE13824B228997897A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:78:b4:ea:28:fc:15:6c:dc:11:e8:e6:f3:a1:
8a:94:33:4f:29:df:d7:a8:93:78:66:20:e2:8b:86:
30:c3:d5:91:fb:2b:a8:66:1e:7c:b9:19:2a:99:8f:
9a:2f:af:33:ea:28:c5:b0:2a:13:b5:2d:f0:c4:7f:
b3:48:3a:c4:8a:7e:90:65:5f:69:5e:45:96:41:7b:
5d:34:22:c8:30:83:d4:12:87:2a:cf:40:7a:83:f4:
d5:b7:97:d1:0a:97:ef:99:31:1e:0f:ab:fb:d7:db:
75:51:21:36:6d:36:3f:b7:69:97:63:0a:20:86:eb:
64:9f:48:52:e5:30:13:85:8d:9d:c8:f9:37:50:2f:
60:83:75:30:79:ad:69:bf:8d:d1:e2:0d:bf:9a:58:
60:7d:7b:73:ce:1c:86:33:cb:37:31:01:fe:bc:b2:
89:e4:5d:f0:e8:55:9c:49:99:14:03:34:6a:62:33:
fb:ae:ea:d8:6f:d2:c6:9b:73:65:f5:14:35:78:e2:
99:cf:ea:cb:a0:43:f8:a9:e5:af:1b:cf:03:54:7a:
ed:ac:d8:49:34:13:8d:d6:be:97:72:35:ec:fa:3e:
5f:14:92:0a:ce:ff:d7:65:77:93:a1:4e:d6:a7:e5:
b3:8c:e7:c5:40:17:70:3f:48:27:33:ec:f3:93:f5:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AB:16:10:F5:61:13:1E:5E:CF:92:EE:13:82:4B:22:89:97:89:7A
X509v3 Authority Key Identifier:
keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.216.0/23
Signature Algorithm: sha256WithRSAEncryption
69:d1:38:9a:1e:46:45:4a:13:d2:07:cb:10:fd:b7:02:08:ca:
41:ab:13:41:2c:eb:1d:6a:f7:91:4d:28:81:87:42:af:ea:77:
67:b0:9a:5a:2d:db:db:98:ca:86:50:12:a2:b9:1a:f8:d7:f3:
14:ac:c5:8b:24:d6:a7:7a:67:43:dd:86:18:c3:13:d6:f4:e8:
33:43:ff:d9:41:cc:82:74:08:35:92:ee:74:9d:c5:56:c4:f8:
d9:1f:0e:fa:3d:6e:fd:f1:33:aa:ec:95:40:01:44:a0:cc:5e:
c6:1a:14:82:0e:e5:b5:3b:ff:c1:dc:7c:14:43:65:0c:7b:54:
b5:8c:1c:11:a0:ac:dc:f1:a2:a0:5e:13:1e:8a:5b:db:30:c2:
a7:a0:a7:48:15:17:96:14:60:1c:67:1d:84:9b:9c:31:54:c3:
c8:0e:45:aa:e4:b6:ef:5e:16:ba:f1:81:e3:76:86:cc:00:44:
8f:91:4e:c8:bf:14:7e:3c:73:8e:4c:8d:39:ae:96:cf:24:d9:
7d:f6:3d:e6:e5:ca:a6:e9:54:f6:fb:7f:7d:bb:2d:fb:02:e2:
5d:35:68:e1:4c:db:08:82:1f:ea:f0:db:4c:88:e8:8c:45:8c:
7d:93:e7:3b:e0:e3:f8:92:55:ed:34:dd:a4:de:2b:0b:5d:7a:
f5:36:61:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:39 2025 by rpki-client