Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa
File: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (raw, json)
Hash identifier: RTnhI30e0+wVJg3wwSc+DV3WBIt7hKNuWTy9wOhuvP4=
Subject key identifier: D1:73:01:D5:26:A5:B8:B6:8D:7D:42:CE:31:77:71:5B:2D:7E:7A:46
Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial: 240A4C61616BC9817899953A96CA0E510943EC40
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa
Signing time: Mon 01 Jul 2024 01:02:38 +0000
ROA not before: Mon 01 Jul 2024 00:57:38 +0000
ROA not after: Mon 30 Jun 2025 01:02:38 +0000
asID: 132649
IP address blocks: 103.24.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0a:4c:61:61:6b:c9:81:78:99:95:3a:96:ca:0e:51:09:43:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Validity
Not Before: Jul 1 00:57:38 2024 GMT
Not After : Jun 30 01:02:38 2025 GMT
Subject: CN=D17301D526A5B8B68D7D42CE3177715B2D7E7A46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:62:b5:1b:b1:ad:db:2b:7f:f7:07:7c:ff:
b4:5f:8a:40:88:b3:2c:46:85:76:52:25:e8:ea:f7:
00:57:8e:4f:40:3f:49:04:fb:40:16:10:56:3a:82:
35:32:67:a1:e7:e8:c9:f9:ae:8d:b6:67:42:d8:5d:
ea:82:ea:5e:a7:2e:01:e0:1a:fb:38:90:4b:52:00:
77:43:5a:47:23:ce:e9:10:99:de:04:43:ca:5a:fc:
8b:36:4b:27:80:0e:77:c0:da:26:8e:9a:74:b3:7c:
cb:53:1a:cc:fd:72:ad:9c:5d:7c:6f:81:e7:f5:ae:
a4:8a:d7:4f:52:0f:0d:fb:64:15:6b:33:aa:42:b0:
91:29:3a:03:5e:b7:f6:fb:40:9b:06:d3:30:c2:17:
88:33:27:b2:7b:67:ce:56:a8:52:7b:60:44:08:8e:
fc:a6:5b:bd:06:00:15:d3:ca:2d:cb:f8:8a:f5:e9:
ee:6a:81:03:f4:3a:16:07:cd:40:56:5d:21:ba:cf:
0b:59:66:d5:58:10:bf:1c:26:84:e6:5c:21:a1:bc:
76:c8:e2:33:33:c6:10:bb:f6:a0:0b:d6:66:6d:4a:
74:85:6c:b2:a8:02:ec:9c:c5:fb:03:09:ac:ea:c2:
7c:c0:a0:6f:6c:23:89:29:e2:de:a8:ca:0d:8e:93:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:73:01:D5:26:A5:B8:B6:8D:7D:42:CE:31:77:71:5B:2D:7E:7A:46
X509v3 Authority Key Identifier:
keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.214.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a5:82:9e:3f:0d:e3:3c:f7:30:b3:2a:fb:fe:f4:fe:78:58:
cc:be:74:77:b8:5e:b5:6f:75:44:67:00:d2:23:05:bf:1c:c9:
8f:bb:21:1b:2b:3b:3f:4c:2a:9d:bf:d5:24:af:89:59:20:10:
91:b3:3c:18:27:16:6f:eb:bb:88:f1:c6:bf:f6:51:cb:19:65:
4a:b6:94:dc:8d:fe:0e:0c:76:88:94:75:79:c1:0d:a0:93:e0:
ba:44:c7:87:73:58:6f:90:b6:53:77:e9:1e:8e:32:9d:ed:2c:
3f:61:b8:05:3e:d4:d2:8e:d1:73:70:1d:dc:05:af:f0:d2:28:
c6:ec:6a:e4:53:c5:6d:60:2f:90:54:41:03:ca:cf:86:25:c3:
a4:36:7f:84:86:25:93:98:d0:4b:c5:3c:ee:d5:51:e7:de:1c:
c6:66:a0:58:40:fe:06:bd:70:5f:60:05:1a:61:01:50:74:07:
34:19:6b:88:31:07:37:84:ea:31:db:ef:95:20:f6:bd:8a:c2:
0f:5a:51:6b:2b:83:f9:ba:75:fe:41:e0:db:45:d4:01:00:f0:
91:a5:bc:b8:bd:b6:2e:b8:c1:a8:84:f9:bd:81:0b:8c:59:31:
2f:dd:0a:30:4d:78:d0:ac:8f:eb:60:82:4a:60:89:39:8b:ec:
e0:b1:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:53 2025 by rpki-client