Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa
File: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=
Subject key identifier: 74:6C:3C:EC:73:3C:72:7F:4C:FA:A5:4E:D3:90:7C:FD:55:F9:30:F1
Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4
Certificate serial: 3BA5C53683A42AA1B7267A84F97E53C063D5A6DA
Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa
Signing time: Tue 28 Jan 2025 10:01:08 +0000
ROA not before: Tue 28 Jan 2025 09:56:08 +0000
ROA not after: Tue 27 Jan 2026 10:01:08 +0000
asID: 9341
IP address blocks: 103.180.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a5:c5:36:83:a4:2a:a1:b7:26:7a:84:f9:7e:53:c0:63:d5:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4
Validity
Not Before: Jan 28 09:56:08 2025 GMT
Not After : Jan 27 10:01:08 2026 GMT
Subject: CN=746C3CEC733C727F4CFAA54ED3907CFD55F930F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:09:47:ba:f3:cc:13:8a:c2:66:ce:5e:2c:
4d:93:de:1c:2c:d3:fc:6e:aa:c3:2c:24:b0:74:3c:
aa:67:29:cf:21:e6:e4:67:15:40:1c:e9:88:7b:68:
b2:98:39:19:23:f4:02:c4:d1:b9:b9:6f:6f:c9:86:
16:26:d9:d7:19:a2:6f:9b:41:80:20:50:f7:33:5d:
20:c9:9a:d8:2a:d2:eb:d9:2b:5e:1c:26:8e:7b:64:
2d:b1:5e:84:04:bc:32:9a:7a:68:25:9a:2f:7c:2f:
1c:94:f0:17:d0:d5:b1:72:d5:4e:68:9b:fd:77:35:
85:ca:b5:4e:e4:33:93:80:65:db:6b:fb:ea:43:4f:
38:9b:8c:30:0f:aa:96:fb:55:38:29:4b:a5:c6:19:
a4:1f:27:ca:af:d6:bb:bb:3a:66:5f:17:35:a3:0e:
8b:3a:41:c6:c1:e6:6d:59:5f:ee:6b:92:96:dc:c7:
99:8f:5c:c7:a3:06:87:6b:ec:47:ed:db:53:79:6f:
f6:b8:00:0f:00:0b:8a:a0:14:91:80:c7:81:7f:39:
6c:3d:02:9c:2a:4a:a3:16:9d:d2:60:cf:ab:b0:5b:
93:0e:5b:19:b7:2d:e0:5e:20:95:93:3e:72:39:69:
c0:be:e4:d0:8c:30:54:86:e5:51:de:17:b7:2f:1e:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:3C:EC:73:3C:72:7F:4C:FA:A5:4E:D3:90:7C:FD:55:F9:30:F1
X509v3 Authority Key Identifier:
keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.58.0/24
Signature Algorithm: sha256WithRSAEncryption
17:70:d9:7b:4e:0e:ee:15:ce:ff:25:b3:66:b0:5b:bb:f7:d0:
32:97:ab:7d:ac:a3:2a:cd:ab:8b:29:c0:4f:7b:a5:18:f7:aa:
0e:5d:36:51:47:17:9d:65:f0:db:0c:4f:d1:88:e3:0d:13:8a:
fd:40:33:ed:2f:24:17:c8:17:c7:50:2f:9e:23:88:40:6a:10:
1a:ba:61:34:1f:b8:10:7b:11:08:60:f6:8d:0e:b4:43:25:b8:
8b:f9:a7:d3:5b:1d:2f:1d:77:db:63:48:a3:bb:d4:c0:eb:df:
37:a1:a1:d1:79:4b:df:66:bf:f3:f1:3d:ee:af:d6:42:64:10:
41:9e:ac:0c:2d:d0:2b:f8:80:f6:b0:6c:15:9b:48:34:3a:0e:
71:fe:b5:cf:26:e1:45:ac:9e:1a:e8:97:be:d8:8b:e1:0a:8b:
3f:7c:4e:e2:ab:8d:70:38:38:d5:1a:80:81:da:64:f1:c6:28:
cb:6b:b9:97:3d:43:6d:06:d6:7c:3f:ce:64:d9:93:bf:70:b8:
5a:ea:43:8d:c9:4a:6a:e7:d5:38:70:8f:a6:d6:01:74:9a:c0:
42:0c:f2:f3:f8:f1:e0:c5:90:a2:2e:af:85:3a:ce:8c:1f:8d:
25:e3:be:cc:c2:b9:9a:e7:e0:e8:b3:35:58:13:fa:cf:cc:28:
30:c4:5f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:34 2025 by rpki-client