Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa
File: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier: h0k8rz1v/+LMLzPa9cwssYfHs5GKBPWBZA56yzocfIs=
Subject key identifier: 60:86:36:CD:8E:70:D4:EB:95:90:42:3D:17:93:0C:92:C0:1C:D2:3C
Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
Certificate serial: 5DEA18A2DA11DB4A28B92CD7A256C5952FBFF187
Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa
Signing time: Fri 17 May 2024 16:00:01 +0000
ROA not before: Fri 17 May 2024 15:55:01 +0000
ROA not after: Fri 16 May 2025 16:00:01 +0000
asID: 141674
IP address blocks: 103.171.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ea:18:a2:da:11:db:4a:28:b9:2c:d7:a2:56:c5:95:2f:bf:f1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
Validity
Not Before: May 17 15:55:01 2024 GMT
Not After : May 16 16:00:01 2025 GMT
Subject: CN=608636CD8E70D4EB9590423D17930C92C01CD23C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b5:38:65:af:6c:ce:f8:81:6c:49:67:04:2a:
64:ef:48:b4:b9:e8:9d:79:df:1d:fe:47:8f:b7:e9:
97:03:50:53:ca:18:e1:4e:0d:da:05:e5:0e:b1:1b:
40:88:e6:1f:12:76:a5:72:56:79:fb:36:91:6b:f5:
2c:69:21:7d:aa:16:eb:ec:47:bd:cb:dc:fd:75:5d:
1c:1f:85:28:c6:ad:a2:77:34:26:9c:b8:89:f5:5e:
f1:6b:3d:3e:6a:05:53:18:60:be:a5:5c:51:27:5e:
ef:14:09:3c:c6:11:b8:2e:fa:98:bc:50:bc:12:95:
48:ff:75:f4:48:b7:85:aa:d7:84:89:c3:0c:22:4b:
27:d1:d2:ab:60:27:17:e8:fe:4f:78:ed:09:ac:51:
b5:ac:ed:30:f3:cd:f0:8c:55:67:47:46:b9:62:4e:
db:79:87:f0:16:2e:96:eb:76:bf:42:77:9a:74:66:
93:bc:b7:e0:08:1d:47:c1:dc:64:f6:e7:52:db:8a:
7b:90:49:47:37:c9:c7:e5:64:f3:1e:c6:3d:bc:b4:
c2:2e:8b:95:e3:e3:db:36:46:85:c0:f0:f6:2e:8c:
4e:ed:88:23:cd:b8:82:c2:22:4b:c4:f7:2a:33:61:
aa:82:63:02:1b:12:9d:5d:7a:4c:dc:bd:26:f6:d7:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:86:36:CD:8E:70:D4:EB:95:90:42:3D:17:93:0C:92:C0:1C:D2:3C
X509v3 Authority Key Identifier:
keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.245.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2c:d4:23:aa:a9:07:8b:e9:4d:ad:d0:29:3f:73:ee:1e:c1:
59:b6:25:68:91:b9:cd:b5:e2:2c:e9:ef:1b:2b:44:3a:9d:ee:
25:8b:1a:32:32:82:5b:4c:87:d3:4e:1b:7e:cf:88:5b:a0:8b:
19:3d:a4:24:00:3a:d9:d0:0b:22:1f:1b:a9:d3:64:00:16:71:
a9:fe:df:37:0b:b8:d5:8e:08:d6:32:8a:ab:b5:a6:27:8e:2b:
05:cb:16:93:dd:10:a1:f4:05:1d:e8:5c:fa:5d:43:54:0e:56:
bb:69:1f:24:d5:8a:d9:22:83:80:00:bd:a1:3b:c3:f9:3e:c5:
9b:21:df:d9:55:83:5b:33:8f:f4:83:05:dd:a4:bb:d7:a4:ed:
4d:32:28:ae:5f:f7:76:69:91:8b:b9:56:8c:8f:62:c8:d9:42:
54:ad:a8:61:9f:fb:88:ef:fa:22:b1:6e:db:63:a2:bf:3d:1d:
34:e2:d4:83:38:ec:92:b5:4c:1f:9a:24:a5:30:a2:a5:ff:ee:
b3:3b:91:1c:f5:3b:92:cd:6e:41:24:b4:d3:49:6c:61:a1:04:
b6:39:5d:bd:ac:84:c1:44:19:ca:48:83:f0:57:b7:49:9e:2f:
ac:e0:09:aa:92:dc:47:e3:a9:d1:08:ed:27:a4:be:4a:01:43:
d2:90:3d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:32 2025 by rpki-client