Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa
File: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (raw, json)
Hash identifier: BUZVEiAJYJLqmtOMsKiwoKkvjDG5Aqhzz5fYoIUA7O8=
Subject key identifier: 60:DD:21:02:FD:B8:45:25:D3:FB:23:8D:95:3E:69:11:4F:E9:B6:B7
Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F
Certificate serial: 22B2B85C0DBC82127C576FE304E0A882FEAC4AC9
Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa
Signing time: Sat 21 Dec 2024 16:00:02 +0000
ROA not before: Sat 21 Dec 2024 15:55:02 +0000
ROA not after: Sat 20 Dec 2025 16:00:02 +0000
asID: 147086
IP address blocks: 103.172.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b2:b8:5c:0d:bc:82:12:7c:57:6f:e3:04:e0:a8:82:fe:ac:4a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F
Validity
Not Before: Dec 21 15:55:02 2024 GMT
Not After : Dec 20 16:00:02 2025 GMT
Subject: CN=60DD2102FDB84525D3FB238D953E69114FE9B6B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:c0:c8:43:62:33:1a:76:e1:30:ee:d9:9d:
e0:66:77:51:2c:b3:9b:a8:ca:59:bb:9e:af:69:d1:
de:9e:82:b2:d6:40:4d:0e:22:80:cd:ce:78:29:a9:
77:7b:86:28:e2:54:97:f3:9f:ab:d9:11:6a:c7:fd:
5a:04:fe:11:66:8c:5b:80:e4:a0:0e:d6:ed:f6:71:
86:a1:d4:f6:e0:08:71:04:96:31:9e:dc:c6:d2:cc:
dd:5b:a4:ce:7c:fb:68:a2:fb:14:fd:b6:55:68:21:
5e:5d:ce:db:de:fd:24:fe:c0:0a:ca:06:96:2b:a1:
29:1e:3e:ff:09:07:61:aa:6d:e1:53:6d:93:cf:08:
d9:13:e1:81:e6:5e:86:f2:11:9a:06:aa:22:26:07:
3e:7d:72:70:8d:f4:48:f4:92:e5:cc:9d:61:2f:72:
22:19:3f:48:ed:29:3e:8e:e0:8f:a0:88:ce:fd:ff:
9d:ac:19:e5:6d:4d:aa:bf:f7:0c:cd:9a:b7:ff:66:
81:9a:8b:6a:7f:b4:59:59:0e:8e:59:b5:4e:06:90:
8e:13:cc:63:4e:4f:bd:f3:24:f6:55:ad:48:13:c2:
64:aa:1e:db:86:62:4c:00:35:c3:a0:80:25:74:75:
77:e4:49:d7:dc:b6:d0:d1:e0:3a:d2:a4:06:eb:0d:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:21:02:FD:B8:45:25:D3:FB:23:8D:95:3E:69:11:4F:E9:B6:B7
X509v3 Authority Key Identifier:
keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.242.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ed:d6:19:cf:d9:95:9f:74:dc:60:76:2b:8b:06:d5:09:3a:
2d:f8:a0:15:6f:ad:85:76:cb:97:67:83:0b:f8:8b:9c:d7:2d:
f0:db:50:7e:38:5f:37:99:60:bb:c4:14:91:fd:a6:40:e9:94:
1f:35:07:e2:16:70:e4:df:12:d1:4f:01:f8:32:ac:41:d0:a2:
66:ff:da:6c:46:8f:98:31:2a:41:da:74:74:b9:f5:0c:26:86:
b3:2b:44:8b:4e:f9:e0:10:4e:c8:7f:e1:ea:1e:00:12:1f:ab:
8f:15:b6:94:14:a6:91:3f:cd:64:f2:08:cd:01:f8:87:60:b3:
2e:53:39:3b:d3:11:60:0c:05:1d:b2:34:93:90:fd:77:16:1f:
f5:b5:eb:9e:06:f3:bb:1e:af:c3:17:2d:4c:6d:a6:ef:22:d5:
f8:cf:9c:f9:d6:e9:7d:ea:56:77:31:a3:3e:22:7e:eb:f2:ed:
46:77:d4:1e:27:49:48:14:f2:09:dd:57:50:e9:71:aa:ab:0a:
d3:ca:be:50:79:40:ee:3b:89:ae:b4:5e:21:b9:a9:80:fb:83:
b5:be:4b:1b:3c:bc:64:52:26:c7:f0:23:2a:a5:3a:ba:45:0a:
88:f0:22:69:f7:62:5a:f0:51:78:3b:71:c5:9d:5d:b7:d9:f5:
59:67:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:34 2025 by rpki-client