Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa
File: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (raw, json)
Hash identifier: uAd0JDcy4hpWuoEBSRUvaHCaFXVpe2sxWabbA6bZmhw=
Subject key identifier: 7B:B1:2B:2F:DD:76:DE:C4:5A:A9:CB:04:FA:26:F7:F3:59:CE:25:49
Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95
Certificate serial: 4FF33617ECFA87830A998EBCE93CBA280323F3D9
Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa
Signing time: Wed 21 Aug 2024 06:00:00 +0000
ROA not before: Wed 21 Aug 2024 05:55:00 +0000
ROA not after: Wed 20 Aug 2025 06:00:00 +0000
asID: 140407
IP address blocks: 103.122.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f3:36:17:ec:fa:87:83:0a:99:8e:bc:e9:3c:ba:28:03:23:f3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95
Validity
Not Before: Aug 21 05:55:00 2024 GMT
Not After : Aug 20 06:00:00 2025 GMT
Subject: CN=7BB12B2FDD76DEC45AA9CB04FA26F7F359CE2549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:9a:5c:65:c8:b7:8f:32:b9:ba:f7:ca:6b:
55:fc:71:50:d9:17:70:15:62:ac:03:4b:a1:3c:7a:
e2:69:7d:ce:2f:8c:2f:1d:70:fa:52:93:ea:57:6d:
30:0e:04:59:5a:98:c8:60:3c:9e:5d:7f:2c:77:fe:
b0:7b:d0:18:e9:a9:0c:9d:45:f5:a0:f3:dc:c8:a1:
07:28:27:69:02:45:25:00:07:a7:f5:47:d9:ff:09:
4f:9a:67:9e:5c:2b:e9:88:a4:29:be:a1:f9:c6:25:
f8:a1:5f:6d:93:26:0d:af:e4:bf:1f:6b:82:50:43:
4e:ef:b9:80:68:4a:13:ae:05:b9:92:fe:1f:e1:d1:
80:34:4b:a9:3d:43:5d:1d:79:e9:52:5d:19:93:f6:
08:bc:a7:f4:79:16:c2:c2:c0:9d:f7:07:08:8a:cf:
9f:53:ef:c5:39:a6:96:f7:ad:68:48:02:7f:a4:83:
61:66:07:89:53:42:fd:dc:b1:1b:7a:8e:77:fd:98:
6d:98:7c:60:2f:68:53:75:e4:65:78:9a:03:d2:6a:
78:e3:1a:24:d9:aa:6e:cb:4d:d0:ff:32:a4:41:89:
75:ba:c1:7f:13:71:5c:b4:a2:0e:c9:38:d2:db:1a:
9c:b2:8d:e5:9e:ef:cc:7a:e3:6a:0d:88:a2:d3:9d:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:2B:2F:DD:76:DE:C4:5A:A9:CB:04:FA:26:F7:F3:59:CE:25:49
X509v3 Authority Key Identifier:
keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:2d:fb:58:ca:c8:a9:bc:83:b9:f4:36:c2:e7:2e:90:d8:34:
ad:97:ec:bb:ee:f2:7f:97:4b:61:88:90:e8:44:8d:0f:53:18:
12:77:6f:af:9a:2a:d1:e8:23:cb:51:77:76:34:0e:3d:10:99:
3d:2f:13:ba:ca:85:a3:67:a9:cb:c4:c0:fa:ea:a4:1c:98:43:
62:fc:46:88:7e:2a:0c:21:c0:04:91:61:50:5f:bc:72:10:64:
7e:d8:07:15:57:9a:9a:1c:22:cd:f7:bb:a3:3e:6b:0b:97:a8:
f2:a1:39:bf:d7:ba:2c:a3:86:87:e9:88:49:bd:a6:7e:c9:10:
a4:ee:eb:36:36:37:07:13:e8:7e:ec:b9:11:2c:81:4e:b2:e0:
df:38:d4:1a:45:87:7a:46:84:74:7e:b6:60:72:5e:be:86:8c:
46:de:74:63:61:cc:80:6f:ee:7d:b2:47:91:6c:a9:22:77:ed:
9b:fb:2e:99:14:b7:be:b5:aa:e4:9c:17:98:c0:b4:7a:a7:52:
55:22:a5:d2:19:06:3c:26:4b:7f:f5:93:cf:50:65:89:12:5d:
b6:24:6a:a3:a4:a3:57:df:c3:95:10:15:f0:01:7b:c9:be:af:
7e:7b:43:7a:2e:5e:1a:43:cd:6c:84:5a:e8:5e:69:0b:55:8e:
25:53:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:15 2025 by rpki-client