Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa
File: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (raw, json)
Hash identifier: OtO7trEv+mIXnYZ9PighxNjftlOq2BJEStDsCjt/cj4=
Subject key identifier: 58:D0:06:D7:90:A0:46:C0:28:9A:B5:93:06:05:12:DF:EA:1F:93:26
Certificate issuer: /CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE
Certificate serial: 2E84584B7395CEFE750795647A277F769F8A8C33
Authority key identifier: 54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa
Signing time: Mon 01 Jul 2024 01:04:57 +0000
ROA not before: Mon 01 Jul 2024 00:59:57 +0000
ROA not after: Mon 30 Jun 2025 01:04:57 +0000
asID: 132643
IP address blocks: 103.123.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:84:58:4b:73:95:ce:fe:75:07:95:64:7a:27:7f:76:9f:8a:8c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE
Validity
Not Before: Jul 1 00:59:57 2024 GMT
Not After : Jun 30 01:04:57 2025 GMT
Subject: CN=58D006D790A046C0289AB593060512DFEA1F9326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:3c:a4:13:7a:0b:9a:70:20:83:9e:6a:1f:
31:4d:57:61:35:dc:a8:4f:df:a6:4c:49:8c:80:d1:
64:44:ec:60:97:a1:5b:e3:e9:8d:05:48:e1:1e:5c:
07:2e:1a:09:6e:e2:6b:34:27:23:6e:2e:47:c2:85:
e5:5c:05:d1:d2:ab:6e:0f:d6:28:c0:9e:c9:0b:f6:
0f:09:f9:b5:34:8c:48:64:24:19:6a:5a:17:0d:be:
98:79:30:c7:50:61:50:40:40:1b:d0:1c:ad:5d:08:
c1:f0:77:97:05:31:e9:f0:20:52:99:76:45:22:bd:
e9:bd:73:cf:83:4f:ae:07:d8:7f:0d:c7:44:59:cf:
82:3a:2f:17:75:dd:33:df:d4:55:6f:d4:e9:33:e0:
01:da:e0:75:9a:a0:66:27:31:ec:4b:be:2a:b0:84:
51:2c:15:85:e5:77:96:98:95:27:15:b5:3f:bc:de:
ab:96:8c:5b:0b:ad:11:d5:f7:dd:4d:9f:db:d6:08:
62:c7:e8:01:bd:9e:36:01:4b:75:24:23:96:35:bd:
e9:83:55:0f:36:12:90:00:d7:80:e0:06:34:06:e8:
96:a2:4d:57:5a:f1:1c:e8:ea:56:83:41:b4:eb:66:
7b:3a:78:6d:02:06:13:5a:59:8e:e6:9f:0d:f0:f3:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D0:06:D7:90:A0:46:C0:28:9A:B5:93:06:05:12:DF:EA:1F:93:26
X509v3 Authority Key Identifier:
keyid:54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9b:30:cb:9e:91:89:9a:85:6f:c4:9a:03:48:b3:8a:19:18:
e8:64:ca:3c:33:cf:f3:a6:47:89:44:8e:80:0f:28:e2:a3:87:
40:6b:95:aa:1f:65:0a:58:7a:4b:1d:0b:33:1a:aa:dd:f6:4e:
62:7b:46:51:69:bf:28:ce:3b:a7:33:42:4e:d7:a2:08:57:ba:
a3:e1:50:99:84:e8:84:b0:dd:a6:47:b4:b4:fa:e2:87:e8:bc:
eb:af:5a:63:08:89:15:8a:d7:17:22:3a:03:bd:1b:20:24:d4:
1b:df:b4:91:4a:41:95:b7:99:0b:f0:43:e0:fc:6f:9e:38:fd:
6e:28:c6:d4:b9:23:78:63:d2:ee:c7:78:81:e6:49:18:91:bb:
ed:61:e1:3f:42:aa:37:b6:6e:9a:6f:f1:1b:14:d2:ab:0f:23:
3c:c5:21:fb:ba:a9:04:ec:70:dc:78:1f:1a:5a:7e:39:5b:82:
d8:84:4a:91:85:94:89:35:ac:dd:4d:9c:bf:f1:17:f1:34:bd:
89:08:64:4e:b2:69:10:83:62:0a:2b:51:b2:cf:d0:78:a9:4b:
8b:09:03:67:fe:29:35:99:f7:3c:cb:6d:16:7c:69:df:1f:96:
7e:9b:ba:b6:78:aa:df:0e:ae:ae:04:3c:bd:45:ee:f7:4b:01:
e3:55:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:24 2025 by rpki-client