Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa
File: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (raw, json)
Hash identifier: 3yNadH5UObiEmtHARrnQZT+Op/4Y8C9oXLlSYOYGT5c=
Subject key identifier: 20:2D:71:43:5A:4A:82:23:FE:BD:AC:AD:68:64:97:18:7C:51:81:F3
Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7
Certificate serial: 0CBDAD9806CE77819C44D62B2D92827C3E521CFC
Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa
Signing time: Fri 14 Jun 2024 10:00:01 +0000
ROA not before: Fri 14 Jun 2024 09:55:01 +0000
ROA not after: Fri 13 Jun 2025 10:00:01 +0000
asID: 17440
IP address blocks: 103.209.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:bd:ad:98:06:ce:77:81:9c:44:d6:2b:2d:92:82:7c:3e:52:1c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7
Validity
Not Before: Jun 14 09:55:01 2024 GMT
Not After : Jun 13 10:00:01 2025 GMT
Subject: CN=202D71435A4A8223FEBDACAD686497187C5181F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:1b:1a:59:25:cd:e4:61:fe:63:40:1f:02:
63:75:a9:3d:9a:2c:70:9c:5b:f3:d6:0e:0f:be:2b:
34:36:ae:86:9f:60:19:2f:25:33:81:f7:cd:51:f5:
14:b9:b5:97:70:ce:2d:99:1f:08:95:e4:27:e3:55:
ad:b7:36:25:22:5a:71:7a:2e:14:bd:10:57:3a:14:
4b:33:7a:5f:d6:23:eb:6c:c0:99:a2:17:b9:38:1f:
59:86:f8:ef:e8:49:80:91:f2:b3:da:a7:48:57:08:
cf:de:8f:f6:c2:5d:0c:87:82:22:59:f6:03:16:f0:
04:1c:ff:92:f6:3f:40:7f:8c:bc:49:2b:fb:a6:60:
e2:3f:51:f5:39:a1:20:97:cf:6d:8f:04:7c:7b:0a:
de:da:1d:75:9e:bf:f2:6b:8c:a2:b3:ab:5c:c4:cb:
24:c4:5d:9f:97:29:46:8a:cf:3c:51:13:1b:0f:68:
27:05:dd:b7:e9:7c:c0:2b:42:e3:d4:dd:21:f4:b6:
42:79:2b:c5:6f:05:1d:20:fb:a8:6d:f9:74:69:7f:
c5:fe:63:66:c3:34:15:1b:1c:bf:69:d8:bc:44:dc:
71:22:ae:27:50:e2:26:f8:a5:89:20:c6:c2:1b:9c:
51:01:c4:3f:9e:3a:04:db:ef:12:01:9f:c2:76:59:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2D:71:43:5A:4A:82:23:FE:BD:AC:AD:68:64:97:18:7C:51:81:F3
X509v3 Authority Key Identifier:
keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.209.250.0/24
Signature Algorithm: sha256WithRSAEncryption
32:22:8f:07:b8:a9:2f:77:21:ea:42:e8:01:64:7c:44:17:34:
fa:e9:45:77:d2:b3:e9:b3:1d:de:8b:86:bf:26:eb:67:b0:9f:
37:b5:fa:87:a2:da:96:4e:20:a3:43:41:54:6a:c3:08:c1:82:
74:e2:2a:83:98:c3:f5:31:60:69:97:44:d1:78:45:4a:1f:12:
09:e5:e8:6b:95:68:90:da:55:f4:9d:1b:3e:01:9f:07:c6:c2:
f4:d3:86:b3:d4:c7:df:d6:c0:02:68:93:7b:fb:8a:b0:a6:85:
fa:6a:88:3f:14:f9:72:55:03:f3:c8:72:dd:db:5c:e6:a1:b0:
8a:41:12:84:1a:a2:74:c4:3f:8b:1e:97:74:70:49:a4:a2:3b:
34:00:2b:6f:b1:cb:42:25:81:3d:5f:39:f3:27:53:f9:8e:5b:
b1:82:87:17:85:af:0b:2b:b9:e1:a2:e2:cb:36:fe:61:e0:84:
51:c4:fd:b6:28:dd:36:c1:28:f9:e3:2c:f3:aa:7d:7b:48:8d:
4d:2d:f4:c4:57:6b:5f:69:bb:88:8d:74:b7:29:ad:87:d1:31:
1e:75:9f:e7:6f:fa:b4:af:1f:4c:f0:da:b9:26:4e:4f:3e:2c:
93:bf:01:bb:3b:32:74:f5:88:d8:c5:32:7b:35:78:a2:80:2b:
04:9e:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:11:40 2025 by rpki-client