Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa
File: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (raw, json)
Hash identifier: /yhg5qr+BfUwCEkWIHjx5Xurv6fbCx8q1w5UII3HZ8w=
Subject key identifier: 3B:7B:10:D2:FD:A1:31:0E:EA:52:08:A6:19:EB:BC:FE:7A:96:B5:30
Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial: 66D3F9CD941D72EBA4A9B9FC240BFF9AFD8EA9E0
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa
Signing time: Wed 18 Dec 2024 03:48:48 +0000
ROA not before: Wed 18 Dec 2024 03:43:48 +0000
ROA not after: Wed 17 Dec 2025 03:48:48 +0000
asID: 141630
IP address blocks: 103.60.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d3:f9:cd:94:1d:72:eb:a4:a9:b9:fc:24:0b:ff:9a:fd:8e:a9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Validity
Not Before: Dec 18 03:43:48 2024 GMT
Not After : Dec 17 03:48:48 2025 GMT
Subject: CN=3B7B10D2FDA1310EEA5208A619EBBCFE7A96B530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:30:cd:ff:84:e3:91:25:0a:05:9a:c8:b7:
73:4a:19:d9:ba:6d:b2:a1:f8:a1:77:52:3f:56:78:
02:13:5d:e8:d4:87:1a:04:2e:7c:19:6d:02:a4:af:
ce:1c:f9:bc:5b:6d:48:9e:d0:c3:77:10:08:e9:d4:
b6:09:24:50:b6:2b:e8:2f:7a:89:74:65:65:41:fa:
aa:7f:4d:4e:3c:b6:de:ff:85:3b:1a:1e:9f:ce:b1:
b6:aa:bb:77:13:ee:36:8e:5b:46:d7:51:c3:49:34:
8a:8f:e8:0c:7f:53:79:1d:dd:11:9b:e1:d9:d6:c5:
ae:03:ba:72:b2:9b:69:87:de:53:07:45:ec:41:53:
c0:d9:65:1d:39:2f:31:54:d9:c4:48:10:25:32:fc:
1c:c5:4c:58:51:8b:cf:39:22:7f:6b:5e:46:00:bc:
9b:45:87:c1:f7:3c:6d:9e:7b:1a:62:5c:63:54:39:
c9:94:6e:6e:f0:e5:63:83:4e:94:4f:2c:28:2f:64:
54:7d:9d:ee:63:43:df:8d:76:4f:c7:92:09:fc:d8:
c7:57:ce:b1:41:33:9d:f0:70:2f:da:b0:16:61:07:
57:48:b2:5e:a6:41:28:5c:ca:d4:4a:43:59:85:66:
bc:9f:cc:96:b1:35:3a:0d:28:f7:8c:cc:76:35:95:
be:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7B:10:D2:FD:A1:31:0E:EA:52:08:A6:19:EB:BC:FE:7A:96:B5:30
X509v3 Authority Key Identifier:
keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.183.0/24
Signature Algorithm: sha256WithRSAEncryption
af:64:0a:6e:c6:ec:8c:98:55:68:4e:88:ea:f0:aa:df:1e:7d:
c9:38:32:43:4f:16:98:0c:b6:24:a6:01:18:92:d7:f7:d2:1f:
b5:72:5f:c2:27:c3:2e:79:f5:b8:19:22:0c:4d:ee:9f:51:4a:
88:83:db:8c:cf:24:f8:58:a1:80:37:08:10:18:07:9c:6d:1c:
a7:a9:a0:58:4b:36:a6:4e:83:38:0e:53:f4:27:eb:8b:55:8e:
21:19:43:a4:6d:9b:7b:48:3b:b9:06:0c:2d:6c:8b:88:20:29:
c4:b8:2d:e6:c5:87:03:40:13:3f:9f:b5:c5:9f:4c:b0:ca:e7:
01:ea:20:fc:a8:2f:e6:72:e7:d4:5d:33:22:94:6f:f7:0f:bf:
d5:54:06:33:e9:fa:cc:f7:71:c4:6f:34:a6:ff:20:46:f7:53:
04:c1:b6:a5:fe:4f:92:17:22:7b:9b:40:ee:a0:57:45:bd:0e:
44:32:a6:a4:dc:a8:10:9d:68:81:75:d3:03:b3:d6:63:8e:fa:
64:c7:b5:8f:b0:ed:e3:06:0b:df:87:7b:18:36:90:62:9f:34:
52:f8:f1:21:84:db:e2:99:42:85:6b:50:85:77:fe:b5:aa:4e:
3c:2c:d3:08:58:00:3e:38:45:8d:74:68:cd:21:ea:b3:fe:73:
08:75:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:09:12 2025 by rpki-client