Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
File: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier: q1fdKnTRqStAT3YE15vq79E+QpTxFHgvWmiz6yZ6fcY=
Subject key identifier: C3:0A:03:44:14:41:19:31:BE:2F:34:B8:68:A1:5C:D0:3A:98:6F:1B
Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial: 3BE37F2E7CF3211F2C599527AF570B12C0EED0CF
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
Signing time: Wed 01 May 2024 04:00:04 +0000
ROA not before: Wed 01 May 2024 03:55:04 +0000
ROA not after: Wed 30 Apr 2025 04:00:04 +0000
asID: 55685
IP address blocks: 103.247.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e3:7f:2e:7c:f3:21:1f:2c:59:95:27:af:57:0b:12:c0:ee:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Validity
Not Before: May 1 03:55:04 2024 GMT
Not After : Apr 30 04:00:04 2025 GMT
Subject: CN=C30A034414411931BE2F34B868A15CD03A986F1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:44:31:16:83:dc:df:52:b8:c5:3e:6d:60:
57:e8:b0:8f:27:da:22:06:28:29:07:16:58:df:f8:
5a:54:a0:62:24:8a:d3:ab:80:9d:6d:54:0b:b4:d3:
79:cc:88:0e:34:f2:68:14:d7:df:22:1e:8f:c0:a5:
1d:2a:c0:3b:c7:59:e9:40:17:76:a0:38:44:f9:c7:
da:31:31:f1:1f:8a:87:87:b5:d9:6c:f4:56:d5:69:
ac:83:3e:77:e6:8d:e1:79:a1:a5:1b:74:6e:92:c0:
06:ee:c4:89:3a:9d:50:dd:45:45:12:0f:8e:8f:d6:
cd:4a:ee:ff:ec:85:93:75:c1:b3:70:d6:8a:1f:db:
b2:96:9d:fe:60:a7:5d:fa:8e:86:aa:58:33:ec:db:
e7:8f:8c:8a:b7:31:91:80:6b:cb:2d:cd:ef:11:d2:
25:5c:45:3d:b4:27:1a:ca:46:5b:30:81:cd:b9:7c:
db:06:fb:b6:c2:cb:27:86:13:8a:24:41:d6:d5:b7:
56:ed:b8:0e:c4:d8:30:fd:e6:9c:5b:36:99:94:65:
a5:ec:15:da:ec:37:d4:e8:04:3b:66:f2:3c:43:fd:
d0:42:24:90:c6:61:18:b8:0f:a8:2f:58:ee:4c:29:
86:7c:b7:3c:8f:a0:8a:01:1b:7e:42:07:8f:6e:37:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0A:03:44:14:41:19:31:BE:2F:34:B8:68:A1:5C:D0:3A:98:6F:1B
X509v3 Authority Key Identifier:
keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:07:02:71:f8:c0:1b:3e:6e:c3:68:49:9d:55:13:6a:e6:bf:
51:68:52:c5:fb:8f:7e:35:9e:79:d3:84:a1:26:38:7b:14:24:
f5:97:6d:e7:54:91:e8:95:af:00:d4:43:6b:20:23:59:52:9e:
52:7b:c0:17:e2:c3:0d:18:32:49:0b:33:a1:97:bb:f9:2e:27:
e7:61:3f:b0:8b:8f:4f:42:1c:05:21:9c:ef:06:0d:1b:5e:2f:
da:89:50:53:01:82:ef:8f:ca:22:db:1e:ac:34:c2:f1:ce:65:
77:97:b8:4b:0a:c0:15:de:86:b2:cd:2e:23:b1:3f:30:61:e8:
a3:8c:53:d4:06:af:35:e9:46:9b:56:f2:9e:57:aa:8b:e9:6a:
66:24:0a:2e:44:40:8d:60:b0:2f:cb:58:15:dd:e4:94:3c:a3:
33:65:52:98:75:57:e6:b3:0b:b0:f3:fd:27:be:e0:7c:61:83:
80:cb:1f:5f:fd:43:0d:a0:f8:77:ec:02:7d:0e:ab:30:15:ad:
66:c5:0f:22:20:9c:ac:87:bf:be:9b:46:17:fc:c5:73:57:12:
59:43:57:4f:c2:e0:1d:12:bb:7a:87:46:d8:7c:4c:0d:08:6e:
0a:57:b3:bd:64:1c:af:c3:91:ee:76:b6:07:c6:04:4f:7c:a3:
00:71:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:18 2025 by rpki-client