Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32342d3234203d3e203539313335.roa
File: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (raw, json)
Hash identifier: ULIbSqFPc52R9R1cvdi/vhMuEMKYuHRy3ZrMm+omXuQ=
Subject key identifier: 44:38:6A:91:88:59:6D:00:2A:70:1B:4A:71:66:28:13:21:F0:A8:65
Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
Certificate serial: 3330FBC81784BB7EC4F50D2B614C6DFCCD5A7FB0
Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32342d3234203d3e203539313335.roa
Signing time: Fri 23 Aug 2024 09:00:00 +0000
ROA not before: Fri 23 Aug 2024 08:55:00 +0000
ROA not after: Fri 22 Aug 2025 09:00:00 +0000
asID: 59135
IP address blocks: 103.7.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:30:fb:c8:17:84:bb:7e:c4:f5:0d:2b:61:4c:6d:fc:cd:5a:7f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
Validity
Not Before: Aug 23 08:55:00 2024 GMT
Not After : Aug 22 09:00:00 2025 GMT
Subject: CN=44386A9188596D002A701B4A7166281321F0A865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:e3:82:0f:8d:06:1e:fc:11:41:af:7e:a0:
63:b3:7a:cd:44:03:ca:49:45:15:8e:0e:98:62:95:
f2:46:35:9c:3f:06:58:04:dc:f4:01:1a:5a:9d:4f:
2c:9f:c1:21:88:e0:25:f9:21:bf:c6:0c:7d:8d:27:
2f:78:9d:12:9e:67:40:30:18:38:11:27:ae:88:7b:
77:4d:10:f6:62:ea:7c:3f:4f:ff:ec:da:43:51:b3:
f1:b1:76:a8:26:37:a6:63:f0:e8:0b:4f:47:9d:02:
8b:5f:83:ac:41:df:1a:8e:cc:b7:06:b7:19:02:d8:
ee:4f:5e:87:0d:1f:d9:f5:8f:4d:fb:a3:86:eb:37:
3d:08:a1:c1:37:c9:44:52:32:99:70:07:c2:ad:a1:
80:89:32:15:76:b6:68:aa:61:ff:ba:f4:c4:7d:ad:
46:de:89:3a:91:fb:02:09:fe:de:b3:c9:ea:34:12:
c6:16:cd:6c:1e:7a:ed:45:70:08:0f:bc:03:15:3a:
3e:b2:a4:d6:f7:4a:c7:77:81:b1:a8:83:20:e1:a0:
cf:16:5c:e9:ef:0e:47:7d:a4:b6:cd:4d:e4:d0:ca:
86:e1:c2:99:83:cf:7e:63:06:f5:f8:eb:1a:29:f0:
26:c4:22:0e:ce:24:44:d9:b8:d8:b7:c9:cf:a7:37:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:6A:91:88:59:6D:00:2A:70:1B:4A:71:66:28:13:21:F0:A8:65
X509v3 Authority Key Identifier:
keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32342d3234203d3e203539313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.226.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c4:03:21:1b:9a:f6:98:01:50:d4:71:f3:10:ad:fb:0e:c4:
74:fa:88:60:84:38:f8:e9:c4:c1:92:f3:4c:92:40:30:80:73:
d5:cd:8e:02:51:76:15:5a:e8:b6:e6:7d:7b:d2:62:9e:2f:f9:
a7:07:85:10:e5:0d:5b:90:5b:74:10:27:23:9d:4e:dd:54:76:
00:72:e9:c4:78:c2:1f:88:7d:f5:6f:61:17:aa:03:e0:5d:e2:
44:1f:24:b8:af:d4:58:94:a8:78:85:ab:e4:93:07:30:90:84:
81:a0:28:e1:a2:58:da:9a:c6:ec:67:93:f1:8c:74:6c:7b:cc:
2e:a8:55:b0:1c:a6:ce:d8:f6:5f:60:91:ad:20:e3:f0:b9:ae:
7e:c7:e9:4c:6d:e5:e6:5c:5f:61:63:97:d1:df:71:d2:06:a1:
6d:5a:25:4c:18:03:71:3f:ad:49:63:95:d4:b1:dd:aa:2b:0c:
d5:91:e5:03:86:c8:c3:4f:75:f4:bb:45:78:75:45:ee:48:31:
7a:a6:66:12:1c:62:94:39:40:bf:5d:6d:53:f7:ab:27:71:0a:
2d:f5:c7:8f:7f:38:84:69:2c:31:cf:dd:c9:0c:4d:25:cb:ba:
46:56:66:72:b6:6b:7f:6b:34:4c:8b:7d:3b:6a:47:3c:61:b6:
e8:33:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:06 2025 by rpki-client