Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa
File: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (raw, json)
Hash identifier: BITrYKnWZJgNzxKxBZHGB0Gt44gXAvyXNCG3Kynqo94=
Subject key identifier: FB:86:A6:1B:9C:2C:49:31:19:0A:E4:3A:68:EC:E8:D5:22:D4:E7:23
Certificate issuer: /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B
Certificate serial: 3B08EF6CE4E320EBC503B7C13BBB2C019A51FCBF
Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa
Signing time: Thu 07 Nov 2024 11:00:39 +0000
ROA not before: Thu 07 Nov 2024 10:55:39 +0000
ROA not after: Thu 06 Nov 2025 11:00:39 +0000
asID: 141669
IP address blocks: 103.162.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:08:ef:6c:e4:e3:20:eb:c5:03:b7:c1:3b:bb:2c:01:9a:51:fc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B
Validity
Not Before: Nov 7 10:55:39 2024 GMT
Not After : Nov 6 11:00:39 2025 GMT
Subject: CN=FB86A61B9C2C4931190AE43A68ECE8D522D4E723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:a0:ee:b5:58:a2:79:77:96:bc:f7:b8:77:
d2:92:27:46:02:60:e9:c5:fa:d4:4b:88:d3:0b:1d:
1c:ad:f1:aa:ae:dd:46:f4:11:24:80:3f:e4:e0:94:
36:e6:af:64:69:23:0d:19:5d:d8:b8:54:e6:41:0f:
1d:91:8f:f4:06:df:83:f6:17:e2:43:e5:5e:97:7c:
21:4f:b5:56:8c:3c:df:d2:d4:41:47:f5:c5:cd:b9:
74:98:ec:eb:88:38:f5:e3:3b:8c:43:3f:48:93:69:
7b:f0:5c:56:6e:bd:10:22:44:5c:fc:fe:f8:4f:b0:
05:bc:d1:31:e7:db:41:16:4f:53:77:44:fc:80:46:
be:d7:69:f5:86:82:73:dd:21:a8:2f:0f:4b:50:98:
a4:69:8b:3e:94:75:f1:94:73:96:fc:30:91:b5:11:
f6:0d:51:ec:ba:d6:e0:94:60:21:5e:41:52:8b:12:
72:41:7c:a6:44:17:1f:d4:7c:2a:b9:3b:ed:9d:5a:
6b:8c:10:3f:4f:d3:50:b1:a9:3e:4b:07:be:d3:ff:
09:2e:fb:2d:d2:21:fd:cf:e3:1a:02:9d:10:54:18:
45:08:b8:d2:f5:e1:5e:13:8e:e0:bf:33:f5:34:c4:
e4:30:15:d0:0d:f7:4d:01:26:18:cf:d5:5c:09:9e:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:86:A6:1B:9C:2C:49:31:19:0A:E4:3A:68:EC:E8:D5:22:D4:E7:23
X509v3 Authority Key Identifier:
keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.239.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e1:39:45:f1:cf:d9:c4:32:4c:39:62:2b:7a:40:be:72:81:
d7:7e:dc:35:ed:96:db:7c:47:65:38:dd:4c:93:88:0a:08:6f:
87:c2:39:c2:ae:a9:6a:a1:f0:9e:04:06:95:88:81:83:67:64:
9b:72:63:fb:88:be:14:b6:e1:e4:12:5d:3f:e3:92:aa:7d:69:
a7:63:f8:24:3b:82:1c:58:c8:1d:28:ed:71:2e:a7:3d:11:46:
a0:e1:fd:a7:07:12:f5:b3:a9:e1:d4:3d:c8:f5:50:fe:fd:24:
50:50:98:8e:5a:26:62:27:af:b9:8a:39:61:ae:bd:72:e2:1e:
d7:c0:8e:11:92:49:9a:27:32:8b:c5:43:d6:d2:4e:85:f9:c6:
51:10:ce:ca:45:2c:d0:d2:1a:30:d7:57:47:b4:9f:44:4e:96:
bb:1c:68:d1:2c:3f:28:b6:af:7a:f1:6a:11:20:1f:22:08:0b:
f3:57:32:f9:9d:14:d7:b2:80:49:54:f1:04:4d:64:63:ac:33:
54:7f:08:af:c5:79:04:3a:63:d5:87:0d:a7:2c:bc:7a:bd:80:
45:48:fa:f0:5e:76:a4:75:ea:fc:89:b8:f4:b9:96:d3:ec:00:
f3:7a:b1:d4:b9:4f:f7:0d:df:f4:73:da:c3:22:56:a5:9d:d2:
e9:a4:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:19 2025 by rpki-client