Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32342d3234203d3e20313335343435.roa
File: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier: ReaZM/wG+kzc6OyzjBDEVA9AdEGquuSyBTyYopgOZt8=
Subject key identifier: DE:05:A6:D3:41:0D:BA:BB:08:0E:0B:AC:3E:90:71:AA:85:71:F1:B2
Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial: 598289B48EB70517DDEC3BCB2F3FB1A97FFE027C
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32342d3234203d3e20313335343435.roa
Signing time: Wed 27 Mar 2024 17:00:02 +0000
ROA not before: Wed 27 Mar 2024 16:55:02 +0000
ROA not after: Wed 26 Mar 2025 17:00:02 +0000
asID: 135445
IP address blocks: 103.223.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:82:89:b4:8e:b7:05:17:dd:ec:3b:cb:2f:3f:b1:a9:7f:fe:02:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Validity
Not Before: Mar 27 16:55:02 2024 GMT
Not After : Mar 26 17:00:02 2025 GMT
Subject: CN=DE05A6D3410DBABB080E0BAC3E9071AA8571F1B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:41:16:f5:15:ed:a5:71:d4:35:99:06:08:
bc:f5:d0:8d:85:f7:3c:b0:12:c3:9a:34:2a:03:a1:
57:2e:97:d0:23:e8:87:48:33:17:e7:88:3e:ab:72:
96:77:1d:21:f4:1b:cd:59:63:b2:3a:11:d4:07:63:
42:3f:7b:f8:ec:63:83:a0:f2:56:5c:d7:a9:de:08:
45:42:84:50:4e:fd:4e:70:e1:78:f5:7a:c2:2a:b2:
65:ca:c9:28:d7:dd:81:d8:72:e7:96:60:e9:a7:6b:
c6:9b:a9:0e:c9:21:7b:ca:aa:04:82:6c:02:11:64:
5a:16:3d:b4:1a:93:49:83:91:d5:d0:e7:ec:90:88:
8e:21:1e:ef:f3:32:a1:25:d4:dd:74:b2:71:cf:91:
b6:7f:97:69:84:a2:6d:4f:91:ee:9f:34:04:0c:49:
93:ed:42:db:d4:aa:67:29:f5:56:3c:d9:a5:b6:79:
77:07:97:e6:7c:f6:a1:f0:13:ec:fe:c5:b4:42:8a:
3c:48:79:92:7e:fb:f6:84:78:8c:ea:f8:24:05:9d:
c4:38:f7:0a:1e:41:e4:a9:62:ad:d9:61:b4:ef:c1:
0c:1e:20:50:0b:30:18:df:b7:f0:27:c6:52:c7:52:
9e:47:f2:89:27:4f:04:c2:78:5f:8a:7b:97:87:c1:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:05:A6:D3:41:0D:BA:BB:08:0E:0B:AC:3E:90:71:AA:85:71:F1:B2
X509v3 Authority Key Identifier:
keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32342d3234203d3e20313335343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.223.0.0/24
Signature Algorithm: sha256WithRSAEncryption
45:57:bf:bb:74:0b:61:e7:53:e0:23:a0:3e:9d:8a:f3:d9:8a:
95:4a:b8:b4:79:a5:59:f3:68:3c:19:32:ab:81:e8:ae:41:f8:
f1:89:0d:ec:f8:38:5f:07:62:86:75:03:9a:c4:ec:d3:79:dd:
b4:1c:63:d5:fe:97:14:70:c1:03:2f:c0:88:09:62:bd:04:97:
b4:21:2d:4b:0e:a9:35:0c:75:5f:35:2e:43:9f:2a:bb:f8:cc:
d9:b4:1c:7b:03:84:a4:f8:ce:bf:0d:04:e4:c8:56:c2:da:28:
65:18:c1:c2:b6:9e:f8:be:ee:fa:06:2d:94:1c:5e:06:67:45:
71:cb:8b:20:a2:d3:18:55:9d:fe:47:32:a0:88:61:b9:a3:2a:
ae:1e:1c:c3:53:f8:4b:f3:99:28:6f:16:ae:39:98:57:20:b6:
07:0b:be:38:35:31:3a:98:49:18:85:3a:51:af:63:f1:2a:31:
f1:db:fd:15:d2:93:1b:d1:68:92:63:ae:77:c1:fe:34:5b:26:
98:b1:78:2f:bd:7b:34:05:bf:92:b0:a6:6a:4e:fb:07:79:96:
b2:3a:2b:c7:0c:9b:3e:ae:2c:af:6f:f1:48:07:19:52:4f:88:
bc:9b:82:59:00:18:55:dc:86:a9:4a:b8:ac:c7:50:ff:e9:0e:
60:57:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:07 2025 by rpki-client