Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa
File: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=
Subject key identifier: 0C:58:9A:B2:1B:7F:7F:A1:59:B3:C4:A7:2D:E6:85:D7:F0:23:A8:3E
Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB
Certificate serial: 2F792BC4974046844939CA26D7C7F987EFBB695B
Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa
Signing time: Tue 28 Jan 2025 10:01:28 +0000
ROA not before: Tue 28 Jan 2025 09:56:28 +0000
ROA not after: Tue 27 Jan 2026 10:01:28 +0000
asID: 56255
IP address blocks: 103.10.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:79:2b:c4:97:40:46:84:49:39:ca:26:d7:c7:f9:87:ef:bb:69:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB
Validity
Not Before: Jan 28 09:56:28 2025 GMT
Not After : Jan 27 10:01:28 2026 GMT
Subject: CN=0C589AB21B7F7FA159B3C4A72DE685D7F023A83E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:89:22:c9:3c:c8:70:3e:c2:7a:c3:25:9a:
88:71:54:65:d7:25:85:b0:8d:d7:34:b2:b9:bc:26:
37:6d:64:0b:f0:39:02:1e:8e:c4:38:a9:dd:4e:2c:
a5:39:ed:66:9b:f7:6c:85:f0:93:d7:e3:76:b9:63:
6d:85:11:8d:eb:0c:fb:15:f9:91:88:25:cd:28:dc:
78:cc:66:fd:18:f1:20:2a:f6:f1:2f:d1:2d:6c:60:
5a:31:8d:0e:52:23:71:e1:c2:86:8d:7a:fc:38:2c:
54:f7:97:31:c1:9e:b9:a8:c6:9d:e8:38:7b:73:41:
28:02:db:88:87:e5:10:58:75:e1:15:97:22:f9:c5:
73:43:77:d2:c7:ec:89:cc:0c:09:ca:ce:98:a0:ac:
f1:7b:f2:f8:40:4e:b6:3a:7b:dc:e4:62:44:2b:6b:
de:90:cb:ab:e7:e4:1c:49:d2:4e:ad:a5:d5:37:9c:
65:db:60:65:c5:8e:5c:30:b4:24:43:ee:bf:25:a2:
15:bf:5e:3f:43:63:4a:6e:eb:20:47:9a:62:e1:0b:
57:87:cd:91:dd:93:98:36:c7:bb:7e:a7:d4:1f:a7:
5e:4a:90:14:a1:cd:1f:fa:b9:71:2e:03:5f:e5:10:
96:c4:24:35:27:4f:dd:95:7d:12:87:3b:6d:f6:75:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:58:9A:B2:1B:7F:7F:A1:59:B3:C4:A7:2D:E6:85:D7:F0:23:A8:3E
X509v3 Authority Key Identifier:
keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.171.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:d2:12:22:f2:0a:b7:f8:b8:31:4e:1c:c8:66:a2:ee:64:2e:
23:15:a4:98:73:b5:70:06:d2:cf:8a:be:88:ce:7d:bb:2d:cc:
ae:9d:76:49:ea:77:7e:de:30:45:b4:2b:39:88:08:ac:bd:2e:
06:41:6e:b5:6c:ec:5d:fc:3a:10:0c:8e:39:69:f3:6b:d9:f9:
98:2b:08:01:5a:98:e2:82:c1:74:81:6c:33:33:6b:74:2a:50:
db:57:fd:bd:4d:a1:0e:65:3d:1e:bc:75:fc:ac:01:c6:d7:70:
06:05:c2:97:e7:e5:22:37:34:a4:69:a5:81:f2:b5:62:26:92:
fd:d6:62:7f:e2:dd:68:97:5f:ce:1a:49:fc:76:a1:7b:3f:26:
7a:92:ca:36:ee:9b:94:64:74:b8:40:49:95:3c:b6:c9:c2:29:
e5:58:3f:13:d5:64:5c:f7:d1:2e:91:60:a4:f3:b2:80:c1:22:
ec:55:cf:b2:09:6c:e4:83:30:65:47:20:85:9a:12:76:92:fc:
51:0f:c9:79:3f:ca:16:47:62:0f:a0:e1:1a:39:63:13:d3:87:
c8:92:e9:6f:95:6d:04:4f:fb:fe:c7:86:a5:26:4e:dc:43:b0:
32:8c:31:c1:bc:29:d8:8b:d2:14:70:bf:42:7a:77:9b:88:b8:
bf:3e:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:08 2025 by rpki-client