Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa
File: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (raw, json)
Hash identifier: Y9XARniDJgg4OUqj6GjFvuZ0EXuuYtQJNDhXyplaxBY=
Subject key identifier: 47:07:76:F9:AD:BA:6E:25:E4:D7:2C:BE:57:6F:16:61:6A:EE:A4:1D
Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E
Certificate serial: 77FA361D272B904CC900D1F6D03BC48C086E5B30
Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa
Signing time: Fri 15 Nov 2024 13:00:02 +0000
ROA not before: Fri 15 Nov 2024 12:55:02 +0000
ROA not after: Fri 14 Nov 2025 13:00:02 +0000
asID: 142387
IP address blocks: 103.172.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:fa:36:1d:27:2b:90:4c:c9:00:d1:f6:d0:3b:c4:8c:08:6e:5b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E
Validity
Not Before: Nov 15 12:55:02 2024 GMT
Not After : Nov 14 13:00:02 2025 GMT
Subject: CN=470776F9ADBA6E25E4D72CBE576F16616AEEA41D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:82:c2:4a:40:ca:1a:35:2e:b3:59:57:23:
8a:c2:91:ef:dd:75:79:bb:86:31:16:d4:4d:f7:d8:
b9:f0:f4:ab:88:de:54:67:ec:86:c7:0f:e8:6c:bc:
6e:6c:5f:7f:ce:91:87:b5:28:c2:78:88:1c:b9:b4:
20:b3:f6:40:b5:09:b8:d8:b1:1b:6f:e2:d1:e8:bc:
1c:22:b3:7e:9c:49:a5:9f:62:3d:e9:4d:08:93:f5:
ac:6c:f9:cc:b3:b2:f0:6f:65:47:a7:7e:02:a3:dd:
18:e1:f6:35:6d:11:8e:40:76:05:43:63:e1:c2:6d:
05:6e:0c:df:62:47:4c:bb:63:71:51:f7:99:ee:56:
9c:e5:db:f4:34:59:65:c7:11:11:f1:f9:c2:ec:1a:
a2:2c:7c:99:9b:ee:8f:88:50:a4:5f:94:ce:cb:2c:
6e:15:0c:47:69:6d:94:ec:85:3a:1b:ec:4c:6e:59:
a0:1b:a5:b9:ed:9b:b0:73:36:a9:22:16:52:95:2d:
54:e4:fb:59:56:0e:e5:49:31:54:2e:72:ac:1d:41:
6e:ff:9d:b5:9a:3b:80:a0:c5:06:5d:c9:da:5d:75:
d1:0d:b4:ad:75:30:69:42:a3:e1:8b:96:dc:c7:a1:
16:6d:4a:b2:e5:d9:0d:1e:48:fc:43:a9:bb:3a:6a:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:76:F9:AD:BA:6E:25:E4:D7:2C:BE:57:6F:16:61:6A:EE:A4:1D
X509v3 Authority Key Identifier:
keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.24.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e4:ef:7e:19:e3:2f:62:e5:ba:7b:42:79:70:ab:62:a7:be:
bb:e6:c2:04:af:60:a3:66:97:73:ac:51:3d:4a:43:5f:41:38:
1b:73:bc:d6:24:05:d4:86:82:87:05:19:55:1d:de:2d:59:ca:
bf:35:85:96:01:e6:a2:e3:43:8e:da:6d:ea:4b:a4:38:cc:cd:
6d:c6:cd:6b:73:89:e2:39:3d:19:02:d6:dd:62:06:dd:59:42:
6a:fb:53:b3:bc:8e:d8:96:34:08:69:3c:94:13:e0:20:60:4b:
f9:62:a5:36:13:12:b6:22:fa:49:d0:2c:30:20:6d:82:d0:f8:
4c:0b:eb:7b:e7:f1:34:fb:57:f3:99:36:13:85:b3:b5:70:c9:
64:07:81:b3:1c:93:95:8d:b4:81:d5:8e:11:2d:73:a2:af:f1:
6d:e9:52:56:97:0b:42:c7:ab:15:f5:be:7b:76:e7:c5:f7:bd:
fb:22:3d:1e:57:80:a4:46:b1:09:82:67:7a:d4:0e:a7:d9:b3:
ae:a5:02:73:15:ba:3c:7d:90:01:d0:7b:d9:19:51:a3:9b:03:
77:8c:b8:0b:91:01:41:79:4e:98:db:86:b6:54:25:da:30:dd:
47:e4:aa:76:ec:02:6b:68:6c:fe:fd:f8:a1:b8:93:52:2c:70:
0e:d0:e6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:37 2025 by rpki-client