Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa
File: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (raw, json)
Hash identifier: G5sHOHBzxJzFIrxthLRKk6G43dQCmtWYfeL3J4nuOFw=
Subject key identifier: 12:F1:A8:F0:56:22:F6:4F:92:12:45:CE:24:F0:C2:F7:90:65:48:84
Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6
Certificate serial: 58EBEB38906118278E31D8515A07AD3041552389
Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa
Signing time: Wed 20 Mar 2024 16:00:01 +0000
ROA not before: Wed 20 Mar 2024 15:55:01 +0000
ROA not after: Wed 19 Mar 2025 16:00:01 +0000
asID: 140472
IP address blocks: 103.144.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:eb:eb:38:90:61:18:27:8e:31:d8:51:5a:07:ad:30:41:55:23:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6
Validity
Not Before: Mar 20 15:55:01 2024 GMT
Not After : Mar 19 16:00:01 2025 GMT
Subject: CN=12F1A8F05622F64F921245CE24F0C2F790654884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:90:3a:07:92:92:9a:4d:3e:23:cd:e0:ba:
e3:d9:a7:eb:d3:c4:da:62:bb:f3:05:ef:32:c6:6a:
00:f1:4a:9b:09:e2:af:7c:60:eb:65:4a:db:00:a1:
ca:4e:28:e8:48:78:54:7b:59:31:8a:44:9a:3c:97:
48:2e:0f:01:86:5c:f4:4c:3c:9b:ac:03:5d:0e:da:
2d:c2:a1:ed:3f:59:39:59:f6:c0:04:0c:ef:00:03:
e6:73:80:f6:aa:19:21:0e:a0:b8:35:54:65:a7:0a:
27:5e:32:6a:8b:d4:0e:f2:30:f6:e2:fc:98:41:bd:
5c:50:c3:1d:09:47:b9:80:8c:b7:e1:ae:19:72:cd:
48:c2:a0:71:74:74:ec:dd:dd:66:25:2d:43:f3:ce:
ab:04:a6:50:80:6c:ce:4b:c3:6d:d9:bb:c7:3f:12:
ec:d1:c5:9a:67:fd:f4:96:60:f8:19:21:98:45:b6:
5b:d7:55:cc:9e:a0:a8:5f:ba:e0:3e:10:01:79:e1:
57:35:f3:eb:33:e0:3f:3f:9c:b6:ac:3a:ab:dc:3e:
be:10:1a:2d:13:d5:5a:94:76:b0:6d:6d:54:23:17:
68:33:0d:eb:5e:d6:d0:c6:6f:0a:3c:d1:cc:10:42:
0c:ee:b8:86:be:69:51:31:77:51:79:7b:eb:e5:3e:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F1:A8:F0:56:22:F6:4F:92:12:45:CE:24:F0:C2:F7:90:65:48:84
X509v3 Authority Key Identifier:
keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:3c:dc:50:6e:ae:8d:b2:b8:88:81:d1:1f:9a:4a:2f:19:38:
42:e3:55:29:f2:ac:0f:76:0b:d9:94:c7:fe:b3:22:8e:77:04:
37:0e:c1:81:d4:a7:77:2f:89:ac:36:68:ec:69:d2:1f:42:06:
74:cd:87:0c:a6:d4:2b:fa:bb:78:e9:81:36:d3:0c:5c:75:b6:
59:c1:06:3f:81:c4:8e:f7:d0:b8:23:4b:08:6a:9d:84:ef:09:
17:47:df:15:51:3d:f2:d2:91:f5:44:7d:5e:ba:d5:6a:02:ee:
0c:8e:f4:a5:e7:ee:65:7c:2c:d9:0d:d0:96:c5:5a:b9:ff:e3:
be:76:a7:67:b4:f0:d8:3c:32:ac:7d:ff:23:fc:84:5e:61:b0:
2e:b9:2c:50:f2:5c:3d:c7:7f:8a:93:1e:a3:65:5a:f3:e3:8b:
66:80:8c:92:bc:63:d8:f7:f9:c2:b3:39:ff:72:b6:42:74:c2:
de:b8:46:74:4b:68:dd:df:2d:99:ca:1f:61:57:a3:90:ee:d8:
e0:1d:d7:38:6b:a6:da:df:35:ea:b2:fc:fd:8f:d3:ba:7c:9e:
5c:9e:c3:72:96:25:d0:be:b3:05:ce:0b:37:ab:2c:b6:f1:92:
9a:dc:25:06:97:15:ca:3c:b5:c6:50:7d:da:b5:0f:43:40:bd:
47:20:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:23 2025 by rpki-client