Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32342d3234203d3e203436303236.roa
File: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier: mkruWkyUTX+c2Tw+0w7WwT3w2s3+OGAbVUZStH/a/n8=
Subject key identifier: EF:A7:C1:ED:17:DE:46:A4:98:0B:78:B1:A0:51:39:82:E7:B8:1A:A0
Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial: 6631A15E950A1FAF202E85937C88CA48044DCB81
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32342d3234203d3e203436303236.roa
Signing time: Mon 01 Jul 2024 01:02:27 +0000
ROA not before: Mon 01 Jul 2024 00:57:27 +0000
ROA not after: Mon 30 Jun 2025 01:02:27 +0000
asID: 46026
IP address blocks: 103.135.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:31:a1:5e:95:0a:1f:af:20:2e:85:93:7c:88:ca:48:04:4d:cb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Validity
Not Before: Jul 1 00:57:27 2024 GMT
Not After : Jun 30 01:02:27 2025 GMT
Subject: CN=EFA7C1ED17DE46A4980B78B1A0513982E7B81AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5d:cf:7f:18:c9:47:9c:f7:5c:fe:bc:70:45:
12:b2:ff:7a:9e:3a:59:0e:c9:a0:70:24:00:64:09:
36:72:02:be:c2:f3:33:34:76:62:62:34:7e:29:51:
30:85:e0:42:cb:9a:81:4c:29:15:36:8c:61:8d:4c:
7d:07:5b:1f:8e:17:13:e0:ef:d5:28:96:8f:e8:76:
a0:03:21:2a:63:c8:d4:13:a8:e4:54:6a:de:9e:d1:
4f:ad:2e:5f:65:50:cb:ca:1a:ef:c3:cf:be:ba:05:
ff:ac:02:ae:30:76:6c:88:74:9e:4a:fa:63:47:6b:
df:75:2b:d2:68:f2:ac:83:0a:14:20:c0:93:f5:66:
40:26:a7:31:b4:8a:c3:a8:45:70:22:01:ba:c8:8d:
a1:93:c8:0f:ba:45:d4:0f:59:0f:c8:34:46:91:56:
30:d5:9c:46:4c:7b:48:29:21:ef:3b:d1:8b:2f:b1:
12:ea:5f:15:72:99:90:ef:03:ff:fc:2a:b3:6c:d7:
ad:40:29:a6:54:8c:26:59:d5:3e:ff:30:84:f1:d4:
c8:47:8c:41:f9:b3:ca:77:4e:20:d3:92:a6:0a:8e:
3a:81:80:49:e7:6d:e6:38:7a:15:e1:e3:8e:33:50:
45:e4:5e:56:d8:ac:13:10:62:34:60:86:e6:36:36:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A7:C1:ED:17:DE:46:A4:98:0B:78:B1:A0:51:39:82:E7:B8:1A:A0
X509v3 Authority Key Identifier:
keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32342d3234203d3e203436303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.72.0/24
Signature Algorithm: sha256WithRSAEncryption
43:09:1c:0a:62:3c:ff:1b:58:24:c7:8f:8a:8d:6e:3c:e0:e8:
7e:52:72:d4:38:17:da:12:f1:d9:4f:9e:9c:ca:4b:11:4d:e3:
0f:56:10:46:e5:79:5e:99:28:23:24:2f:b7:8a:6c:12:52:d1:
69:00:5b:c3:df:08:f1:0d:4d:d0:1e:68:18:ab:29:2d:a1:38:
8a:b7:31:57:bc:92:c6:55:0c:8b:a7:52:83:18:f9:98:ba:4e:
ac:03:fe:55:f7:e5:b5:e6:00:2e:1b:69:dc:e2:0b:03:a1:ce:
0d:10:ba:be:03:ee:b4:90:af:1e:70:1e:1a:82:4d:c2:ae:e1:
13:45:59:99:90:7c:fb:cc:2b:af:5f:96:0b:d5:46:74:9d:6b:
14:6a:13:52:2c:d6:ed:64:f5:b4:48:75:f9:26:ce:da:2f:33:
b7:28:45:a5:93:63:9d:80:1b:a3:dd:4c:a2:12:a2:d9:45:b6:
90:41:e9:36:85:6d:95:2b:a7:ef:dd:06:b5:20:bc:b7:8a:bd:
cb:72:4f:80:cb:f1:c9:45:c3:46:a1:62:01:8c:ee:fc:9c:ac:
78:e9:da:55:e6:6f:a3:dc:4f:77:3c:76:2a:90:e3:d5:db:70:
83:82:2f:98:80:c5:6a:a4:15:e2:7c:59:ef:bf:fb:9d:4f:f2:
8f:08:38:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:03:33 2025 by rpki-client