Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa
File: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier: hm/9X3cuyk8jd/AB2iBbcuodpHF2xW4uztYBSuY3yNU=
Subject key identifier: 74:92:25:AB:BF:0D:66:DF:A8:3B:EF:D5:24:FB:6A:7E:0E:48:DB:CF
Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial: 19092AA2A78A17D259135438A4C9DA35CC95C96B
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa
Signing time: Mon 01 Jul 2024 01:02:28 +0000
ROA not before: Mon 01 Jul 2024 00:57:28 +0000
ROA not after: Mon 30 Jun 2025 01:02:28 +0000
asID: 46026
IP address blocks: 103.135.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:09:2a:a2:a7:8a:17:d2:59:13:54:38:a4:c9:da:35:cc:95:c9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Validity
Not Before: Jul 1 00:57:28 2024 GMT
Not After : Jun 30 01:02:28 2025 GMT
Subject: CN=749225ABBF0D66DFA83BEFD524FB6A7E0E48DBCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:91:ae:67:f0:f2:15:53:53:7d:b8:dd:6d:
71:71:4a:b5:7c:06:2a:c7:42:49:1b:89:b9:e4:f6:
7b:9d:af:22:a5:91:87:de:83:31:e2:26:9f:96:58:
28:ac:ce:9b:19:61:ce:76:25:01:ac:ef:46:8f:7c:
ad:d3:4a:86:00:ab:86:ad:f0:09:08:d0:10:8d:49:
b7:6a:ec:aa:8a:49:49:da:38:45:cc:51:65:d2:f4:
c2:bd:c3:15:0b:ef:bf:e4:0d:f4:81:10:5e:74:cb:
e2:9d:eb:19:6d:46:ee:4d:2b:58:0b:03:47:cb:46:
92:19:c6:69:e2:33:75:e4:a1:a8:45:12:61:c2:df:
da:f4:60:9c:f5:9f:69:db:9c:4a:df:c0:9f:de:02:
9a:f5:35:ca:ee:25:69:ee:45:e6:01:8f:87:e3:21:
dc:de:29:59:08:4a:62:16:cc:d6:13:01:a4:ac:21:
a5:00:33:79:56:3f:c2:73:42:f2:d8:9a:9e:7d:50:
c1:35:cc:85:be:dc:18:fd:01:91:ad:85:a1:44:76:
3c:a6:b7:fd:2c:0f:c9:74:e5:86:68:36:56:47:07:
d5:49:e5:6c:78:58:32:b9:08:f0:f3:64:1a:97:6c:
32:95:10:2e:f8:c5:b5:86:22:fc:c1:57:ed:a8:49:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:92:25:AB:BF:0D:66:DF:A8:3B:EF:D5:24:FB:6A:7E:0E:48:DB:CF
X509v3 Authority Key Identifier:
keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:eb:69:06:e2:a0:a4:49:4d:3f:60:2b:a0:a3:ac:0b:09:0a:
e3:d7:f0:6e:d7:87:fe:21:ca:dd:50:83:b9:8e:bf:44:e6:ae:
4f:ee:5b:94:8d:f2:1c:84:c4:2e:a5:44:a9:d7:1f:6f:e2:73:
cb:6d:72:08:af:ab:73:13:85:0f:d4:45:0c:bf:68:41:d1:0f:
e5:67:ab:4e:23:6f:06:8f:26:61:01:69:96:c5:56:d9:d4:a7:
2a:f8:00:a8:58:2a:be:4d:fb:18:e1:d8:17:f4:db:33:6c:66:
15:f1:8c:f5:35:84:fe:86:de:db:0a:7c:23:58:04:95:2a:e9:
76:fd:50:db:91:ec:c8:90:06:5e:6d:01:8b:90:1b:a8:8c:1b:
f5:1b:0d:64:9f:58:bc:d2:3b:ea:da:cf:5b:89:20:ee:91:10:
e5:c8:8c:5e:53:13:6a:55:df:af:7f:29:76:41:78:5a:72:a8:
4b:d8:8e:cb:9f:40:88:24:26:04:70:01:32:72:a1:24:c0:d4:
9c:1d:7e:ad:10:5b:6b:97:9f:30:af:b9:08:cf:b8:94:fe:73:
c4:c2:0b:55:f9:9a:ac:f8:c9:eb:49:b8:54:29:15:a5:3a:d9:
f4:50:94:95:af:57:3c:72:54:79:b7:46:bb:74:9d:c7:a3:91:
7c:f3:8c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:12 2025 by rpki-client