Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa
File: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (raw, json)
Hash identifier: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=
Subject key identifier: 86:6D:45:B6:6F:61:BD:4F:6D:8D:F4:CC:75:01:B3:29:56:1D:BA:11
Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45
Certificate serial: 70E66826D8B95FE7984AF27B710E2CA6756E6EEA
Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa
Signing time: Thu 27 Feb 2025 05:38:02 +0000
ROA not before: Thu 27 Feb 2025 05:33:02 +0000
ROA not after: Thu 26 Feb 2026 05:38:02 +0000
asID: 136099
IP address blocks: 103.89.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e6:68:26:d8:b9:5f:e7:98:4a:f2:7b:71:0e:2c:a6:75:6e:6e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45
Validity
Not Before: Feb 27 05:33:02 2025 GMT
Not After : Feb 26 05:38:02 2026 GMT
Subject: CN=866D45B66F61BD4F6D8DF4CC7501B329561DBA11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:00:27:a4:fa:83:6c:22:8b:f1:7f:d8:42:60:
51:53:b4:6e:44:73:7a:04:f4:b2:e3:76:78:43:38:
3f:54:79:ca:ff:f8:b6:9a:fd:ef:5f:42:36:93:2a:
48:bd:12:7d:a9:38:c0:06:d4:67:08:29:2f:6b:fc:
2a:0a:3a:29:09:74:2c:82:57:aa:5b:f9:92:01:eb:
e9:2f:36:9f:9f:e4:54:bc:5e:49:3a:af:b9:22:af:
7c:72:5d:24:09:48:06:7a:a4:25:9d:d7:0d:8f:7b:
31:cb:12:77:2e:fc:78:40:c2:87:c1:c1:ec:4b:13:
0a:32:b6:f4:36:09:21:57:31:b5:a0:7a:3b:ad:57:
63:b8:40:5c:86:64:9d:2f:8b:32:bb:35:cd:cb:79:
92:c5:69:39:aa:9a:73:71:04:99:02:48:e8:11:5d:
77:b0:a2:d6:d2:ac:fd:f2:ff:69:37:85:41:e1:a1:
ac:f7:c8:00:12:0b:fa:51:e5:67:17:0d:93:26:cb:
e5:46:0d:c9:85:64:cb:32:9c:b3:f9:3a:bc:26:b8:
66:0c:a7:7c:0b:17:d3:1d:7b:f9:61:dd:c9:a2:f0:
0b:dd:d9:e5:45:6f:f9:ad:bf:d0:99:93:fe:7c:d6:
bf:2f:9c:e9:68:ed:b7:29:ca:56:2c:b1:a4:f5:9d:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6D:45:B6:6F:61:BD:4F:6D:8D:F4:CC:75:01:B3:29:56:1D:BA:11
X509v3 Authority Key Identifier:
keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.248.0/24
Signature Algorithm: sha256WithRSAEncryption
59:57:31:1d:6c:4d:10:e1:79:22:b6:77:8d:6e:a3:45:9d:39:
9f:96:b6:c6:0b:7e:d2:57:0c:3b:73:4f:fd:be:a7:90:57:27:
d1:23:ea:a1:d3:67:fd:da:23:fe:f8:84:da:40:64:5a:db:e6:
fb:a0:86:7e:3b:c6:3e:4a:3c:ce:14:ba:4b:9b:f3:7c:ae:2a:
bf:e5:ef:5a:ef:88:38:0f:d2:1f:04:6a:4a:a7:d1:c2:57:54:
e1:21:a4:ca:3f:ec:f5:7b:db:d4:dd:b5:4d:bf:5d:f1:f3:40:
4a:32:ab:39:2b:5d:f5:b1:76:14:b9:d2:f2:12:fb:fc:67:1b:
d4:c9:9a:16:d7:d9:52:cc:c3:f8:7e:4b:8b:bc:c3:61:4b:0a:
d7:0c:ab:03:bf:f0:c6:c8:11:f7:10:16:73:5a:e3:59:a0:47:
3d:8e:71:cf:44:3a:8a:8e:9f:9a:53:ac:2d:b8:a7:7b:35:19:
d0:a6:7a:75:c1:68:e5:72:0a:be:ee:f0:7a:ff:b7:c4:0b:f9:
31:c7:ea:4e:ec:b3:f6:4e:d5:5c:ca:57:e8:0d:73:ba:29:56:
6f:f8:c1:65:dc:1a:f5:b4:0a:17:6c:f3:5f:44:ad:a9:f7:5c:
7f:51:98:f6:da:1e:f1:1a:fe:9b:f0:db:f2:3a:ea:7a:52:7b:
47:7e:ac:bb
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcOZoJti5X+eYSvJ7cQ4spnVubuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw
QzI2NUQ0NTAeFw0yNTAyMjcwNTMzMDJaFw0yNjAyMjYwNTM4MDJaMDMxMTAvBgNV
BAMTKDg2NkQ0NUI2NkY2MUJENEY2RDhERjRDQzc1MDFCMzI5NTYxREJBMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwACek+oNsIovxf9hCYFFTtG5E
c3oE9LLjdnhDOD9Uecr/+Laa/e9fQjaTKki9En2pOMAG1GcIKS9r/CoKOikJdCyC
V6pb+ZIB6+kvNp+f5FS8Xkk6r7kir3xyXSQJSAZ6pCWd1w2PezHLEncu/HhAwofB
wexLEwoytvQ2CSFXMbWgejutV2O4QFyGZJ0vizK7Nc3LeZLFaTmqmnNxBJkCSOgR
XXewotbSrP3y/2k3hUHhoaz3yAASC/pR5WcXDZMmy+VGDcmFZMsynLP5OrwmuGYM
p3wLF9Mde/lh3cmi8Avd2eVFb/mtv9CZk/581r8vnOlo7bcpylYssaT1nW9DAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUhm1Ftm9hvU9tjfTMdQGzKVYduhEwHwYDVR0j
BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx
MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2
NUQ0NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxNDA1NTQ1LWMzNWQtNGRlMS05
NjE4LTQ0YjVmNDE3YTMwMy8wLzMxMzAzMzJlMzgzOTJlMzIzNDM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1n4MA0GCSqG
SIb3DQEBCwUAA4IBAQBZVzEdbE0Q4XkitneNbqNFnTmflrbGC37SVww7c0/9vqeQ
VyfRI+qh02f92iP++ITaQGRa2+b7oIZ+O8Y+SjzOFLpLm/N8riq/5e9a74g4D9If
BGpKp9HCV1ThIaTKP+z1e9vU3bVNv13x80BKMqs5K131sXYUudLyEvv8ZxvUyZoW
19lSzMP4fkuLvMNhSwrXDKsDv/DGyBH3EBZzWuNZoEc9jnHPRDqKjp+aU6wtuKd7
NRnQpnp1wWjlcgq+7vB6/7fEC/kxx+pO7LP2TtVcylfoDXO6KVZv+MFl3Br1tAoX
bPNfRK2p91x/UZj22h7xGv6b8NvyOup6UntHfqy7
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:24 2025 by rpki-client