Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa
File: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (raw, json)
Hash identifier: uP3Lxf8p7LpviEyknQjtinyqvEW0qcTjM+HY0BAA+2c=
Subject key identifier: 13:F0:8E:82:69:F8:D1:9B:48:5F:56:33:CE:DE:CD:09:FD:BC:4A:3B
Certificate issuer: /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6
Certificate serial: 6E61BFF3995F7BBFE970EF64E4F577CD3195B147
Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa
Signing time: Wed 17 Jul 2024 09:48:38 +0000
ROA not before: Wed 17 Jul 2024 09:43:38 +0000
ROA not after: Wed 16 Jul 2025 09:48:38 +0000
asID: 140398
IP address blocks: 103.150.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:61:bf:f3:99:5f:7b:bf:e9:70:ef:64:e4:f5:77:cd:31:95:b1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6
Validity
Not Before: Jul 17 09:43:38 2024 GMT
Not After : Jul 16 09:48:38 2025 GMT
Subject: CN=13F08E8269F8D19B485F5633CEDECD09FDBC4A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:ec:ef:69:b7:20:32:48:c2:d0:9b:28:da:
93:d4:86:94:a4:0f:3d:c3:1b:e9:fc:1e:ea:95:b9:
31:fb:dd:35:7d:37:16:10:5c:04:76:67:f9:d4:4a:
34:60:8f:b6:9a:06:00:b7:1a:3c:43:78:35:9d:67:
8e:8d:68:47:e7:81:48:9a:87:a4:b1:42:1d:da:68:
f5:4e:b2:83:e2:32:d2:50:2e:e6:ba:83:14:9c:7a:
6e:2d:ea:ae:87:82:64:08:0e:d4:a8:a1:5a:4b:89:
9f:d5:dd:8d:65:4d:eb:ac:f1:d0:13:a0:a7:5f:27:
f1:42:c0:f2:5c:be:da:1d:cb:e2:62:6f:39:ea:c0:
54:b5:5b:46:41:f7:e9:8c:65:d7:29:5b:ae:24:82:
49:87:bb:12:c9:56:a4:30:9b:4b:24:61:1e:6e:c1:
6c:2d:30:d7:c1:22:99:d9:4c:4c:aa:96:4b:d8:c4:
51:ff:10:35:c4:4f:55:e4:6f:aa:e4:ed:f0:a3:6a:
8b:ca:f3:bc:1f:14:8a:21:87:b9:8d:eb:18:52:68:
82:ea:46:1a:85:64:33:76:ac:9b:09:b9:3a:21:25:
54:cb:7a:11:e8:cc:74:97:07:94:7d:4d:0a:ab:89:
9d:bf:63:b7:af:8a:07:7f:69:1b:0f:ce:ea:f3:61:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:8E:82:69:F8:D1:9B:48:5F:56:33:CE:DE:CD:09:FD:BC:4A:3B
X509v3 Authority Key Identifier:
keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.22.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ca:15:dd:e1:14:8a:a3:2a:5c:8e:1e:6d:72:d8:ee:d1:99:
e8:3d:04:52:66:a4:9c:da:3d:a0:cf:33:95:ba:38:fd:3c:de:
5c:44:ab:5b:cc:5c:7b:3e:94:e3:6a:8a:b8:57:19:71:88:cc:
47:8a:5c:e7:e8:07:a0:2b:7c:e8:6a:6c:37:cf:1f:e1:74:cb:
30:eb:22:60:53:5c:7a:08:9c:71:42:7c:0b:4a:31:38:32:9c:
27:f3:19:79:ba:fd:be:06:66:41:81:cf:0a:b8:b0:c2:11:fd:
ca:8b:63:e4:60:43:d5:36:ad:e0:e3:c0:5a:85:7c:56:9c:12:
8b:bc:bb:8c:19:56:ba:46:0b:d9:53:da:9b:de:ac:ae:4e:17:
d2:73:df:9f:79:7e:fa:7c:61:e2:fb:5b:d6:3e:d4:c3:18:5b:
a8:ea:4b:91:5c:3e:99:7c:df:ea:5d:54:f9:bd:62:54:64:08:
25:2b:88:c8:76:e3:08:c0:ac:21:44:bb:95:0d:5d:d7:1f:04:
d9:d8:58:38:0c:26:ca:da:bd:1c:1e:0f:0d:18:09:eb:c5:39:
1e:31:05:fd:87:2e:69:d4:b9:6e:51:b4:10:7d:34:fb:56:be:
76:b3:7a:ea:01:23:c5:d2:a6:b2:96:83:65:c1:17:19:4a:ba:
93:1d:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:56:28 2025 by rpki-client