Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa
File: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (raw, json)
Hash identifier: o89Hh5vp0Qt2o58GB1JQke74RyM5ltdrLMS25ekXGFY=
Subject key identifier: 2F:0F:2F:8C:6F:CE:4B:11:97:6E:7E:8C:BC:A8:6A:DA:74:35:3D:BB
Certificate issuer: /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Certificate serial: 7A66917001252CD9616DF3D0F58A123D2BADA757
Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa
Signing time: Fri 24 Jan 2025 03:00:02 +0000
ROA not before: Fri 24 Jan 2025 02:55:02 +0000
ROA not after: Fri 23 Jan 2026 03:00:02 +0000
asID: 137343
IP address blocks: 103.113.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:66:91:70:01:25:2c:d9:61:6d:f3:d0:f5:8a:12:3d:2b:ad:a7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Validity
Not Before: Jan 24 02:55:02 2025 GMT
Not After : Jan 23 03:00:02 2026 GMT
Subject: CN=2F0F2F8C6FCE4B11976E7E8CBCA86ADA74353DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:d2:9d:57:93:30:cc:3b:fe:ec:05:61:3d:
b9:2d:92:f5:8b:91:22:c2:ed:e7:6f:29:b2:e2:4b:
bb:bb:44:00:28:b2:db:82:d4:cd:4f:17:e1:9f:13:
df:03:00:5a:a8:f1:18:ff:1a:86:9f:d5:51:69:a7:
f0:84:d6:a6:ed:01:11:d2:2a:75:34:86:71:11:15:
e8:cd:3d:e2:b2:40:44:40:6a:52:1e:7c:b9:1f:fd:
9c:17:81:4a:8c:8c:60:d7:65:c0:03:c9:5a:c4:61:
6c:c5:7f:ed:1b:38:b1:c1:98:9c:01:9e:23:77:f9:
3f:11:a9:92:b1:c8:ee:39:99:1a:e1:b5:bf:5e:55:
07:0b:52:04:ee:75:35:38:c2:7c:aa:83:73:db:b4:
07:ee:49:3d:1a:f3:69:01:89:5d:c3:e9:13:f6:93:
39:58:27:b8:de:0a:35:8d:34:33:48:e2:e5:0c:1a:
82:79:4b:df:f9:ff:07:2b:96:bd:23:37:7b:c4:89:
02:70:af:1a:2f:33:ae:57:31:3c:f3:b8:0c:22:a8:
31:2c:31:ec:60:f0:ba:77:ea:75:c2:e5:ff:39:36:
23:51:e0:8e:4f:e9:3c:95:cd:be:64:b1:25:c9:1c:
e4:8b:45:4a:94:a8:5e:08:1e:ea:f3:80:4d:7c:38:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0F:2F:8C:6F:CE:4B:11:97:6E:7E:8C:BC:A8:6A:DA:74:35:3D:BB
X509v3 Authority Key Identifier:
keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.113.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bf:64:ca:7f:2b:4b:22:06:b1:d9:9e:8c:5b:a9:8b:72:23:
dd:7a:eb:28:56:e8:ee:26:d0:90:81:7e:c6:a1:e1:6f:0d:02:
be:83:1f:a7:11:13:f6:55:32:13:3c:64:24:12:01:6a:6f:38:
59:82:65:a2:1c:4e:82:15:36:c8:09:55:26:bc:2a:f8:4c:b3:
07:5c:ea:32:fe:4e:e2:ba:21:75:71:70:ba:32:9e:d2:82:13:
d7:f2:7f:39:2f:c0:3d:3f:dc:21:c1:dc:08:e8:0b:13:3e:fe:
f9:14:0f:04:f1:ac:ab:4a:fe:e7:c2:04:7e:94:49:44:9c:b4:
25:b2:ca:7c:a5:a9:3e:1d:66:47:c6:72:e7:c6:5e:f1:cd:79:
26:7c:a8:91:43:26:66:c6:4b:8d:e6:49:9b:a0:30:f9:19:23:
51:3d:b1:c0:88:87:9a:33:ed:2b:b5:45:57:79:66:3d:11:12:
a3:06:e4:3f:9e:6b:c4:12:dc:26:02:ad:37:84:9f:4e:d2:47:
f4:45:3b:65:63:89:0c:4a:29:32:9a:c7:c3:60:0f:51:3c:b5:
d7:25:e9:ac:54:c4:05:8f:14:6d:ec:06:55:ff:bf:12:46:f0:
70:02:c6:3f:bb:7e:a6:f8:db:bc:76:a6:59:2a:11:23:35:44:
6d:9e:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:45:03 2025 by rpki-client