Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
File: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier: QdxrdH7DJeQ01d2yPs/0LNDYNMsAKR57bx9AHeSr82o=
Subject key identifier: 10:4C:09:1B:74:02:12:DF:26:2A:79:DB:67:28:2A:23:08:73:40:64
Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Certificate serial: 3DE4D121A3BCA943F5286A5E9499369769E5172B
Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
Signing time: Mon 02 Dec 2024 14:39:06 +0000
ROA not before: Mon 02 Dec 2024 14:34:06 +0000
ROA not after: Mon 01 Dec 2025 14:39:06 +0000
asID: 136087
IP address blocks: 103.87.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e4:d1:21:a3:bc:a9:43:f5:28:6a:5e:94:99:36:97:69:e5:17:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Validity
Not Before: Dec 2 14:34:06 2024 GMT
Not After : Dec 1 14:39:06 2025 GMT
Subject: CN=104C091B740212DF262A79DB67282A2308734064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:b3:28:8c:ff:c1:5d:2b:96:36:a2:94:61:
56:8f:2d:e7:c3:0d:95:bc:69:2e:59:03:67:c0:61:
fb:fa:ed:96:e0:38:70:db:68:b0:65:3c:0b:6f:a8:
ea:a5:6d:bc:8a:57:1c:e7:4a:b4:4f:1c:7d:f3:60:
cb:6f:f3:bd:de:46:79:3f:b0:98:7f:c3:6d:0b:ef:
7f:6f:bf:27:c4:a6:9b:02:5e:06:60:ed:1b:eb:ad:
95:65:3b:e3:1e:c1:8a:9e:44:ad:ab:f9:fc:45:35:
c5:ed:29:1b:d6:4a:85:72:bc:c7:80:23:ac:09:6a:
96:43:26:79:c7:3f:3d:90:ed:59:3c:34:b7:29:cb:
f6:b2:5b:44:42:18:25:33:0d:2a:2c:ae:55:c9:59:
cd:99:f2:2e:0b:88:2f:df:0c:ae:c4:db:d4:57:b9:
1d:82:b7:2a:52:e3:8a:2c:2e:a1:32:c9:e9:35:c8:
dd:09:dc:b2:aa:48:c4:c5:7c:3f:78:25:69:cb:e7:
d9:e4:cb:53:fd:ef:27:f6:63:e7:60:4c:52:fd:38:
a3:84:02:5c:65:b0:78:44:55:9b:15:ca:a9:5b:5b:
57:9b:dd:b4:22:95:2c:9d:0f:fb:e3:75:42:a1:dd:
f9:c4:6f:3d:56:b0:a8:e2:43:24:76:f3:fe:06:aa:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4C:09:1B:74:02:12:DF:26:2A:79:DB:67:28:2A:23:08:73:40:64
X509v3 Authority Key Identifier:
keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.197.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a2:69:b5:e8:cc:a4:cd:16:ad:91:ac:c2:0d:9f:37:d4:7d:
2a:e4:75:eb:7f:58:82:fb:f0:2b:ee:10:87:29:4c:f5:5e:15:
57:c6:64:d1:fb:64:e6:6a:15:f2:9e:2f:5b:25:a3:5b:df:15:
d1:fc:15:56:fa:9f:54:a6:08:1a:ef:08:91:09:d9:b9:2f:85:
fb:f6:1f:65:48:7a:49:60:fb:29:a5:a1:3b:02:7b:63:d6:36:
88:cd:64:56:22:8c:38:d7:cc:66:82:0b:b5:56:47:90:0e:d9:
95:64:0c:32:5d:39:2a:69:4b:96:af:9c:28:58:1f:86:85:1b:
be:d7:49:ce:f9:dd:9a:74:46:23:87:79:c4:ea:3f:23:1f:e0:
98:5e:85:c4:da:95:ee:fe:c2:34:bc:2b:a6:93:ae:b5:26:be:
60:46:41:a6:50:9d:6e:f8:cd:92:7b:67:a9:73:f0:87:a8:ee:
a9:35:79:1a:a8:37:67:2d:ac:0a:05:a8:7e:0a:ee:29:88:ea:
af:ce:7a:5e:06:57:f7:09:02:d0:85:24:a6:31:b6:ca:a2:42:
a5:4d:dc:32:89:1e:95:63:eb:b1:e2:70:45:e0:e6:7d:09:a3:
d6:0c:79:5b:46:e6:3a:64:67:cb:0d:ef:b1:3e:9e:2a:08:7f:
37:d4:4a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:38:57 2025 by rpki-client