Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa
File: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (raw, json)
Hash identifier: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=
Subject key identifier: 5F:12:EA:5D:41:FA:E3:06:07:AF:AA:D7:C9:B5:60:EC:3F:CD:D4:8A
Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF
Certificate serial: 5B181DB02D8C2AA918DAD8A39579BA3693673E25
Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa
Signing time: Wed 08 Jan 2025 09:00:01 +0000
ROA not before: Wed 08 Jan 2025 08:55:01 +0000
ROA not after: Wed 07 Jan 2026 09:00:01 +0000
asID: 132663
IP address blocks: 103.26.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:18:1d:b0:2d:8c:2a:a9:18:da:d8:a3:95:79:ba:36:93:67:3e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF
Validity
Not Before: Jan 8 08:55:01 2025 GMT
Not After : Jan 7 09:00:01 2026 GMT
Subject: CN=5F12EA5D41FAE30607AFAAD7C9B560EC3FCDD48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cb:41:9d:a0:cf:25:da:ff:d6:18:fd:13:bb:
a4:12:8c:13:46:7e:e0:de:cf:18:5b:b5:2a:7d:10:
cd:3d:0f:d8:e8:22:46:88:b2:09:f9:a7:b2:ea:3a:
54:87:06:96:b4:f0:c0:30:37:50:ea:08:dd:2f:fd:
64:f7:92:a5:c6:0b:5e:3b:70:e0:87:49:9c:cc:04:
1a:98:5e:18:66:44:09:bf:a1:6e:9d:6d:70:79:14:
d5:fe:45:19:ee:d2:66:fa:21:e5:c7:10:3f:6b:20:
23:30:b3:83:b4:40:a7:be:16:f5:9b:9a:13:1f:e0:
22:a6:72:16:41:85:01:b0:60:d3:fb:fd:35:e5:92:
14:c2:1b:00:25:54:8b:f1:b2:3a:9e:46:14:ce:2d:
68:0e:3f:4d:97:15:52:b9:e2:b9:e7:68:3b:6a:75:
f5:01:04:b8:8f:81:66:15:81:49:c4:c7:77:dd:0a:
47:68:02:6b:9d:62:7f:5b:34:e0:63:7f:c0:cd:cc:
4a:95:01:98:ed:e1:a0:67:c8:42:d6:f9:ee:0d:31:
c7:28:28:71:d9:ee:d7:a7:4e:5c:68:1e:c8:ac:d6:
e1:41:77:65:2e:e2:2a:c9:7a:c5:71:8c:a2:88:6b:
0c:ac:8c:e5:9f:3f:db:cf:e3:44:87:1e:f0:34:ed:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:12:EA:5D:41:FA:E3:06:07:AF:AA:D7:C9:B5:60:EC:3F:CD:D4:8A
X509v3 Authority Key Identifier:
keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.26.131.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:01:3c:0b:d9:97:e3:7c:31:2b:8d:ee:4e:06:3f:4b:37:20:
67:60:8c:f9:b5:8e:15:1d:d2:40:52:fd:da:7b:d0:ae:33:27:
03:72:e7:b9:0b:55:30:aa:64:e5:f4:e2:8a:aa:03:44:80:31:
a4:8a:51:77:9b:e1:b0:82:62:6d:8f:3b:37:80:fd:2c:76:bb:
24:3e:5e:ca:a8:e4:c4:d2:0a:c2:54:15:8d:51:4d:5a:9d:37:
83:e9:62:99:1d:24:58:8a:b1:1b:c5:9c:b9:95:56:f8:96:c2:
48:ed:c4:99:d7:fe:46:46:8d:44:22:58:26:6f:db:5b:11:b4:
42:47:3f:eb:73:b8:ca:0e:4f:c2:5f:8e:e6:c7:2b:51:37:0b:
c7:1e:e4:b2:70:6f:3a:a0:aa:63:3e:3a:09:dc:5b:78:29:dd:
b0:8b:13:ec:74:cc:f4:9e:8d:1e:1f:ed:bf:56:45:37:99:31:
7d:eb:95:b1:b5:cf:4f:62:03:d5:7a:7f:43:a5:f8:a3:e5:7f:
ae:31:60:4b:b1:97:47:7b:b7:bf:99:db:6d:f7:b5:dc:f1:a7:
21:ca:33:a0:42:21:2a:6b:96:42:cf:99:55:03:e6:3f:26:a1:
6a:cd:61:bf:e1:85:c0:e0:75:c6:81:27:59:e9:a3:c2:67:70:
37:a6:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:33 2025 by rpki-client