Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3234203d3e20313333383030.roa
File: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: hZosjgusREm1QITquyfPnR/M8IfPTl6ZAS8oENoHwKA=
Subject key identifier: B4:F8:47:E8:BD:12:D2:80:6B:4F:B6:2E:08:78:F1:38:A2:F0:04:9A
Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial: 294A1660ACF1B7490F061256FDEF5678CB01E823
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3234203d3e20313333383030.roa
Signing time: Tue 18 Feb 2025 07:59:35 +0000
ROA not before: Tue 18 Feb 2025 07:54:35 +0000
ROA not after: Tue 17 Feb 2026 07:59:35 +0000
asID: 133800
IP address blocks: 103.87.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4a:16:60:ac:f1:b7:49:0f:06:12:56:fd:ef:56:78:cb:01:e8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Validity
Not Before: Feb 18 07:54:35 2025 GMT
Not After : Feb 17 07:59:35 2026 GMT
Subject: CN=B4F847E8BD12D2806B4FB62E0878F138A2F0049A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:99:50:22:82:ab:1d:37:0d:01:6e:54:a0:
98:5d:c3:f1:f1:77:aa:4f:26:65:20:5b:f5:c3:10:
bf:ff:a7:89:c2:9c:3b:f7:9d:ba:55:99:23:fd:bf:
be:c1:69:ca:12:1b:01:de:7b:ef:d1:4b:6c:38:82:
dc:3d:f4:f7:ef:ff:30:4a:43:03:a5:9f:f9:84:34:
ae:af:e1:0f:ea:4c:66:60:30:4e:d2:76:d8:63:28:
7d:ef:d1:d2:e2:80:6e:07:e2:36:01:b4:3a:aa:2c:
7c:67:62:a1:3a:83:c6:cf:53:ff:46:d9:75:60:a5:
b8:42:9c:9d:2a:ab:16:4a:4f:a5:f4:21:c5:59:e5:
6e:63:db:21:7f:b1:b3:8e:1a:12:1d:c3:3f:f5:9b:
e3:85:78:ef:83:39:74:cd:36:7c:ff:45:1f:2e:53:
c3:3f:05:7d:23:8a:04:b3:2e:7f:47:f4:f5:b4:9d:
1a:34:11:6b:ae:19:61:64:02:51:fd:54:72:09:ec:
3d:d4:f2:1c:4e:2b:4b:e9:ea:e6:f9:cf:49:11:1c:
d3:af:30:51:f2:c5:3c:f3:3f:3f:f4:a3:55:68:80:
c6:3f:49:9d:2f:94:19:99:6a:35:0e:96:92:92:bc:
62:7f:0c:7b:72:ee:20:e9:e7:e5:6c:44:f1:1d:35:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F8:47:E8:BD:12:D2:80:6B:4F:B6:2E:08:78:F1:38:A2:F0:04:9A
X509v3 Authority Key Identifier:
keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.66.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:8a:0e:a2:6b:01:3b:b7:f7:64:b7:e5:3f:4a:71:f1:13:ad:
cd:f5:f6:7e:ed:86:20:7f:1f:34:89:d3:cf:03:8f:bd:29:3e:
24:b1:a5:6b:d3:88:71:9c:7e:ba:c7:25:42:4c:d0:a9:ce:a9:
ec:7d:e8:0a:c9:d0:b8:cc:cf:a8:d5:9e:8a:d0:35:14:b6:6f:
f0:a0:97:48:d8:15:5d:76:0e:7b:31:22:33:3b:86:58:b4:91:
eb:c5:35:b4:f0:b0:f4:e5:a0:65:07:0a:81:d4:f2:f9:d7:f1:
3d:41:5c:86:5a:1e:9b:73:71:84:f6:1b:40:00:2f:4b:ad:7c:
c0:28:17:d0:24:4f:c5:92:39:6b:5e:23:75:83:ea:a6:30:3d:
82:b6:ac:48:cc:ba:7a:2b:6e:41:f0:0f:8d:b2:93:b6:d0:68:
e5:70:14:92:53:68:7a:be:5a:f7:2f:4c:94:cf:3b:2c:2d:1a:
5a:29:d3:7e:51:e4:63:92:bd:87:a0:71:d6:03:28:f7:3d:31:
a5:12:14:5e:5e:15:b7:cf:ad:ea:86:a9:e8:8a:e8:9c:37:e5:
1a:17:a2:ed:23:da:14:6b:92:be:f0:99:51:54:bf:2f:6b:38:
c4:07:7d:10:ef:07:ab:10:2b:93:1d:ae:95:a2:85:12:2d:4e:
1a:b9:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:48:07 2025 by rpki-client