Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa
File: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: Gqjs8W/hxpL2gCxE1+hRH/WoM9HAVJhf5XiKi+bhD8c=
Subject key identifier: 64:7B:7A:75:ED:C4:4C:14:C6:C6:4D:EF:57:31:2B:00:11:51:D4:D5
Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial: 7D85263A2E7894A221584AB67D6F6BC2FB803FB5
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa
Signing time: Tue 18 Feb 2025 07:58:25 +0000
ROA not before: Tue 18 Feb 2025 07:53:25 +0000
ROA not after: Tue 17 Feb 2026 07:58:25 +0000
asID: 133800
IP address blocks: 103.94.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:85:26:3a:2e:78:94:a2:21:58:4a:b6:7d:6f:6b:c2:fb:80:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Validity
Not Before: Feb 18 07:53:25 2025 GMT
Not After : Feb 17 07:58:25 2026 GMT
Subject: CN=647B7A75EDC44C14C6C64DEF57312B001151D4D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:14:24:31:3f:07:2e:4f:8e:46:ce:2f:97:
f9:22:d2:c1:c4:85:ec:85:be:6e:f8:bd:36:8b:cb:
66:e4:08:30:78:37:fc:fa:3d:3b:43:13:9d:c8:2b:
27:f8:2e:60:12:2c:ce:71:d5:c3:8d:64:15:cc:ff:
da:97:3b:c7:f4:7e:34:91:cf:0b:e8:14:e6:53:44:
6e:a2:99:7f:0d:02:80:c4:a4:07:09:da:ac:a8:7c:
f2:22:64:12:bd:4e:21:58:ab:9c:92:44:e7:dd:69:
5a:08:80:e4:60:6c:af:8c:f8:c1:99:8a:c2:2f:2d:
fa:cb:8d:e9:3d:bf:de:44:12:6b:9d:2b:36:af:09:
79:a8:d8:0b:58:9f:91:7c:86:17:20:7d:f8:28:a4:
83:b6:fb:52:54:ef:e7:d8:d9:01:f8:ab:56:6e:0f:
ae:de:0a:e9:15:a8:d1:18:23:29:5b:74:73:cc:e2:
6d:90:1d:e5:2b:9e:29:ff:82:64:fa:f3:32:a2:80:
11:d3:2d:54:e4:dc:24:cd:ec:72:52:74:96:0a:7a:
4a:cd:d5:40:03:02:a2:1b:14:f0:9e:c7:e2:df:2b:
6b:46:eb:e7:87:51:d2:65:12:0f:d6:46:08:a0:d7:
4e:f7:bc:78:62:13:0b:07:e2:7f:7e:0c:c2:38:f3:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:7A:75:ED:C4:4C:14:C6:C6:4D:EF:57:31:2B:00:11:51:D4:D5
X509v3 Authority Key Identifier:
keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.238.0/23
Signature Algorithm: sha256WithRSAEncryption
50:11:82:87:37:37:77:b1:43:a1:18:68:64:91:82:ed:97:3d:
ee:81:6f:2f:54:21:a6:98:a2:15:ad:c4:f1:db:64:93:04:2d:
9b:01:6e:dc:1d:70:c8:80:2e:fb:23:df:2f:e8:ca:18:09:c4:
20:59:be:4d:25:b9:77:80:e0:74:a4:a2:33:22:ac:fa:28:bc:
32:12:0e:26:26:6d:95:4e:a2:9e:7b:cd:dc:30:0d:69:58:a8:
cb:04:c1:b3:f5:d7:23:5f:36:2e:b6:38:57:ec:ca:eb:3a:ae:
ab:2a:94:88:76:7a:50:0b:87:59:eb:88:52:e9:f1:51:7c:cc:
28:09:b3:ad:34:c4:67:1f:59:fb:d3:0d:df:07:0c:3a:64:5a:
17:3e:62:23:65:88:84:6a:a4:07:e3:88:61:dc:28:b3:10:01:
2e:5b:51:9a:9c:b9:66:a7:e9:85:23:08:c0:ab:7d:2b:13:d1:
f3:af:2a:b0:85:7b:6f:d2:9b:67:fd:13:bd:61:3e:c2:17:8b:
fc:34:a2:4f:84:da:a7:0e:8a:30:ab:7c:a8:b1:fa:cb:10:0e:
43:f3:94:4a:72:a2:c8:56:fc:2f:a7:3b:df:bc:47:84:6e:5d:
f2:75:32:7a:41:1f:6a:87:53:87:f5:5c:91:e7:0e:83:9f:f8:
d8:c0:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:22 2025 by rpki-client