Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa
File: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (raw, json)
Hash identifier: 08FPTvyHGHYqsoymEWP0Cc7v1LTTCL2EhoAgTK3Dy5s=
Subject key identifier: 81:5B:AC:B8:33:52:65:84:8B:F1:70:F6:11:E9:9D:64:29:F9:8C:22
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 7992A6EFCCDBF872DD31954966F6D5A204139EEA
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa
Signing time: Tue 26 Nov 2024 11:23:21 +0000
ROA not before: Tue 26 Nov 2024 11:18:21 +0000
ROA not after: Tue 25 Nov 2025 11:23:21 +0000
asID: 9251
IP address blocks: 103.253.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:92:a6:ef:cc:db:f8:72:dd:31:95:49:66:f6:d5:a2:04:13:9e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Nov 26 11:18:21 2024 GMT
Not After : Nov 25 11:23:21 2025 GMT
Subject: CN=815BACB8335265848BF170F611E99D6429F98C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:38:7a:3c:fe:10:9b:3c:df:9e:5d:4d:b3:
89:fa:3b:87:fd:8c:10:f9:35:01:f8:46:af:6e:98:
fe:5c:3c:73:89:31:2e:47:5e:2e:3c:e5:3c:25:fa:
84:94:cb:e2:21:a5:76:c0:93:b5:b1:c1:78:9e:9a:
46:b7:91:b8:e5:7f:3a:1e:cd:e4:fd:dd:59:45:e7:
bc:9e:e0:fc:69:81:46:4d:da:2c:44:b8:ed:8d:17:
07:1b:f2:70:e1:1b:8b:e5:d2:d4:ee:4e:1c:08:83:
c9:5f:81:0a:75:63:6a:5a:3a:2b:ea:d7:93:6f:91:
ed:4a:d4:7b:0b:39:07:0b:fb:d6:7e:56:28:b2:fb:
fe:8b:b1:8e:59:06:2b:a1:2a:58:69:b7:b9:67:58:
6d:6e:18:e5:71:d1:96:ae:d0:43:bf:f3:50:ff:98:
a1:f7:df:40:20:31:60:83:c2:04:25:a8:c0:b2:11:
c0:51:08:98:27:28:3a:08:14:cc:82:ea:b8:4d:77:
2f:d6:be:fc:5c:da:5a:46:49:d5:e3:71:1a:ea:c2:
78:18:e2:0f:ab:6b:e8:02:a8:8a:10:9c:05:ee:dd:
99:6c:f0:f0:a7:da:03:62:c1:15:27:70:6f:71:08:
30:6d:d5:6e:e1:57:d7:8d:2a:44:33:98:b2:11:1c:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:AC:B8:33:52:65:84:8B:F1:70:F6:11:E9:9D:64:29:F9:8C:22
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.253.107.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0f:ad:d1:d4:79:a7:69:d3:96:82:5c:e4:40:81:d8:dd:03:
a7:5a:82:f0:90:b2:e8:28:e5:f8:93:6c:4d:11:c5:ea:89:ef:
94:01:de:93:93:1c:c4:0d:0a:2f:e9:52:25:53:2e:68:35:cd:
ca:df:fb:dd:69:82:1a:ae:63:d3:ae:03:f8:e9:83:e6:f5:24:
a4:da:ef:99:75:ba:92:a2:8a:4e:f2:e6:f5:d7:50:cf:7f:90:
f6:b0:59:b1:24:4a:34:0f:f1:74:c7:4f:89:17:3d:3c:2e:9c:
76:a6:36:5f:17:7b:e1:0b:0e:d2:f4:09:16:fb:ea:c1:bf:10:
1a:51:1d:b9:26:c6:d0:85:14:35:30:a5:53:3b:8d:26:1f:02:
da:f1:66:80:b9:1d:00:a0:a0:ae:5b:e5:af:75:4e:eb:42:3d:
f9:2f:9c:e9:48:eb:e2:6b:ad:48:15:ee:c9:0d:4d:f6:7c:1e:
fa:4c:10:82:f8:66:2f:66:65:f8:5f:59:fd:a4:df:ed:58:a2:
df:66:98:62:5c:e5:ca:c9:2c:6f:33:38:8d:e6:2a:f4:15:9d:
5e:04:0c:df:88:54:fa:bd:f4:60:a7:e5:10:70:fa:c0:45:ea:
2e:02:ab:09:ed:7f:6c:43:bb:40:01:5a:ae:d6:70:2a:88:c0:
86:35:10:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:11 2025 by rpki-client