Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133382e302f32342d3234203d3e203233363739.roa
File: 3130332e3130332e3133382e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: TS2NVoDqTGWFvDe/AYrvnQycquyBCnSELkuzXILjofg=
Subject key identifier: 0C:F2:86:F2:02:46:93:3D:D4:27:E2:A2:26:CB:8D:48:04:23:0B:92
Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Certificate serial: 56AA094C82D1AA93CFAD0F8495C44E206BA48159
Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133382e302f32342d3234203d3e203233363739.roa
Signing time: Thu 02 Mar 2023 07:55:56 +0000
ROA not before: Thu 02 Mar 2023 07:50:56 +0000
ROA not after: Thu 29 Feb 2024 07:55:56 +0000
asID: 23679
IP address blocks: 103.103.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:aa:09:4c:82:d1:aa:93:cf:ad:0f:84:95:c4:4e:20:6b:a4:81:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Validity
Not Before: Mar 2 07:50:56 2023 GMT
Not After : Feb 29 07:55:56 2024 GMT
Subject: CN=0CF286F20246933DD427E2A226CB8D4804230B92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:81:a2:c9:be:d1:99:94:6a:ff:28:92:0c:
80:2c:58:de:e5:8a:de:85:53:25:77:e3:cf:63:33:
63:30:51:fc:9f:a6:35:70:2d:46:e3:53:64:2e:48:
df:57:e4:1d:00:a9:9a:e9:cf:97:54:df:37:cd:db:
67:04:4a:d1:24:1a:90:e9:fd:98:14:64:d9:ef:59:
bb:21:7e:f8:d9:a1:47:0f:62:7a:fa:a5:6b:e4:db:
0c:ef:15:1d:ce:a7:c6:d6:13:b5:e0:6a:34:90:bf:
35:35:f1:43:fb:d2:8b:91:44:d6:88:60:8b:40:88:
d6:9c:b1:96:a4:45:a3:03:65:ac:43:b3:54:da:3b:
ca:70:f4:d2:6d:36:e7:65:2f:9a:0d:cf:85:a8:e1:
38:34:05:0e:f0:9a:3c:92:72:01:60:79:10:a8:76:
d7:75:5b:54:23:8f:c8:81:42:d4:bb:20:bf:d8:e2:
94:9b:6b:93:ed:42:7e:5d:d7:46:4a:76:8e:58:10:
fe:39:99:6a:34:4e:49:e8:0e:f1:1a:23:eb:1f:cf:
9f:97:df:a8:77:82:7e:ef:14:f2:65:00:20:75:2d:
ed:79:a7:ca:32:02:9f:af:4b:c0:7c:c5:d0:e1:5c:
32:13:a4:2a:65:fc:af:da:65:90:c1:6a:90:5d:1b:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:86:F2:02:46:93:3D:D4:27:E2:A2:26:CB:8D:48:04:23:0B:92
X509v3 Authority Key Identifier:
keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133382e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.103.138.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b5:36:0f:44:3b:3c:10:fb:6f:8c:ca:de:eb:59:6e:dd:69:
2a:27:69:aa:50:0a:89:7e:38:28:19:ac:8e:6c:7e:e4:cb:5e:
1c:7e:32:33:84:32:22:e3:a3:ec:33:1f:9d:c8:47:d4:27:f4:
6f:ad:35:0c:74:94:78:a0:b5:71:07:0a:91:b3:cc:e9:1f:85:
64:ce:4c:6d:16:5b:57:fe:bd:de:4b:14:11:85:2e:ca:2d:ae:
36:c3:80:f2:20:68:58:cc:3c:52:05:ba:81:21:17:de:05:85:
77:ae:fd:ad:81:21:a5:cf:12:7b:a6:e0:14:38:02:69:94:40:
ed:ef:34:67:8c:e4:51:f1:90:f2:5b:c0:b4:c8:5e:c0:ee:67:
29:25:95:ee:73:3c:d9:42:11:ee:da:36:d2:42:47:8b:49:91:
8d:d8:78:ee:36:f9:f6:4b:4e:bc:38:23:8a:20:35:76:ad:0b:
ea:08:01:d0:e5:e9:94:a9:1a:02:26:76:b8:47:00:c1:cc:0b:
6e:71:74:6f:19:0b:6c:d7:e7:56:04:6f:be:a8:bc:9b:83:6d:
b8:6f:57:f5:4c:62:07:cd:6a:36:ab:3d:fe:ba:07:9d:43:9d:
e7:e2:f2:62:d1:ad:f9:f6:2d:88:7c:cc:ec:98:fd:ff:7f:51:
a4:c3:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:04 2025 by rpki-client