Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa
File: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier: oJDK+jSdQI02XtCQJ9lVrSaivlUWa6vmB2YfNE39ias=
Subject key identifier: 2D:E4:67:CA:36:68:28:4C:A7:27:FF:C7:3E:81:94:E0:E9:A6:23:07
Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A
Certificate serial: 35CEDE670B2A41ECC78279B79BDBEB4676214A83
Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa
Signing time: Thu 16 Jan 2025 09:00:02 +0000
ROA not before: Thu 16 Jan 2025 08:55:02 +0000
ROA not after: Thu 15 Jan 2026 09:00:02 +0000
asID: 131769
IP address blocks: 103.102.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ce:de:67:0b:2a:41:ec:c7:82:79:b7:9b:db:eb:46:76:21:4a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A
Validity
Not Before: Jan 16 08:55:02 2025 GMT
Not After : Jan 15 09:00:02 2026 GMT
Subject: CN=2DE467CA3668284CA727FFC73E8194E0E9A62307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:d2:1b:53:7a:b1:a5:c2:5f:84:f0:1c:07:
6a:10:25:aa:eb:87:f1:86:17:0d:1c:d1:c2:c6:c5:
80:ed:94:50:0b:84:20:c0:a5:7f:5c:f9:e9:db:dd:
d6:b3:33:7f:56:4f:62:a7:60:a6:32:c0:a8:f0:55:
c6:e4:54:66:04:d8:3c:6a:9e:7d:77:a5:7b:8a:16:
32:ee:37:41:83:d2:ce:e4:0a:69:38:32:24:d4:62:
e9:03:46:f4:17:cf:7b:3c:35:ba:a9:3a:61:2f:bb:
8b:8f:60:20:39:a5:7e:9a:b7:28:ae:65:5e:d9:42:
7e:6f:31:6d:91:d3:7d:5a:ea:c9:f1:a6:90:79:2e:
03:39:63:ee:99:e7:8f:fc:ac:fe:00:e1:b4:92:e4:
1a:04:ec:a7:1c:46:5b:be:41:f9:b1:16:d0:a0:a2:
e9:ad:72:d8:ec:34:66:f5:f9:d4:50:3e:80:7a:66:
02:22:67:83:b6:c8:b9:f8:5b:6b:9f:f0:90:a3:01:
4d:3e:58:04:e2:6b:b7:00:d7:58:cf:7b:25:d2:2a:
30:e1:00:34:66:68:8b:2a:eb:8a:d6:4e:ec:b5:5c:
44:44:61:76:ca:60:22:bf:46:4c:70:db:8d:18:1c:
6b:72:13:f0:ac:02:5d:52:b0:d9:49:6b:b6:48:65:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E4:67:CA:36:68:28:4C:A7:27:FF:C7:3E:81:94:E0:E9:A6:23:07
X509v3 Authority Key Identifier:
keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.248.0/24
Signature Algorithm: sha256WithRSAEncryption
34:dc:2e:5e:99:20:ec:fc:41:ef:88:55:02:7b:14:30:80:74:
80:1c:f3:0e:91:4c:40:7a:3d:6c:d5:2c:a3:7a:77:13:6f:dd:
c5:e4:f5:41:21:05:9b:98:36:47:9b:ad:28:8b:a4:78:a3:d1:
a6:2a:ab:e7:4d:12:05:3c:68:d4:81:74:01:38:43:96:d8:83:
91:3d:e9:52:57:d7:3d:e0:28:04:e6:f6:cb:e7:83:20:0b:06:
16:57:ca:e4:6b:b7:1e:d1:bf:c3:73:98:d5:c9:f6:64:99:63:
f0:5c:eb:b4:6b:eb:a7:40:72:8c:af:f4:80:13:29:63:5e:c1:
8e:8a:29:00:79:a2:30:8f:ea:6b:9c:d2:a5:f2:c1:4c:72:5f:
11:71:e3:03:22:98:d9:0d:69:34:d8:97:a6:f8:27:8a:8f:6f:
7d:7e:8c:cf:4c:01:84:b7:06:77:23:82:93:fa:8b:ca:9a:63:
a4:bc:1a:99:95:b5:9e:b2:e3:cf:a0:03:ee:9d:c5:85:06:a3:
be:8f:67:dc:58:dd:9b:b4:62:4d:6f:df:e1:ea:e4:67:97:2c:
b5:59:21:98:e9:50:74:d0:0a:d2:97:4b:fd:11:7d:92:06:86:
cc:54:29:6f:8e:f9:d8:7a:3c:41:4b:21:eb:c0:f0:f7:c4:af:
7a:ad:2f:57
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNc7eZwsqQezHgnm3m9vrRnYhSoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz
NzVCRTMwQTAeFw0yNTAxMTYwODU1MDJaFw0yNjAxMTUwOTAwMDJaMDMxMTAvBgNV
BAMTKDJERTQ2N0NBMzY2ODI4NENBNzI3RkZDNzNFODE5NEUwRTlBNjIzMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/29IbU3qxpcJfhPAcB2oQJarr
h/GGFw0c0cLGxYDtlFALhCDApX9c+enb3dazM39WT2KnYKYywKjwVcbkVGYE2Dxq
nn13pXuKFjLuN0GD0s7kCmk4MiTUYukDRvQXz3s8NbqpOmEvu4uPYCA5pX6atyiu
ZV7ZQn5vMW2R031a6snxppB5LgM5Y+6Z54/8rP4A4bSS5BoE7KccRlu+QfmxFtCg
oumtctjsNGb1+dRQPoB6ZgIiZ4O2yLn4W2uf8JCjAU0+WATia7cA11jPeyXSKjDh
ADRmaIsq64rWTuy1XEREYXbKYCK/Rkxw240YHGtyE/CsAl1SsNlJa7ZIZdDTAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQULeRnyjZoKEynJ//HPoGU4OmmIwcwHwYDVR0j
BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1
MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC
RTMwQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNGFjYTNjLTYzZGMtNGMxYi1h
N2U4LWFjYmFlODIxY2RlNS8wLzMxMzAzMzJlMzEzMDMyMmUzMjM0MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZvgwDQYJ
KoZIhvcNAQELBQADggEBADTcLl6ZIOz8Qe+IVQJ7FDCAdIAc8w6RTEB6PWzVLKN6
dxNv3cXk9UEhBZuYNkebrSiLpHij0aYqq+dNEgU8aNSBdAE4Q5bYg5E96VJX1z3g
KATm9svngyALBhZXyuRrtx7Rv8NzmNXJ9mSZY/Bc67Rr66dAcoyv9IATKWNewY6K
KQB5ojCP6muc0qXywUxyXxFx4wMimNkNaTTYl6b4J4qPb31+jM9MAYS3BncjgpP6
i8qaY6S8GpmVtZ6y48+gA+6dxYUGo76PZ9xY3Zu0Yk1v3+Hq5GeXLLVZIZjpUHTQ
CtKXS/0RfZIGhsxUKW+O+dh6PEFLIevA8PfEr3qtL1c=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:22 2025 by rpki-client