Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa
File: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (raw, json)
Hash identifier: Jue4KLlm2sE1OjclexTO01tGfWNGtScPx0FukD1r1XE=
Subject key identifier: C0:E7:EF:E6:A2:95:A5:96:9A:AC:A2:C4:FB:3A:C1:53:9B:73:1C:0B
Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45
Certificate serial: 7D2CFBE9E50F589F3C116569F246F4D2B3FDDC2F
Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa
Signing time: Mon 01 Jul 2024 01:05:57 +0000
ROA not before: Mon 01 Jul 2024 01:00:57 +0000
ROA not after: Mon 30 Jun 2025 01:05:57 +0000
asID: 137325
IP address blocks: 103.111.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2c:fb:e9:e5:0f:58:9f:3c:11:65:69:f2:46:f4:d2:b3:fd:dc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45
Validity
Not Before: Jul 1 01:00:57 2024 GMT
Not After : Jun 30 01:05:57 2025 GMT
Subject: CN=C0E7EFE6A295A5969AACA2C4FB3AC1539B731C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a6:ba:91:a9:30:cf:e4:8b:57:1d:35:5c:35:
63:af:47:28:ab:7a:af:15:79:94:55:05:a1:2c:6a:
ac:3f:64:31:de:80:0c:b1:07:ee:0e:13:a2:fb:cc:
2d:f5:fe:bb:d4:44:72:15:dd:0a:9c:fb:b9:f8:40:
46:3e:f3:39:8b:31:dd:e1:c5:26:f3:f9:bc:1f:bb:
21:4d:0e:10:09:ad:1d:58:65:f4:61:db:5a:07:a8:
f6:d3:33:33:35:0c:e0:5c:1d:55:d5:81:1f:f4:cf:
25:61:5c:04:48:ef:c4:9c:ae:07:58:08:60:f3:10:
09:8f:a6:8e:35:69:c0:c4:29:9c:50:36:36:d9:58:
73:1a:c9:ef:15:c4:87:4a:c3:04:ea:92:13:cf:af:
13:80:a9:f8:cf:bb:6a:50:b9:4f:8d:45:9c:3f:e1:
1a:d3:c0:91:54:59:c6:b0:20:60:05:5a:f3:bc:25:
00:42:86:37:8f:46:74:54:83:c7:41:00:4e:fd:76:
06:e4:5f:84:cb:94:9f:5f:50:c2:25:b0:38:f7:06:
a8:31:c1:b7:10:e7:9b:5a:ce:9b:f9:6f:7f:fe:99:
73:6b:fc:12:fa:7a:30:d8:98:1b:1d:f3:36:d0:2d:
47:b1:98:2d:62:b7:5c:3b:2d:aa:ca:9c:3f:2a:34:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E7:EF:E6:A2:95:A5:96:9A:AC:A2:C4:FB:3A:C1:53:9B:73:1C:0B
X509v3 Authority Key Identifier:
keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:44:c5:fb:39:d2:24:07:7c:b1:f8:a4:4b:e7:fc:ee:5e:a3:
ec:c9:f3:0b:fb:9b:9f:b3:38:13:ca:3a:98:84:3a:91:9e:19:
2c:7a:c6:d4:c2:f4:97:56:1f:8e:14:ae:33:54:cd:de:12:b6:
4e:67:8f:6c:a8:83:18:47:6e:25:35:3e:76:8e:78:f7:1f:32:
b1:2d:3e:f0:2e:ac:08:1d:41:6c:52:4e:e6:47:49:1d:66:b4:
7a:fd:7d:56:52:02:12:d9:7c:8e:d5:d5:04:75:78:c7:e8:55:
3f:d9:cc:f7:6f:65:cc:18:ab:4e:84:8e:9e:0f:70:6a:ab:f8:
2f:85:a6:24:26:ec:38:aa:d5:3b:90:ee:f7:59:ec:ec:aa:67:
3c:4a:5f:d7:ce:8d:01:5d:f8:89:5e:6b:3e:d1:b6:b8:5a:39:
9e:c6:34:2d:7a:63:cc:19:a7:fd:0c:ae:5b:3f:05:34:49:3e:
69:2a:f4:65:eb:8a:59:2a:14:9a:d9:2f:d1:3c:64:8b:10:55:
fd:57:e0:71:00:27:4b:f4:a4:46:2b:6b:a8:48:9e:55:64:23:
75:36:3d:63:98:49:15:e1:bd:fa:33:e9:6e:4f:1f:a5:2f:3e:
f3:27:ca:97:1d:0d:2b:ce:74:4f:14:11:83:18:44:62:d2:1d:
22:a9:10:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:25:12 2025 by rpki-client