Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa
File: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier: 0veKivESqTIR22CLe0BQKZVbkyyZLitqVchvnzV7aBw=
Subject key identifier: 7A:5C:67:3A:BE:4E:08:72:5E:65:7D:15:8E:E5:59:9D:C5:53:BB:AD
Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940
Certificate serial: 0F16DB03BF7D15D2C2BC479D136752C0CC02014F
Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa
Signing time: Fri 17 Jan 2025 13:00:01 +0000
ROA not before: Fri 17 Jan 2025 12:55:01 +0000
ROA not after: Fri 16 Jan 2026 13:00:01 +0000
asID: 139967
IP address blocks: 103.101.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:16:db:03:bf:7d:15:d2:c2:bc:47:9d:13:67:52:c0:cc:02:01:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940
Validity
Not Before: Jan 17 12:55:01 2025 GMT
Not After : Jan 16 13:00:01 2026 GMT
Subject: CN=7A5C673ABE4E08725E657D158EE5599DC553BBAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:b3:e2:7a:4d:dc:4f:bf:a0:fe:8d:1d:d2:
81:e2:01:0f:ba:b6:42:d9:e8:9f:16:1d:20:c1:9a:
bc:2b:9d:9c:bb:23:3f:9c:60:49:e0:eb:03:c5:f6:
cb:fc:35:a8:b7:a6:26:45:ec:30:1c:5d:e4:93:7d:
f6:36:66:4d:c8:3f:5e:41:29:a8:82:08:36:d6:da:
c7:20:1d:0c:f1:a3:3b:41:aa:10:2c:2a:9c:cb:91:
1f:36:2f:1c:55:2f:83:48:f1:c0:c1:b5:41:ca:8c:
0a:a8:a6:38:02:15:69:89:fa:85:62:5a:55:a2:44:
e5:e0:1a:66:9c:87:de:ad:af:c8:45:96:46:ce:bb:
cf:12:5a:10:40:55:c8:9f:24:64:22:56:3a:2b:55:
96:fc:3c:fd:7a:5f:6e:f9:a1:b2:ea:ba:15:91:4f:
10:72:72:a9:70:2b:03:6e:d2:de:8b:2d:99:15:32:
24:b2:d4:14:b9:f8:fd:11:68:21:50:b3:e5:f5:37:
ac:93:3d:8c:1a:a2:5e:15:f0:4c:27:84:f1:87:6e:
f4:ec:b6:e3:72:0e:5f:b7:f4:b2:f2:cd:3f:4b:ce:
83:3a:b3:72:86:08:05:17:c1:0f:db:cf:3b:05:d7:
c9:b7:80:92:91:3d:c4:04:7a:5c:8d:7e:bc:71:af:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:67:3A:BE:4E:08:72:5E:65:7D:15:8E:E5:59:9D:C5:53:BB:AD
X509v3 Authority Key Identifier:
keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.101.143.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a6:4c:60:6d:53:a2:7d:9f:3d:ee:e0:c7:0d:c1:87:4a:ef:
b9:57:8d:9d:17:29:8c:73:30:48:67:db:1a:16:27:69:52:61:
3a:c0:2a:39:f6:6a:f6:ad:a8:a1:c8:a4:83:41:88:de:28:19:
33:61:b5:7d:01:de:b4:5c:ef:0d:d9:be:23:ba:75:ea:ca:89:
2a:85:f3:ed:6b:89:dd:fe:0d:62:a4:5a:72:f6:d1:d3:06:e6:
18:76:d9:af:27:1a:e3:e7:ce:6c:85:f1:a0:a3:85:09:79:f9:
41:9f:be:73:b9:bb:90:72:63:a8:61:d0:be:7a:cc:59:a3:5c:
84:4a:9b:db:9f:1e:91:73:4b:19:9a:aa:ac:2a:aa:d3:b8:07:
c8:d2:2d:78:53:e4:87:42:ea:fb:54:85:d2:ef:ac:b7:ed:c3:
45:47:f5:fb:2b:cd:75:87:05:ed:78:d9:c9:be:2e:df:21:e5:
ca:7b:7a:5b:b0:dc:61:46:b1:80:28:6d:b8:81:3f:be:16:c8:
4a:6d:c7:3b:6c:1b:7b:bd:19:d6:da:a3:99:23:1c:a0:cf:49:
8d:8b:0b:42:68:d6:bd:de:05:d1:cd:36:07:f1:29:d5:32:92:
30:89:34:df:38:64:a2:f9:4b:bb:92:0f:a7:0e:1f:24:6c:4f:
18:df:31:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:05:46 2025 by rpki-client