Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa
File: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (raw, json)
Hash identifier: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=
Subject key identifier: 6E:18:EC:19:2A:C3:B4:F4:5B:D7:55:3E:28:2B:63:6A:95:75:4F:C7
Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
Certificate serial: 2254F550F6665B5AF8D092802D61C0C1DEA7C97D
Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa
Signing time: Tue 31 Dec 2024 16:00:00 +0000
ROA not before: Tue 31 Dec 2024 15:55:00 +0000
ROA not after: Tue 30 Dec 2025 16:00:00 +0000
asID: 150501
IP address blocks: 103.120.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:54:f5:50:f6:66:5b:5a:f8:d0:92:80:2d:61:c0:c1:de:a7:c9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
Validity
Not Before: Dec 31 15:55:00 2024 GMT
Not After : Dec 30 16:00:00 2025 GMT
Subject: CN=6E18EC192AC3B4F45BD7553E282B636A95754FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:61:0c:ad:53:bc:fa:f4:24:19:3c:80:fa:
36:83:30:a6:5d:75:72:cc:d3:c6:b7:7d:c4:c2:33:
a6:19:9f:ff:d5:28:fe:0c:83:08:84:7c:9b:b5:76:
8b:b5:e8:5f:8c:84:6d:6f:a9:c3:fe:64:eb:1c:4d:
da:91:e4:11:5d:fe:78:46:97:ac:71:03:54:53:b2:
5e:f1:d8:c4:03:42:1e:ce:b9:89:9e:2f:d5:b2:e6:
bb:6b:66:3c:33:49:26:be:ce:ff:63:8e:be:13:cb:
8a:47:68:5a:80:27:ad:fb:04:81:dc:bf:df:ff:30:
56:f1:38:30:41:78:6f:cd:91:78:fe:b1:a8:41:5e:
b2:42:f9:ea:f0:40:cf:aa:41:88:6d:f7:5d:00:d1:
b0:93:f9:c5:46:da:dd:17:90:05:c5:a9:04:95:ae:
91:f9:89:8b:f9:70:aa:25:01:14:1f:8f:45:70:00:
51:c4:38:67:4c:19:2e:54:36:70:d6:91:68:26:b5:
44:3d:ca:25:2a:5a:02:e6:39:48:6a:1e:b8:b5:e6:
a1:ea:9f:95:52:2f:fb:eb:23:e2:96:9c:62:2a:a3:
fc:21:ee:74:b3:0c:b7:d7:c7:a5:72:fb:b2:46:86:
2e:51:ce:44:50:b2:77:a2:15:d4:00:eb:3d:ad:d6:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:18:EC:19:2A:C3:B4:F4:5B:D7:55:3E:28:2B:63:6A:95:75:4F:C7
X509v3 Authority Key Identifier:
keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.76.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8e:9b:e9:79:75:bb:cf:b4:7d:8c:6b:ba:86:78:7e:e8:c5:
47:16:31:58:42:fa:73:be:c1:2d:f5:14:cb:3c:f9:44:74:81:
e7:36:ea:59:83:b0:5e:4c:8d:9c:c4:3c:9f:22:12:81:cb:55:
79:76:8d:d1:80:cc:6b:35:f9:65:e8:0d:05:0b:69:0f:d4:7d:
e3:4f:62:dc:c8:52:3d:47:95:f8:46:56:6e:de:71:5f:f0:da:
80:45:a7:61:24:58:15:23:f5:fe:2f:5d:65:52:93:0d:10:44:
d5:66:c6:a3:23:a6:f4:ff:37:f6:58:29:d1:d2:b3:5c:8d:63:
90:58:a7:24:6b:5f:66:77:c3:47:c9:bb:91:79:e4:73:61:b8:
66:36:e4:49:47:5a:2d:36:cd:8e:d2:fa:68:9b:91:0f:4a:43:
8d:4f:11:b4:bd:fb:8a:e1:dd:2e:2e:2d:f5:03:9a:cf:70:e9:
60:be:98:91:b2:38:31:24:d1:f3:d0:5b:ce:b3:d0:57:22:4c:
27:41:54:57:5c:1d:dc:04:3d:e9:cf:8a:56:40:50:75:77:f5:
ed:f5:2e:83:d4:bc:82:73:44:b2:41:33:04:ad:8f:df:e6:a1:
fe:70:20:ea:17:02:97:93:22:7b:a4:06:6c:1f:d3:04:89:7e:
64:cf:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:00 2025 by rpki-client