Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa
File: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (raw, json)
Hash identifier: 9TS4OObq1JemZwvTvegCjn3AKYmdp3K1XOA4LLPSSqQ=
Subject key identifier: 61:08:56:DE:1F:79:1E:03:35:14:3D:5F:CF:A7:E8:53:43:58:96:34
Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633
Certificate serial: 0DE2A29891ECFABE73CDB698365D4767A647DD09
Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa
Signing time: Fri 27 Sep 2024 22:00:00 +0000
ROA not before: Fri 27 Sep 2024 21:55:00 +0000
ROA not after: Fri 26 Sep 2025 22:00:00 +0000
asID: 149883
IP address blocks: 103.156.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e2:a2:98:91:ec:fa:be:73:cd:b6:98:36:5d:47:67:a6:47:dd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633
Validity
Not Before: Sep 27 21:55:00 2024 GMT
Not After : Sep 26 22:00:00 2025 GMT
Subject: CN=610856DE1F791E0335143D5FCFA7E85343589634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:ee:47:cd:72:c7:55:f0:1a:15:a9:90:4d:
b6:74:9b:43:54:7c:34:16:37:12:63:e0:7d:77:3b:
23:d1:55:27:44:e8:3d:bb:47:a3:ae:ca:67:3e:a8:
03:ac:a5:cb:6d:c3:ee:8e:90:6f:99:56:4a:a9:cc:
43:6f:67:d3:4f:f4:72:29:6a:60:1b:a2:d0:f5:b2:
32:4a:69:f4:62:6e:23:47:96:ab:ee:22:92:13:53:
11:2c:39:9b:2d:73:d1:03:2f:d3:8f:a2:3e:aa:fa:
ce:ca:b3:c4:36:a6:7b:27:1d:c4:b0:aa:0d:86:f1:
3f:61:11:33:9d:8f:34:a2:68:df:e3:97:3b:71:94:
7a:c7:84:82:60:f0:e0:c4:bb:b6:63:7a:fc:46:ef:
7f:05:ee:23:c3:b3:a8:fb:9a:f8:66:44:08:33:aa:
6d:c8:c6:ad:48:d9:ce:a1:0f:8c:99:c0:ba:a3:3d:
50:33:c2:4b:9a:70:da:d4:da:49:f0:13:42:4b:6d:
b2:40:ba:d1:f1:7d:f2:ca:eb:f4:4c:63:2e:e5:f3:
08:4d:59:5f:d2:4d:4e:67:f3:81:45:7a:8d:11:e1:
e8:ac:2a:31:9b:4d:bc:79:79:cc:03:07:72:70:6d:
02:a7:87:01:cd:5b:a3:43:6f:35:a6:92:fd:c8:ab:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:08:56:DE:1F:79:1E:03:35:14:3D:5F:CF:A7:E8:53:43:58:96:34
X509v3 Authority Key Identifier:
keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.141.0/24
Signature Algorithm: sha256WithRSAEncryption
70:42:35:66:42:c5:77:13:2a:db:a7:6f:de:37:f8:16:16:8d:
24:6b:1c:4e:e3:26:be:cf:df:e4:47:47:03:f9:f2:b4:21:4b:
1d:c8:c5:f5:66:65:63:19:51:81:79:fe:f7:fb:87:b9:83:06:
77:48:88:10:2b:ee:21:07:4b:58:0a:e2:3a:42:43:d3:ad:28:
3a:5a:9f:dc:10:0f:19:ec:0a:02:de:8b:c9:e2:18:95:f8:f2:
4c:6f:6a:7a:bd:c5:8f:d9:3b:97:76:bd:c4:bc:c3:35:82:f7:
a1:b2:20:78:32:44:be:e6:e9:3a:a7:9b:50:00:b5:49:b1:82:
79:d4:7a:c8:32:ef:98:e6:a4:2d:1c:e4:e3:00:ff:0b:83:02:
0c:4f:ff:16:b2:11:02:1f:8f:08:5e:fc:08:c8:fb:8f:69:a7:
bd:b0:32:39:3b:69:0e:17:75:63:44:5b:9d:01:e9:40:e7:ce:
d6:9c:7b:28:f0:3f:1c:66:6e:a6:27:39:43:8b:6b:50:85:2a:
82:83:20:dd:f5:f0:84:d3:89:b4:93:c5:24:80:00:bd:ac:7b:
56:5b:e3:5f:a3:c7:e9:ce:40:a2:6c:99:81:85:ae:f5:99:cf:
f2:d3:2f:bf:d1:fb:69:06:aa:37:7d:05:89:0d:76:31:46:2c:
a9:47:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:37:05 2025 by rpki-client