Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa
File: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (raw, json)
Hash identifier: 8kPPHzXghQqLFdKgJ7XYByHPMXkLSq/gvTSF/ClNz60=
Subject key identifier: F3:A3:49:46:75:42:BD:07:D4:A4:4C:DD:50:9F:5C:DE:C1:51:52:20
Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
Certificate serial: 175337D52DD0AAAA918CCCCB4074228F2CBAC751
Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa
Signing time: Sat 13 Jul 2024 13:02:14 +0000
ROA not before: Sat 13 Jul 2024 12:57:14 +0000
ROA not after: Sat 12 Jul 2025 13:02:14 +0000
asID: 136856
IP address blocks: 103.102.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:53:37:d5:2d:d0:aa:aa:91:8c:cc:cb:40:74:22:8f:2c:ba:c7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
Validity
Not Before: Jul 13 12:57:14 2024 GMT
Not After : Jul 12 13:02:14 2025 GMT
Subject: CN=F3A349467542BD07D4A44CDD509F5CDEC1515220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:53:c5:d1:3d:de:b4:bf:59:dc:85:bd:82:
11:71:8c:2c:c4:f1:c9:fd:55:7d:69:3e:1c:cf:d5:
e0:97:10:ad:98:db:99:af:a3:51:75:99:37:0a:54:
74:ad:4a:2d:49:61:85:b9:50:de:57:f1:44:df:3f:
73:96:d1:e2:f7:2d:15:5a:ee:79:74:e4:b7:5e:c4:
01:50:14:01:22:62:a7:9b:62:c7:f9:86:19:59:14:
14:33:ed:96:0b:76:a3:81:aa:25:e7:aa:d0:3b:d8:
38:03:c1:0d:67:96:ab:d9:ee:82:13:d3:c8:a4:58:
45:3e:bd:d7:f7:e1:3c:db:2a:58:bc:84:43:96:11:
7f:24:76:38:76:73:0a:79:10:2b:17:00:8d:f5:4f:
7f:a4:a9:c5:13:be:72:c8:b6:94:86:e0:39:10:95:
dd:d9:08:b6:bd:5b:21:3e:ec:8d:c8:58:3a:cf:9f:
03:ab:81:86:0d:8e:2b:57:56:87:d4:44:75:c6:50:
8b:7a:75:16:07:d2:36:a2:73:f4:f3:0d:a8:be:5b:
2b:ed:cc:3d:c4:69:9c:0a:c1:05:c7:29:94:9b:5f:
da:f2:f7:a9:2a:ff:60:e0:b4:5d:c0:61:bf:ba:ac:
ff:6e:05:5d:24:23:f9:4b:09:39:89:a7:75:20:21:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A3:49:46:75:42:BD:07:D4:A4:4C:DD:50:9F:5C:DE:C1:51:52:20
X509v3 Authority Key Identifier:
keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.112.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6b:bb:50:a6:db:d0:de:d3:34:5a:cf:d3:35:05:b2:52:94:
a7:95:ba:96:fd:db:e2:4a:a4:7c:fb:81:86:31:32:e8:e9:65:
7c:00:d7:97:61:8a:30:00:4b:5d:cf:02:f0:aa:45:17:24:0a:
30:25:ad:29:21:46:f1:a8:7c:a1:35:de:fa:96:4e:e6:49:c8:
28:0c:45:74:e5:b3:4a:33:cc:cb:cd:94:0a:0b:7a:fc:53:ec:
6e:0d:e8:21:80:f8:9d:7c:7c:c8:64:fd:2f:21:13:e6:35:3b:
79:88:4a:d9:56:58:9f:e0:ec:63:d9:02:ed:58:c1:ed:68:ea:
27:51:43:10:9f:0d:c0:f4:b5:66:b0:73:18:5f:79:d1:1d:29:
39:79:e5:9b:70:b7:8d:43:92:38:66:27:aa:a3:6b:bd:92:05:
88:b0:0c:3c:40:db:5c:45:4c:42:ed:d4:a3:24:fa:0c:ac:b2:
09:92:fa:1f:a5:06:e3:2a:e4:c7:af:2d:47:82:58:ed:26:72:
82:48:f2:b1:2d:c5:ee:df:f5:3a:07:f5:0e:37:51:16:2d:77:
74:7d:c5:8c:41:69:bb:bc:7c:98:97:44:31:64:9d:f6:09:79:
7e:de:83:59:8e:39:02:04:87:20:6e:90:19:31:ab:e0:c7:ae:
a7:bc:2a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:46 2025 by rpki-client