Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa
File: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (raw, json)
Hash identifier: lWA47U73TE+1g96hIrmyt3gL+Oo/duzM7GOTLMASuNU=
Subject key identifier: 59:89:65:2A:88:74:AE:99:8B:A1:74:9F:8C:F2:75:3F:08:0C:8E:FE
Certificate issuer: /CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Certificate serial: 10A392D9F3BB98A1AC2818C4553EBEE44E0864E2
Authority key identifier: FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa
Signing time: Tue 21 Jan 2025 07:02:25 +0000
ROA not before: Tue 21 Jan 2025 06:57:25 +0000
ROA not after: Tue 20 Jan 2026 07:02:25 +0000
asID: 139446
IP address blocks: 103.145.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a3:92:d9:f3:bb:98:a1:ac:28:18:c4:55:3e:be:e4:4e:08:64:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Validity
Not Before: Jan 21 06:57:25 2025 GMT
Not After : Jan 20 07:02:25 2026 GMT
Subject: CN=5989652A8874AE998BA1749F8CF2753F080C8EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:20:88:0b:1e:3e:e4:85:0e:37:23:c0:c1:
29:08:18:8f:db:1d:94:88:36:32:e3:f6:8c:e5:ae:
ef:9b:7f:67:8e:94:09:80:49:a3:1c:3b:bd:63:e7:
39:55:9d:18:4f:0d:a6:f9:e8:68:0d:90:60:b1:45:
1e:ca:d1:99:b2:63:e6:c9:2b:7e:18:b9:dc:e7:42:
95:da:59:30:00:39:43:60:5d:79:9a:93:7c:d6:65:
bc:27:42:0e:68:1f:cd:5e:db:29:3f:61:d0:4b:de:
18:32:c4:58:62:ff:42:b3:f6:14:10:9f:ed:4d:3f:
da:83:d6:b4:e2:65:93:f9:d9:1c:7c:ec:8e:1e:94:
e9:6a:01:73:2a:f7:0d:a9:9a:24:9e:57:2b:cd:4e:
08:35:e4:25:e9:6e:70:24:73:41:9b:c6:0b:fe:50:
96:d2:f7:6a:2f:22:b5:ab:9a:78:ed:a0:23:2e:65:
bc:91:6f:f4:62:20:c6:ff:fd:3c:d2:96:d9:74:64:
65:e9:c5:e0:b9:89:87:c0:92:d1:84:40:62:7a:2e:
5e:29:80:e9:23:75:98:ff:76:99:a6:8c:3b:be:f7:
7f:2b:33:96:cf:ef:de:1d:03:35:2b:1f:1b:69:59:
9f:da:b3:37:5f:d3:e3:68:7f:f4:3d:d8:f2:6d:68:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:65:2A:88:74:AE:99:8B:A1:74:9F:8C:F2:75:3F:08:0C:8E:FE
X509v3 Authority Key Identifier:
keyid:FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.108.0/23
Signature Algorithm: sha256WithRSAEncryption
77:62:4c:90:e2:3d:18:cf:e6:35:d1:79:c7:c3:17:29:a3:b0:
4a:96:a7:b1:f9:83:5e:22:4f:0b:52:fd:08:9e:84:51:62:92:
91:d8:05:61:28:ab:ab:f8:28:63:a5:34:d3:0a:fe:28:44:85:
05:78:80:75:b2:c7:01:ac:82:07:93:24:a2:04:1a:d9:fe:a6:
f4:a3:fe:66:5b:4d:99:61:f6:7c:1e:a5:55:db:d4:1f:7a:a7:
14:51:a8:89:e2:04:29:a6:e1:c0:c2:c4:94:8c:ca:b7:d7:32:
6c:27:d3:f7:ac:8c:fa:a5:6f:2d:42:bf:d6:21:f6:2d:bc:8e:
13:4f:3a:3d:29:c4:ae:db:4e:1f:31:f5:1c:82:b2:9a:9c:d7:
cd:88:89:b7:11:e7:f7:01:2b:36:4a:3e:f3:bf:b1:97:6c:c9:
cb:74:18:8f:2a:f7:a3:74:65:92:a8:c6:6d:98:ca:33:c7:dc:
4d:72:27:85:29:5a:66:90:e1:a4:87:ec:0b:9d:02:02:0f:ae:
e4:3b:78:29:5a:25:27:b8:16:67:7a:62:6d:0a:a6:10:ea:be:
55:9f:b9:18:cf:34:18:4b:28:2d:0e:da:35:46:12:45:8e:40:
84:e5:07:25:7d:82:05:3a:19:ee:62:e4:18:b7:40:a9:95:ba:
1d:72:8d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:40 2025 by rpki-client