Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32332d3233203d3e20313339393832.roa
File: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (raw, json)
Hash identifier: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=
Subject key identifier: 6C:33:BC:AE:DB:E7:4F:F3:A4:35:2A:67:66:7D:90:08:FC:44:68:DE
Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Certificate serial: 3555E0A85FD5829B1653B88CA712A25C2A7381EF
Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32332d3233203d3e20313339393832.roa
Signing time: Sun 09 Feb 2025 10:00:01 +0000
ROA not before: Sun 09 Feb 2025 09:55:01 +0000
ROA not after: Sun 08 Feb 2026 10:00:01 +0000
asID: 139982
IP address blocks: 103.66.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:55:e0:a8:5f:d5:82:9b:16:53:b8:8c:a7:12:a2:5c:2a:73:81:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Validity
Not Before: Feb 9 09:55:01 2025 GMT
Not After : Feb 8 10:00:01 2026 GMT
Subject: CN=6C33BCAEDBE74FF3A4352A67667D9008FC4468DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:93:5f:45:f6:7c:5f:cc:ac:e8:61:c8:3e:
e6:bd:fa:25:d6:88:ef:52:71:f1:4a:bc:1a:08:a6:
08:23:47:5b:ae:6a:7a:7c:b0:ae:f7:df:d4:e1:7d:
b7:22:9c:56:e2:6f:7d:3a:16:74:88:a3:9a:a2:5f:
6e:87:7a:f2:1c:64:f3:72:91:40:41:3b:f6:6f:f3:
e0:08:52:49:16:2e:23:3f:69:53:41:0d:a8:5f:35:
db:bc:3c:9b:03:ef:b6:28:08:0e:00:65:58:0d:78:
b7:7d:4e:4d:88:db:9d:0b:86:3a:c8:b5:1b:b5:9c:
c9:c1:40:49:b9:6b:2b:5d:aa:bb:e7:48:c6:71:8f:
bf:61:08:b8:b5:a8:79:ef:da:6c:2d:fd:c9:13:57:
64:88:54:10:4d:34:e6:40:e0:51:90:90:e7:d9:04:
37:04:b5:7b:c5:5f:52:ad:b5:08:40:b6:8e:6e:17:
26:c3:85:9c:34:83:66:38:12:04:7a:b4:e7:f7:2d:
d9:26:93:5f:e4:13:03:63:ba:77:d3:9d:de:d2:db:
90:7d:9a:6c:b3:fd:bd:e4:b9:ef:7f:7f:90:2e:6b:
3f:56:14:01:2a:a7:1f:60:0c:98:25:1b:41:7b:96:
74:e7:ce:84:3b:cc:71:84:d1:27:29:3c:31:28:44:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:33:BC:AE:DB:E7:4F:F3:A4:35:2A:67:66:7D:90:08:FC:44:68:DE
X509v3 Authority Key Identifier:
keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32332d3233203d3e20313339393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.62.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:a4:92:3a:5a:d8:71:87:f3:30:30:48:16:45:0b:b4:09:75:
88:c3:0d:09:55:98:a9:70:e6:81:89:14:6e:88:8b:88:2b:0a:
1d:09:4a:82:01:95:36:4b:d8:3c:c8:7a:db:e5:2d:51:5a:b3:
bb:3e:81:9d:f3:77:b5:e8:45:18:d1:dc:b9:a3:84:d4:10:5b:
3f:2c:25:07:d3:97:da:b4:21:56:35:b3:80:c2:72:f9:cc:f5:
52:9b:6e:13:6d:d2:05:59:ce:9a:93:12:24:c3:d8:a8:ea:29:
cb:55:51:15:3f:cf:1b:92:f5:3f:ad:ee:b5:97:fd:0e:7f:d1:
85:f4:d6:81:15:43:de:9b:38:1b:55:96:0f:89:70:27:6a:32:
96:8c:b4:07:6f:de:32:ce:e0:2e:a0:57:1f:41:56:c1:e9:29:
0d:b8:1f:64:00:25:15:9d:55:b8:5b:b2:b5:6a:c7:92:e4:bf:
60:a3:fd:20:12:fe:8a:a9:d0:4d:1a:ce:e0:f3:31:6c:d5:f5:
9d:a1:a8:a0:b6:42:d2:b1:32:70:7c:68:9d:39:40:bb:80:96:
5b:0a:b1:ea:77:65:8f:d3:11:42:5e:ef:ea:dc:4a:cf:f3:ed:
de:48:8e:da:f3:9c:3a:9b:6e:0e:eb:41:78:a7:b9:c4:ef:e6:
d7:45:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:26:51 2025 by rpki-client