Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa
File: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier: 7ZTClwFz0yYPDkfktwRLSUt65sufEyaWgca0v68B7Co=
Subject key identifier: D4:9C:18:00:73:C1:D9:9E:7D:08:F3:01:6B:50:23:7A:67:51:AB:62
Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Certificate serial: 307F57DF6C3B01838E31547CA7C99FFA73F7E5C7
Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa
Signing time: Wed 18 Dec 2024 08:02:42 +0000
ROA not before: Wed 18 Dec 2024 07:57:42 +0000
ROA not after: Wed 17 Dec 2025 08:02:42 +0000
asID: 139982
IP address blocks: 103.66.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:7f:57:df:6c:3b:01:83:8e:31:54:7c:a7:c9:9f:fa:73:f7:e5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Validity
Not Before: Dec 18 07:57:42 2024 GMT
Not After : Dec 17 08:02:42 2025 GMT
Subject: CN=D49C180073C1D99E7D08F3016B50237A6751AB62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:f5:36:34:d6:5e:f7:3e:03:99:11:81:7a:
bc:ee:a6:07:76:01:05:c4:ca:6b:d6:af:83:58:49:
fd:c2:9d:71:81:66:93:a6:b8:eb:2b:58:da:ca:22:
1e:ca:67:2d:3f:20:59:a8:42:9c:ab:6b:b4:d8:ac:
1e:4b:c7:14:80:50:3f:0e:26:48:9a:4b:90:02:dc:
e8:1b:4a:fc:62:6a:fa:e1:a1:f0:ba:c8:02:d1:80:
5d:f9:03:d7:25:27:3d:b8:b8:d1:a4:b1:8e:40:85:
41:94:24:bb:99:fb:e4:86:11:ba:f5:af:1d:9f:55:
81:67:70:16:de:61:1b:89:76:88:b4:f4:9f:0c:12:
5c:b6:1f:b8:71:72:b1:69:7a:49:31:06:f1:4f:b2:
ab:b7:d4:68:ed:08:73:32:d1:fa:a8:b4:67:d4:12:
11:99:02:eb:70:63:fa:9b:fd:c3:06:6b:c9:3d:d2:
47:6c:7b:fe:90:93:49:9f:70:40:1a:5b:2e:c8:3b:
d4:b5:09:49:18:58:57:99:31:7e:32:38:d3:ad:62:
20:07:66:c4:26:b2:49:bd:91:92:28:09:a5:7d:fe:
0d:92:23:8e:ea:7e:7f:f8:e4:4b:87:e6:9f:98:82:
00:70:b3:90:29:83:6b:0e:f1:97:ad:7b:e1:06:b5:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:18:00:73:C1:D9:9E:7D:08:F3:01:6B:50:23:7A:67:51:AB:62
X509v3 Authority Key Identifier:
keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.62.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:0b:3e:9d:68:f4:f7:6f:43:28:a9:23:0c:29:70:1d:00:f5:
c5:32:1f:43:ef:51:56:96:2a:f3:c6:11:08:ba:67:86:cc:2f:
67:4e:10:99:3b:74:9a:17:e1:3b:96:b4:15:bb:59:93:d6:9b:
1a:1b:2d:11:0b:29:92:f2:bd:fc:10:b5:e3:bb:66:ed:5e:2c:
6d:be:94:24:24:01:94:8f:b3:40:6e:e0:fd:83:42:4c:68:ff:
1d:c9:7d:22:25:7c:ad:2c:76:b4:aa:6b:06:69:65:64:e8:ac:
e4:04:40:1e:d9:23:45:84:ed:1b:0d:8e:5a:96:43:0d:0a:c0:
fb:66:98:74:4e:78:13:f1:80:79:5d:7a:1c:07:ce:ee:20:5a:
f0:ac:8c:b7:c3:84:bb:2e:79:40:71:c1:6a:67:7d:ae:bc:ed:
28:30:9c:eb:55:34:6f:72:31:50:77:07:ba:ce:2e:9c:e2:9c:
9f:12:4d:c9:c1:f5:4c:7a:a5:27:3c:e1:22:9e:31:b5:1b:42:
25:4c:05:a3:69:a2:b0:19:c3:4d:44:51:c3:b4:f4:32:33:a4:
87:13:f9:95:67:c2:c9:59:db:d4:c0:b1:df:1b:6c:0b:7d:f5:
81:b0:88:8e:fc:7b:a6:d7:fd:c7:ea:38:de:c9:96:32:ce:26:
73:92:0a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:29:08 2025 by rpki-client