Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa
File: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (raw, json)
Hash identifier: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=
Subject key identifier: C5:90:63:B0:0A:77:4A:A2:40:92:F5:86:3E:31:0D:E8:FC:3B:76:2A
Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
Certificate serial: 5316DEDD75E7F5378E87CB7277AA90F50832F2A1
Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa
Signing time: Tue 28 Jan 2025 10:00:01 +0000
ROA not before: Tue 28 Jan 2025 09:55:01 +0000
ROA not after: Tue 27 Jan 2026 10:00:01 +0000
asID: 136854
IP address blocks: 103.102.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:16:de:dd:75:e7:f5:37:8e:87:cb:72:77:aa:90:f5:08:32:f2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
Validity
Not Before: Jan 28 09:55:01 2025 GMT
Not After : Jan 27 10:00:01 2026 GMT
Subject: CN=C59063B00A774AA24092F5863E310DE8FC3B762A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:0f:be:70:8b:06:71:db:9c:40:b2:a9:37:
95:24:09:01:5d:c6:b9:e7:65:de:22:6c:91:e5:8e:
e1:89:41:aa:ac:48:59:9b:26:f9:2e:3b:2a:21:9f:
00:6c:ef:c8:96:06:14:1d:65:61:86:46:73:e2:d4:
57:db:59:c5:71:3a:ad:ac:bb:7b:af:c5:88:a8:ab:
3e:53:86:b1:5b:d0:ae:56:23:ca:58:8a:a0:49:97:
bd:95:b3:63:ef:95:e0:97:89:c6:5b:ba:41:a4:42:
42:3c:27:7d:09:3e:f3:24:97:ea:1a:45:5a:e2:05:
e5:b8:68:4e:e0:99:d0:c0:1a:c8:86:09:06:38:bd:
4c:3c:25:de:3a:6a:77:66:bc:55:db:94:03:86:ba:
7d:7e:59:eb:cf:6d:a9:85:48:b9:ad:6a:8d:bb:e4:
46:19:74:bc:52:33:d5:3a:a6:24:df:8a:0b:a0:2c:
22:62:46:e0:af:9e:c5:28:a7:fc:2a:c6:40:4a:e1:
db:5c:5c:5a:1f:ac:0f:f8:14:d0:56:69:e5:a6:ce:
08:ce:2a:98:1d:f5:67:a0:41:a7:30:54:ab:e9:a9:
47:c7:b0:2f:0e:61:91:12:0f:3a:e5:70:89:47:7d:
21:57:38:2d:b1:d3:03:8e:d2:88:10:3e:2c:2b:3c:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:63:B0:0A:77:4A:A2:40:92:F5:86:3E:31:0D:E8:FC:3B:76:2A
X509v3 Authority Key Identifier:
keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.140.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:10:f0:7e:5b:84:9d:78:1b:7c:d8:eb:67:a4:f7:c7:ef:ab:
6d:f9:39:f3:50:54:cc:19:99:49:ea:87:8c:b5:12:09:eb:a0:
e3:ed:46:61:e5:eb:2b:9b:b4:e3:c3:ed:e7:96:9f:0e:05:b6:
d4:a4:c4:7d:d8:e2:1a:26:79:f3:4b:a1:4d:69:f9:86:51:f7:
f5:c7:b2:c7:a6:ae:df:f2:46:89:af:6f:da:83:dd:6e:a2:d9:
9f:1e:5d:02:0e:72:5a:0a:15:5a:6c:01:f4:fd:1e:6d:51:91:
5c:d9:3b:f3:da:88:fa:27:40:92:4e:5f:cc:a7:9f:d5:a5:0f:
04:59:8a:42:a8:ce:db:9e:24:34:be:ac:6c:f4:8a:40:ca:77:
89:f2:04:92:d2:12:b1:b1:f5:81:97:df:63:2e:39:bc:a0:01:
71:99:31:ef:dc:12:d6:9a:5d:b1:1f:73:60:5d:85:72:dc:19:
0c:57:44:2f:c5:fc:76:ed:e8:bb:08:15:64:9d:1f:17:ef:68:
c6:9d:de:85:83:fe:b5:bb:fe:6b:62:92:0b:b0:b6:46:68:9b:
09:14:d2:ae:40:1d:21:45:f6:a2:f8:cc:95:e1:db:df:47:21:
cb:fa:20:3b:1f:d0:66:0e:31:56:63:a1:0f:5b:98:8f:38:b0:
27:10:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:45:51 2025 by rpki-client