Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/3130332e33362e37302e302f32342d3234203d3e20313530323037.roa
File: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (raw, json)
Hash identifier: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=
Subject key identifier: 8A:5C:F7:60:D5:11:B3:7A:5E:6F:19:A8:B2:56:1B:F7:78:1B:77:1A
Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED
Certificate serial: 2C3FD6A6DF84C765AB50C19AB80E77947E11C0A4
Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/3130332e33362e37302e302f32342d3234203d3e20313530323037.roa
Signing time: Tue 28 Jan 2025 13:00:00 +0000
ROA not before: Tue 28 Jan 2025 12:55:00 +0000
ROA not after: Tue 27 Jan 2026 13:00:00 +0000
asID: 150207
IP address blocks: 103.36.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:3f:d6:a6:df:84:c7:65:ab:50:c1:9a:b8:0e:77:94:7e:11:c0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED
Validity
Not Before: Jan 28 12:55:00 2025 GMT
Not After : Jan 27 13:00:00 2026 GMT
Subject: CN=8A5CF760D511B37A5E6F19A8B2561BF7781B771A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:bd:26:19:a4:74:01:60:15:2d:ea:b6:ff:
2d:46:24:4c:49:9b:89:76:6a:e2:d8:01:5e:1a:d7:
40:78:65:81:52:d3:e6:fe:ae:41:90:4e:c1:18:60:
18:5f:73:4c:c0:0f:3f:09:c2:94:98:a9:e0:a2:fc:
0f:82:f1:e3:ce:10:27:c8:39:21:9f:27:c2:db:5c:
97:ae:e3:2c:66:bc:20:2e:66:76:f1:d3:1f:84:85:
40:be:26:5a:c2:c3:2c:39:ab:03:9d:1b:ca:73:43:
59:fe:b6:bf:7a:c3:f1:80:36:97:56:5b:7d:2c:2e:
22:a7:4d:e0:04:bd:82:8d:a0:c7:7c:f8:ea:93:bd:
e9:b7:c5:85:65:61:71:e1:22:cc:c2:2d:a6:35:00:
20:71:8b:26:1b:e7:7f:7a:f8:6a:e9:f1:b1:f8:a9:
1a:ec:e5:43:9c:3a:d3:d0:4d:a2:96:8b:a0:b5:49:
ed:94:2e:ae:1d:fb:cf:2d:19:4a:ff:57:aa:33:b6:
e4:83:74:2e:d9:39:fc:9d:8b:5e:b5:29:b8:b7:66:
87:2a:32:df:14:72:7b:b1:6f:f6:53:0a:e5:3d:75:
78:1c:1e:75:98:3b:20:64:17:f9:0e:ca:7b:9b:d5:
ca:8a:5e:45:14:e3:41:ee:1e:81:f2:a6:e8:b8:c8:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5C:F7:60:D5:11:B3:7A:5E:6F:19:A8:B2:56:1B:F7:78:1B:77:1A
X509v3 Authority Key Identifier:
keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/3130332e33362e37302e302f32342d3234203d3e20313530323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e0:1d:10:67:5a:62:5b:78:e0:64:7c:7e:db:bc:13:43:79:
35:90:4c:fe:ae:1e:0b:d7:f0:06:04:88:1a:be:7e:bd:4f:2e:
09:b5:2d:e2:e3:18:01:c3:16:43:b0:47:54:49:c5:de:ab:81:
24:6a:4e:bf:e7:15:b3:7b:ee:e6:30:37:b1:69:d2:dc:96:57:
c2:96:c3:47:65:86:38:b7:a3:3c:4d:74:25:5f:8c:95:4b:be:
9c:70:d3:39:f1:0d:1d:21:7c:8a:b3:66:a8:8c:28:94:2c:32:
38:3d:9b:0c:ce:26:07:66:6b:75:e5:df:b9:50:73:22:25:53:
1f:10:0c:d7:d6:57:92:be:1c:e4:78:e2:1c:a5:be:18:10:d5:
99:09:3a:f7:42:c2:82:c3:18:3e:01:5a:dc:4c:42:83:b0:30:
22:0b:cf:fc:3f:d7:b9:5b:a2:4a:42:68:fe:0a:09:44:ea:54:
9f:8a:8c:aa:76:26:df:5c:a0:74:2c:46:32:db:e9:30:56:0d:
0d:4a:23:71:c7:30:e9:ea:d2:32:09:67:df:c9:7e:10:56:9e:
e8:7b:72:8e:f0:a8:8a:bd:d5:23:f0:a6:9e:ea:02:eb:eb:fd:
6d:0d:60:bf:55:af:96:c1:d3:77:e6:3e:ac:37:47:e8:6d:d3:
04:9d:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:13 2025 by rpki-client