Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa
File: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier: lG93mDy8mZJ1KYLzkUSHtFdOp3jxkVuITP5q7tld/tA=
Subject key identifier: 3B:BC:2E:B8:CA:01:46:7D:41:F3:2E:5E:0C:07:23:41:06:DE:FD:D0
Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
Certificate serial: 144EF0BB35DEADF50F325B00614F12F8884572CE
Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa
Signing time: Tue 04 Mar 2025 06:00:02 +0000
ROA not before: Tue 04 Mar 2025 05:55:02 +0000
ROA not after: Tue 03 Mar 2026 06:00:02 +0000
asID: 38496
IP address blocks: 103.91.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4e:f0:bb:35:de:ad:f5:0f:32:5b:00:61:4f:12:f8:88:45:72:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
Validity
Not Before: Mar 4 05:55:02 2025 GMT
Not After : Mar 3 06:00:02 2026 GMT
Subject: CN=3BBC2EB8CA01467D41F32E5E0C07234106DEFDD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:26:e2:ab:96:8b:4f:f3:3d:b5:f9:96:1f:
42:cb:f2:d1:fd:4b:19:7e:48:a4:78:12:06:55:16:
3c:3b:68:b5:02:31:10:22:c6:9a:0b:79:3b:28:ac:
f2:60:1b:c3:09:02:a8:4f:6a:14:65:c8:49:ac:be:
da:5a:ba:59:4c:5c:7e:e8:a2:ed:95:95:62:93:df:
59:bf:ac:d7:cb:b1:4f:9f:1a:6c:91:71:85:83:47:
f0:86:bd:08:5c:dd:0f:ba:52:16:c2:f9:aa:64:68:
1c:16:80:b4:dc:b0:f0:42:4a:14:73:48:50:70:45:
54:e7:5f:f6:eb:3a:31:bc:30:9a:33:cd:79:2f:26:
e9:67:9a:0e:4a:94:f5:81:a0:9e:83:ee:ab:32:72:
e6:96:2f:1e:1d:74:f5:ca:34:85:97:ed:e9:ea:fb:
0c:8c:42:9b:14:ca:32:db:31:77:44:0b:6f:d5:76:
1b:e4:cb:3b:c8:32:a1:cc:24:d4:2e:ec:02:5d:08:
25:2c:a0:ea:61:b6:d0:f4:8d:67:5b:e4:99:ab:02:
d0:88:2c:17:04:31:e1:1b:10:5c:38:47:af:27:44:
58:34:2a:3f:f9:97:87:f6:3e:ae:0a:9e:f4:bb:cc:
fe:04:81:1b:dd:5e:7d:94:bb:62:69:de:75:bd:34:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:2E:B8:CA:01:46:7D:41:F3:2E:5E:0C:07:23:41:06:DE:FD:D0
X509v3 Authority Key Identifier:
keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:5f:0e:26:cf:e2:13:e7:60:66:83:02:aa:1f:b5:60:9a:66:
eb:3c:01:22:75:10:15:b4:26:a9:7d:38:43:10:44:95:4c:83:
7d:50:66:60:2e:89:51:10:1b:58:bd:a3:70:b8:a1:0b:c2:e8:
26:41:37:97:e4:ab:80:c2:b0:b8:ca:d6:46:f3:60:fc:43:17:
63:63:df:1e:b3:3a:19:de:3c:df:df:58:dd:bf:3e:93:0c:07:
24:54:55:81:e7:60:da:c7:88:0c:e3:f4:02:79:31:8f:fa:c9:
02:3d:6e:e5:8c:f5:03:60:73:49:97:5b:0a:ba:d2:2e:f2:b5:
0c:7d:dc:cc:5d:f8:5d:28:9e:4d:c2:c6:ed:b4:4d:d8:cc:b6:
5b:34:e4:05:46:dd:2f:5e:45:75:74:78:77:95:3b:34:7d:92:
e6:00:4c:97:3d:1f:fb:f2:42:1e:69:d7:4b:83:0b:72:d1:6d:
c1:f7:b0:47:6b:d5:64:e1:86:ce:d8:b6:e5:dc:b9:bc:0c:2f:
80:b9:b0:7b:85:83:af:54:1a:01:c7:64:49:83:f3:68:f3:25:
7f:76:db:8e:e4:3f:c2:5f:ce:5f:63:22:1b:a9:ce:6d:9e:ce:
51:83:67:64:58:64:fb:d3:b3:fe:ce:ef:17:a8:70:08:8b:f5:
5f:73:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:59:10 2025 by rpki-client