Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32342d3234203d3e20313331363934.roa
File: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (raw, json)
Hash identifier: +tQvpx2/UfhCVwqRbAlnsxq9kgLuc7k03ayXgiNTges=
Subject key identifier: CE:1C:73:65:63:A3:5E:47:E7:82:68:A6:17:17:85:6F:BE:F1:AC:34
Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial: 1DF3C1E84C49CDCAF858339F72793A1D2C64B7B7
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32342d3234203d3e20313331363934.roa
Signing time: Tue 13 Aug 2024 10:00:05 +0000
ROA not before: Tue 13 Aug 2024 09:55:05 +0000
ROA not after: Tue 12 Aug 2025 10:00:05 +0000
asID: 131694
IP address blocks: 103.7.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f3:c1:e8:4c:49:cd:ca:f8:58:33:9f:72:79:3a:1d:2c:64:b7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Validity
Not Before: Aug 13 09:55:05 2024 GMT
Not After : Aug 12 10:00:05 2025 GMT
Subject: CN=CE1C736563A35E47E78268A61717856FBEF1AC34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:41:21:28:3b:9f:7f:88:ac:7d:8b:a8:39:
e0:e1:b2:86:b7:d5:d4:54:e2:b6:b9:d7:13:11:50:
9d:73:84:8b:46:75:88:a5:59:05:db:fb:e2:0a:9f:
f9:12:64:ef:83:77:5d:5b:06:e9:e3:b5:71:43:54:
05:11:a7:15:9c:d4:d4:8d:3c:b8:5c:64:48:f4:3d:
46:e6:98:58:f6:36:be:b3:ab:2b:5c:46:53:49:fa:
86:51:64:08:85:1f:67:31:b2:f6:8d:e4:2e:30:58:
e1:e8:fe:37:dd:2a:18:8f:33:33:df:5a:0c:d9:9b:
37:46:20:9a:8f:9e:b8:35:9c:25:cc:55:1d:00:99:
05:2f:73:62:01:a3:f6:c3:c7:d3:20:38:24:30:13:
f1:c7:1e:84:25:87:f8:70:a8:d8:98:7c:de:ea:9a:
7e:28:ba:ca:97:2c:ec:89:b3:e3:f4:7e:5d:80:10:
d9:98:9a:d8:55:a2:4f:4f:2c:a6:8f:57:fa:bf:0c:
3e:6c:9b:14:e0:8d:6d:36:e4:39:52:ee:cf:f8:ad:
a0:ff:66:ba:14:28:61:81:93:49:fb:11:e5:ad:1d:
43:89:27:50:7b:de:21:8a:fb:8e:3c:69:d6:85:b2:
eb:12:5e:7b:77:9f:f7:2c:e7:df:8e:17:ca:3d:7f:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1C:73:65:63:A3:5E:47:E7:82:68:A6:17:17:85:6F:BE:F1:AC:34
X509v3 Authority Key Identifier:
keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32342d3234203d3e20313331363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.86.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:20:a3:ce:2a:68:56:dc:08:49:75:18:92:b7:73:10:50:16:
aa:25:c5:3c:61:05:85:38:97:ed:a6:e7:93:97:c5:21:7c:d4:
70:5b:24:b7:8b:21:28:e6:61:23:28:15:19:30:9f:08:53:a7:
eb:ba:87:c1:9a:3f:d6:89:15:2b:48:17:98:80:12:45:d1:35:
31:76:cf:a7:55:e6:f1:f4:a7:5f:b3:3a:fb:ce:6f:39:5b:a5:
fb:81:63:77:76:0e:0a:df:1f:31:43:8f:bb:8a:47:aa:4c:d0:
3d:e4:f8:b8:9a:96:c4:96:57:14:40:94:fa:89:74:cf:5b:27:
4d:67:5e:df:5e:87:35:ff:30:f9:81:ef:31:9f:c5:85:bf:81:
3f:a5:b6:7d:a8:b3:60:95:17:62:4b:25:62:37:e0:16:99:4a:
f2:1a:cb:81:f2:78:5f:23:54:e9:2f:8c:90:0b:69:e3:98:02:
2c:c4:f0:0b:5a:50:4f:f5:f9:ac:70:91:13:e1:13:d0:1c:53:
c6:9f:2c:d8:30:9c:d3:27:41:31:e4:fa:2a:6f:05:b2:b9:e2:
2c:59:56:41:19:18:06:d9:01:31:26:98:e0:51:09:83:e7:a8:
4b:d8:2b:27:58:5d:58:d1:b4:ed:c0:5d:0b:80:4d:6c:7f:c5:
03:90:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:30 2025 by rpki-client