Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38372e302f32342d3234203d3e20313331363934.roa
File: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (raw, json)
Hash identifier: u+eUbIQ8sdQXAOD7qFaFsHZ6r9ejSPfvugLSORN5KCE=
Subject key identifier: 08:05:BD:6D:3F:D6:D7:7F:47:AD:C2:BF:28:CC:C7:49:CC:29:8C:51
Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial: 39A09D7782BBF00E0A8C6FCF69A816E043AE5B5F
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38372e302f32342d3234203d3e20313331363934.roa
Signing time: Tue 13 Aug 2024 10:00:05 +0000
ROA not before: Tue 13 Aug 2024 09:55:05 +0000
ROA not after: Tue 12 Aug 2025 10:00:05 +0000
asID: 131694
IP address blocks: 103.7.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a0:9d:77:82:bb:f0:0e:0a:8c:6f:cf:69:a8:16:e0:43:ae:5b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Validity
Not Before: Aug 13 09:55:05 2024 GMT
Not After : Aug 12 10:00:05 2025 GMT
Subject: CN=0805BD6D3FD6D77F47ADC2BF28CCC749CC298C51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:18:f1:01:c5:01:1f:37:19:a9:35:60:62:6c:
ec:2f:33:31:0d:36:c7:68:37:15:fe:af:45:64:72:
11:1a:5b:69:73:91:d1:34:4b:90:82:b4:98:09:0c:
a8:ad:44:05:04:0b:1e:ff:44:1b:d3:50:1a:5f:b7:
17:85:b2:06:cd:a8:db:39:cf:eb:78:3c:8d:6d:e2:
cf:d0:6d:65:14:f9:d1:61:f6:39:79:f3:ec:1a:9d:
09:53:a6:0d:45:1f:e6:97:ed:82:42:e7:34:66:e8:
0b:07:5b:db:f9:fd:ba:c9:46:b3:53:fe:57:cb:c3:
3d:90:0b:0f:90:bb:41:b2:3e:12:4f:3e:ec:11:27:
d6:22:06:43:bc:f2:93:be:61:8a:f1:7f:61:9a:f8:
9e:c4:af:6e:e9:da:ff:9b:46:4a:60:5d:1c:30:55:
b9:47:a7:7f:32:27:5f:b4:1a:84:e8:28:f2:1b:2b:
ec:e8:b7:d3:27:75:64:7f:76:76:04:6b:2b:34:f1:
2f:04:db:85:a4:94:53:e2:ee:12:db:3c:18:34:79:
b1:e5:57:98:aa:93:16:74:ca:d6:c4:10:cc:19:41:
92:95:cc:d5:ba:df:6f:31:06:8a:55:1d:60:14:ac:
6b:f4:30:1c:db:e9:19:c1:13:0b:8f:3b:6e:3b:05:
36:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:05:BD:6D:3F:D6:D7:7F:47:AD:C2:BF:28:CC:C7:49:CC:29:8C:51
X509v3 Authority Key Identifier:
keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38372e302f32342d3234203d3e20313331363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.87.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f9:98:ea:60:38:76:29:31:f8:4c:cb:71:cf:21:60:62:17:
a3:7d:ca:6b:80:dc:3b:04:eb:49:5f:3a:38:35:75:9e:cc:81:
ee:0a:6d:7c:f8:d0:f2:8c:a0:6b:28:0e:4a:d5:ff:ae:71:c0:
27:90:a1:68:d6:bd:d3:94:a6:62:f7:5d:ce:27:ba:72:69:aa:
3f:ac:8d:e6:5b:ec:0b:c1:67:5d:01:b6:75:84:61:2f:65:ce:
c4:6f:bb:e0:43:e1:af:0b:e4:9c:fe:79:1a:60:74:72:61:13:
40:ce:e0:c7:7d:8e:f0:91:1c:3a:2f:73:fe:ac:81:44:44:c6:
51:15:28:28:a8:42:46:dd:8e:96:39:f4:9a:95:2c:2b:ba:8e:
7b:bb:79:ac:5c:0e:9f:aa:a9:fe:35:27:97:5d:f5:54:60:d7:
9b:80:d9:9c:f8:ff:40:1f:f2:e1:da:41:cb:a2:ae:4e:a2:16:
28:42:91:7d:a0:3e:5e:e3:19:f1:65:29:48:b8:88:1c:fe:50:
d1:50:fc:cb:07:ac:48:8c:7e:7d:8e:20:2a:86:b6:b6:7a:8e:
1a:bd:06:0f:f5:ec:fd:7c:1c:03:4b:2d:db:46:d2:fa:07:ab:
c4:f8:9b:e2:58:19:9d:03:91:27:65:2c:ea:62:ee:3f:59:35:
74:0b:7c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:31 2025 by rpki-client