Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa
File: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (raw, json)
Hash identifier: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=
Subject key identifier: 4F:1E:F6:DB:93:BB:0B:0F:7D:66:34:05:56:80:F1:10:A5:64:B5:A6
Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
Certificate serial: 37246814FEAD178A792A38CC17E7C5600696ECB3
Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa
Signing time: Thu 06 Feb 2025 21:00:01 +0000
ROA not before: Thu 06 Feb 2025 20:55:01 +0000
ROA not after: Thu 05 Feb 2026 21:00:01 +0000
asID: 150927
IP address blocks: 103.209.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:24:68:14:fe:ad:17:8a:79:2a:38:cc:17:e7:c5:60:06:96:ec:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
Validity
Not Before: Feb 6 20:55:01 2025 GMT
Not After : Feb 5 21:00:01 2026 GMT
Subject: CN=4F1EF6DB93BB0B0F7D6634055680F110A564B5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:1d:ab:21:68:33:f5:e8:ad:8a:7d:5b:9a:
3a:69:a0:aa:e4:1f:bd:7c:03:ce:be:83:46:50:99:
83:32:67:8a:ca:d8:0e:6c:43:f0:f4:83:47:41:cf:
0c:ef:bc:dd:49:b0:03:25:3b:27:77:37:5a:7d:74:
25:3e:0d:df:51:61:43:80:8e:b7:e2:ee:72:13:de:
80:98:97:5e:d9:b2:e2:47:6b:4f:19:b5:2b:0d:ca:
e7:f0:25:6f:99:c3:1f:9d:1c:ce:8c:1c:29:26:83:
06:2c:eb:3a:40:77:f1:78:51:40:9a:52:d4:dd:70:
48:cf:f8:73:16:9a:34:dc:4d:08:5f:25:be:68:6a:
f0:b1:32:5b:b0:83:b7:e5:91:c6:cc:fc:cb:d4:6f:
a4:6e:67:72:8e:fb:9d:f3:2e:d6:a6:eb:c5:5d:92:
b1:e2:99:88:d4:0b:84:82:24:17:47:e7:61:ad:11:
e2:9c:36:d7:90:db:f0:3a:68:b2:4a:8c:bf:3d:0c:
07:51:0c:41:f7:78:d6:a2:cb:0f:c2:db:65:76:86:
bb:16:65:78:61:5b:41:f4:cf:5b:14:79:6c:10:9a:
1a:2b:d6:44:7b:62:14:ce:6a:7d:53:a3:c4:87:02:
80:70:35:ac:3a:be:4d:bd:af:23:67:4d:14:50:f5:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1E:F6:DB:93:BB:0B:0F:7D:66:34:05:56:80:F1:10:A5:64:B5:A6
X509v3 Authority Key Identifier:
keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.209.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:20:77:11:63:c3:6c:fe:05:af:c4:90:6a:69:bf:78:39:6e:
d7:f9:3d:9d:a6:cf:36:b6:3a:f7:be:3d:61:c2:c9:93:5e:48:
50:cf:1c:b3:cc:af:6f:2e:2b:26:95:f9:9d:b6:d7:e6:b3:4e:
7e:06:0c:0a:da:ca:eb:ab:65:71:cc:16:06:86:c9:b1:e1:60:
1c:b5:cb:46:a8:ea:c1:1c:0f:5a:0f:53:66:1f:a1:8b:f2:ba:
39:49:08:4b:92:1c:95:b7:92:a6:76:5e:e6:cc:7e:77:3b:46:
5d:50:4f:40:6a:86:0e:5c:30:e4:99:fb:8a:e5:1d:94:ea:46:
08:c5:44:a2:71:a4:a7:c6:83:81:e9:11:2a:23:41:dd:0b:cc:
56:cb:d0:4b:b8:da:29:e3:03:a8:0c:26:91:cc:7d:d0:a8:77:
33:81:c2:b2:74:a3:32:04:5b:bf:43:da:45:b0:83:f5:8c:fe:
b3:1a:dd:4c:bb:b6:f2:fa:80:45:c6:b4:a3:53:ef:9d:c0:2a:
40:88:8a:b7:8d:d3:e9:24:c9:66:c4:dc:76:9d:7f:b9:0b:9a:
71:f5:7a:26:f5:4a:7c:d4:2d:4b:fc:ac:ce:bb:71:29:ee:ca:
07:c7:dd:5c:bf:86:39:90:77:94:01:cc:0d:3c:1c:62:52:b7:
c1:a5:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:08:43 2025 by rpki-client