Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: OCAMhceoK6FqEu5cqv0eRfxFnTETlN562dCqSYdjkuU=
Subject key identifier: 0E:32:19:24:BC:C2:F6:BE:6F:5E:5C:91:64:1C:FE:49:18:00:D4:1B
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 058390FD9552601E62CEB07C5E1D1A29FFF4D52E
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa
Signing time: Wed 19 Mar 2025 07:29:23 +0000
ROA not before: Wed 19 Mar 2025 07:24:23 +0000
ROA not after: Wed 18 Mar 2026 07:29:23 +0000
asID: 135478
IP address blocks: 101.128.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:83:90:fd:95:52:60:1e:62:ce:b0:7c:5e:1d:1a:29:ff:f4:d5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Mar 19 07:24:23 2025 GMT
Not After : Mar 18 07:29:23 2026 GMT
Subject: CN=0E321924BCC2F6BE6F5E5C91641CFE491800D41B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0e:9b:6c:a2:41:b0:40:1b:06:e4:90:ff:f6:
7f:1c:bc:de:82:39:c7:2c:b3:03:e4:84:37:ac:e3:
f0:9d:d0:f6:de:19:16:e8:0b:52:33:e0:ae:d6:9b:
1b:8c:d4:77:46:63:ad:41:0a:d9:48:58:f6:02:5f:
6e:24:4b:7f:f8:c8:0f:c4:08:2f:7f:3e:20:17:1b:
4c:32:fe:35:84:c8:47:26:f7:7b:16:b6:87:c8:2e:
9b:80:f4:4c:57:b7:85:eb:31:7b:df:6a:72:fa:f3:
06:e2:6d:9c:99:fe:95:86:8b:18:d5:d6:a9:8e:a4:
be:6c:10:60:6b:38:d7:d5:de:8a:2a:13:9d:ea:66:
bf:83:cc:ec:09:58:37:41:ee:87:3a:a0:97:58:eb:
8c:dc:a7:94:1e:b3:d6:33:06:d8:f4:ac:fa:3d:6a:
ec:58:2a:0e:ad:7b:d5:e2:7d:1a:03:50:dd:4a:61:
f3:7c:0b:31:53:53:f2:23:c1:83:ed:e5:40:2e:8f:
a6:78:55:f5:69:6e:4e:5f:a7:b8:9d:49:20:d4:7c:
a4:2c:95:d9:a1:f5:6b:00:f3:bb:2a:12:a9:82:ad:
70:9f:7b:26:d2:85:99:13:f1:66:9a:04:9e:cf:1c:
1b:fc:22:a5:8d:5d:45:08:c2:89:c4:37:fd:97:a7:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:19:24:BC:C2:F6:BE:6F:5E:5C:91:64:1C:FE:49:18:00:D4:1B
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:92:dc:eb:09:fd:80:c2:a9:12:e6:b6:38:b5:a1:5c:fc:f1:
52:fa:2b:81:0b:a7:9a:1a:b1:96:b7:0b:8c:be:8b:f7:74:79:
3e:30:27:ef:92:71:98:dd:0b:86:5d:41:22:7a:3d:e8:a2:6c:
bb:3b:a9:32:f4:ec:53:22:07:64:14:29:d5:55:a0:3e:37:aa:
ce:b2:01:1e:50:fa:35:9f:10:12:c8:8d:d4:89:f3:a2:24:e4:
98:4b:83:64:c7:53:be:f3:44:d0:8c:76:33:a7:c8:ca:0c:67:
a0:de:38:1d:5f:3c:5b:b8:24:8f:04:4f:27:57:fa:2e:ae:36:
72:59:70:1b:4f:0b:e6:a2:a3:9b:11:50:b8:ef:e7:74:d0:9f:
41:20:0d:be:6a:64:cf:ef:4f:e2:e3:c3:21:bb:5e:64:e1:a3:
01:87:98:ba:18:d5:7e:bb:6f:77:22:e6:0a:51:9b:ef:32:5a:
31:c4:37:8f:80:a9:38:4b:17:16:43:03:b7:3c:cb:a5:a9:80:
5d:dd:67:f2:33:3b:d7:3b:b4:cd:ec:c6:67:92:58:4b:c9:11:
6e:46:16:94:03:87:7f:99:71:0c:f6:64:cc:6f:49:38:01:3f:
51:77:f3:22:f9:5e:f1:75:c0:82:20:54:10:69:79:c8:cc:15:
e0:c4:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:20 2025 by rpki-client