Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa
File: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier: 4fgr8pnAQyhzmUnk9mguo5zm84SrVO1dIjnC4wxY3dM=
Subject key identifier: 0E:28:3D:7B:34:6E:70:A9:CE:FE:B1:6E:37:D8:E9:6C:E0:7A:28:95
Certificate issuer: /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial: 55E5BD3BA4FF0932C0F7510CF6E87DFE2F4E61E9
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa
Signing time: Mon 01 Jul 2024 00:02:13 +0000
ROA not before: Sun 30 Jun 2024 23:57:13 +0000
ROA not after: Mon 30 Jun 2025 00:02:13 +0000
asID: 38758
IP address blocks: 103.10.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e5:bd:3b:a4:ff:09:32:c0:f7:51:0c:f6:e8:7d:fe:2f:4e:61:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Validity
Not Before: Jun 30 23:57:13 2024 GMT
Not After : Jun 30 00:02:13 2025 GMT
Subject: CN=0E283D7B346E70A9CEFEB16E37D8E96CE07A2895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:df:32:30:e4:2e:cb:0d:80:6b:b8:a4:75:
46:0b:fd:76:aa:1a:89:98:24:4e:74:f7:c0:47:40:
da:36:5d:41:ad:bb:b3:2d:2c:82:72:6a:2b:eb:e2:
18:f0:d2:6a:34:59:88:af:d0:a6:b0:87:d5:34:32:
21:db:a3:12:8d:14:69:2a:37:2c:9e:58:bd:4e:ee:
46:3a:6d:a7:92:4c:51:59:54:e8:9a:4a:7f:7f:76:
8c:dc:61:a6:55:93:07:0d:6b:8b:b6:db:4c:66:2e:
5f:a5:86:2e:2c:1e:8a:1b:d0:d8:44:0c:e2:d5:bc:
3f:c5:e9:ac:68:1e:8b:ab:03:31:6a:af:8a:eb:24:
fa:2e:05:bc:ce:7b:f2:c7:49:d9:0c:2f:cc:69:73:
f5:1a:05:61:55:ba:18:19:30:49:d9:9c:00:6b:98:
ea:be:1b:32:d2:02:e5:19:95:0d:35:c2:b6:35:ab:
29:70:20:fe:39:c8:a7:94:a7:39:3b:eb:f0:bc:e1:
8e:63:fe:32:d5:fa:8c:cf:d8:63:fe:e5:e6:c5:46:
e3:80:38:8a:d9:e8:0e:9e:3c:28:dc:93:79:0a:5e:
35:47:49:ba:e2:d7:a6:b6:17:c2:18:29:d7:1e:74:
e0:02:3f:7b:5f:9e:b5:a2:07:01:1d:69:25:5a:42:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:28:3D:7B:34:6E:70:A9:CE:FE:B1:6E:37:D8:E9:6C:E0:7A:28:95
X509v3 Authority Key Identifier:
keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.63.0/24
Signature Algorithm: sha256WithRSAEncryption
65:1f:68:46:f1:f7:71:06:07:c7:de:96:d7:9e:66:f1:fc:53:
30:e9:8a:23:92:dc:25:f5:e6:66:83:89:2c:d3:5e:d3:4e:fc:
07:ce:05:5c:59:5a:09:d7:62:d6:a0:e9:4e:c1:88:21:f6:6c:
23:f4:fa:9c:0c:fc:cf:6b:90:4e:30:34:2d:b1:68:c4:92:19:
fc:f3:db:48:e9:d2:3d:e9:4c:bb:b0:bd:7f:e8:83:5d:57:43:
7c:a9:b7:3b:5c:b8:18:b6:5a:0f:8e:f3:ea:ff:e1:21:a2:01:
a2:f5:d9:fb:05:79:0b:54:2a:a7:50:74:dd:e8:d7:8f:7d:a1:
ec:e3:92:6f:c0:7b:81:0c:db:b4:d0:28:6d:ba:5f:ea:f2:c3:
02:83:a1:f1:a1:09:fc:50:b9:11:b7:d7:0b:b3:43:22:47:6e:
e8:9d:ba:df:6a:2a:57:b0:0f:ff:fb:6b:30:6a:6e:dc:c2:99:
25:59:26:61:25:bc:f8:df:33:e5:dc:ee:ec:2a:b4:ea:cf:56:
b1:54:36:2b:71:69:f2:fc:72:6f:3d:05:c7:1d:a0:b6:5b:03:
43:3d:04:89:e9:33:c5:eb:f7:6d:67:67:9e:3a:ec:f2:4d:20:
90:49:6a:d5:6d:43:f5:cd:59:a5:9f:cb:13:b3:b7:e9:a1:90:
40:14:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:59 2025 by rpki-client