Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa
File: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (raw, json)
Hash identifier: t9Nb/xyDfslEA9iB/593OKU25u4XQxGW9UZn5Qg5WFg=
Subject key identifier: 9D:FE:CE:E5:84:C3:79:B2:E1:77:5D:E5:9D:6D:64:21:93:73:2B:20
Certificate issuer: /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Certificate serial: 5CBF5F7CDE85F18BCDF8DD52830D15D2767479A8
Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa
Signing time: Tue 26 Mar 2024 09:00:00 +0000
ROA not before: Tue 26 Mar 2024 08:55:00 +0000
ROA not after: Tue 25 Mar 2025 09:00:00 +0000
asID: 132669
IP address blocks: 103.112.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:bf:5f:7c:de:85:f1:8b:cd:f8:dd:52:83:0d:15:d2:76:74:79:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Validity
Not Before: Mar 26 08:55:00 2024 GMT
Not After : Mar 25 09:00:00 2025 GMT
Subject: CN=9DFECEE584C379B2E1775DE59D6D642193732B20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:ef:06:0d:42:9c:cc:60:0a:a7:35:e3:dc:
be:dc:42:6e:78:48:96:32:34:4f:20:5d:2a:75:8c:
3b:91:37:15:df:62:79:49:69:81:11:fa:ce:cd:3c:
9d:f6:85:97:46:54:d9:82:17:27:35:ab:75:56:20:
81:f1:09:23:50:dd:b2:28:83:fd:f8:47:d1:df:e6:
33:e5:80:26:56:30:8c:7a:a5:8d:1f:f0:5e:29:03:
c1:2f:c9:8b:f1:8e:22:8b:e4:48:f0:53:7f:57:12:
c9:ce:8f:aa:8e:57:96:cd:7a:0d:4a:31:9b:13:ff:
f4:cb:52:9e:74:6d:30:6a:22:ac:01:32:38:4f:1f:
b3:20:05:b2:fd:3f:03:7b:d2:ea:e2:5c:4d:9f:e0:
ae:12:0b:2c:b2:90:f6:7e:cf:81:74:8d:30:39:a3:
06:f0:4c:95:90:42:97:fa:0a:0b:c8:fc:a4:98:fe:
b6:65:69:9f:f2:0a:90:f2:93:ad:c3:45:46:b5:24:
84:7b:e3:34:84:72:69:01:7b:19:c3:92:e8:a0:e6:
7a:55:32:62:d5:31:00:c9:fe:43:e3:e8:02:4d:4c:
e6:c9:1e:a4:c2:f2:6a:08:66:9e:d5:22:83:03:91:
01:4f:06:80:a2:cf:4c:33:69:97:07:02:9d:01:f8:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:CE:E5:84:C3:79:B2:E1:77:5D:E5:9D:6D:64:21:93:73:2B:20
X509v3 Authority Key Identifier:
keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.45.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1a:dc:df:97:43:5f:6c:ea:8f:e5:89:3a:10:45:e7:ad:28:
08:17:0b:37:e5:d3:87:34:b5:4c:a5:67:06:7b:4e:40:5b:69:
58:3c:3e:19:e4:0c:52:ec:ae:d8:d7:8e:50:00:ed:0a:9c:01:
6d:83:74:b3:0b:6a:de:5d:c6:84:83:9f:ec:93:2b:95:77:b8:
6c:6c:08:d3:4e:c7:f4:08:14:c5:4f:86:d4:8a:31:85:69:c8:
ce:ba:45:48:33:99:55:1b:f4:e0:4d:ae:98:98:79:68:a6:1c:
f5:9d:91:59:90:61:80:d8:56:d8:b6:bd:8d:49:fa:de:59:72:
e3:71:d8:1a:fe:1c:00:d0:2b:d7:0e:82:95:88:94:c3:e1:4f:
d1:f1:14:a0:ad:7e:c8:29:28:94:f6:66:7f:d1:c1:61:10:d0:
76:c8:11:27:11:79:a4:2f:49:ad:a8:0b:59:60:8f:d4:8a:ae:
39:6d:20:c9:5d:c4:80:15:e7:68:a3:6f:cc:f1:b0:d9:0b:7c:
98:c0:a4:99:d4:a6:33:26:8f:1b:1a:30:ed:c9:07:ee:f4:75:
72:28:2a:e8:d4:e0:09:d7:1f:75:b7:29:9c:3d:f3:17:1f:b6:
7f:fb:ce:ad:5d:9e:b1:52:fb:45:dc:96:73:ef:11:79:b3:ad:
f5:bb:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:09 2025 by rpki-client