Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa
File: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (raw, json)
Hash identifier: YcSRTKOMF12aOzXL8N5UR6kDF37yCb3W4QZONTd7a9A=
Subject key identifier: 9B:1F:7D:A9:EA:23:76:62:8E:41:5D:10:AC:16:C2:CD:7D:97:32:CF
Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD
Certificate serial: 4C0C63DE173E8F0A99E985C30F04B8D2F376F9CC
Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa
Signing time: Tue 03 Dec 2024 00:00:01 +0000
ROA not before: Mon 02 Dec 2024 23:55:01 +0000
ROA not after: Tue 02 Dec 2025 00:00:01 +0000
asID: 150523
IP address blocks: 103.75.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0c:63:de:17:3e:8f:0a:99:e9:85:c3:0f:04:b8:d2:f3:76:f9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD
Validity
Not Before: Dec 2 23:55:01 2024 GMT
Not After : Dec 2 00:00:01 2025 GMT
Subject: CN=9B1F7DA9EA2376628E415D10AC16C2CD7D9732CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:d9:86:5f:d3:b0:9d:b2:5d:1e:2a:46:61:
8b:1a:7f:3c:e5:4f:37:53:ea:3b:4f:aa:7d:4c:f9:
e9:ba:fd:05:41:b5:f6:27:ba:7c:8a:79:79:b8:b2:
c1:f7:e3:54:f1:c5:25:ca:0c:e7:08:8f:46:a4:ec:
f3:29:b8:a2:14:73:f1:dd:f0:76:48:52:93:6c:52:
d2:a9:f6:45:f9:f3:b8:9a:ce:ae:c9:51:b9:6b:5e:
d4:c2:28:73:27:26:24:30:2b:e0:8f:79:b2:ea:06:
9a:22:fa:0e:ad:af:54:a3:64:5e:ea:e5:aa:bf:5f:
f6:70:1c:e5:ab:ff:b6:6a:c1:e5:5c:e5:f2:b3:81:
8e:fe:25:37:1c:b4:c7:7b:35:1f:7b:89:5f:0f:42:
66:ef:ae:c9:c6:4c:43:61:9b:96:09:18:79:cc:0b:
fc:1a:0a:4a:ae:d6:5c:bb:1b:b9:ff:40:b5:a3:90:
72:3c:51:e7:14:40:ef:f4:33:82:97:a5:f4:3b:71:
fc:96:cc:dd:7b:32:95:4a:f6:b3:07:34:04:63:ae:
af:a7:22:54:2a:79:88:18:bf:a0:06:31:88:74:29:
4f:6a:48:76:df:c8:56:1e:ac:f2:a5:cd:5a:52:9c:
1d:ff:74:22:50:66:1d:9b:26:8b:50:42:f2:de:74:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:7D:A9:EA:23:76:62:8E:41:5D:10:AC:16:C2:CD:7D:97:32:CF
X509v3 Authority Key Identifier:
keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:2b:96:f4:34:e6:89:d3:fc:ec:32:18:99:88:0c:69:3d:57:
5c:e0:b1:c1:fc:95:24:f2:75:8a:51:ed:08:0a:ee:07:80:da:
62:3d:f0:db:c0:61:69:9d:b2:b7:f1:9e:a0:6e:06:12:84:dc:
be:4f:1a:e4:ca:38:bf:a5:b3:fa:22:0d:47:7d:35:96:67:11:
e4:6c:37:55:e6:aa:18:93:21:9e:36:28:28:76:a8:9a:04:82:
eb:ed:22:29:8e:f0:1d:8a:39:38:0f:73:07:f9:41:97:48:cd:
4a:a5:4e:df:05:81:5a:42:6e:8b:24:18:90:8b:47:19:21:9c:
e1:ba:ca:93:7c:ee:87:b9:57:0d:7f:e9:62:5b:92:0a:41:ae:
2e:59:ec:e4:95:19:20:93:74:e1:ad:17:e1:0f:85:56:f2:fd:
68:bd:3a:9d:66:46:08:2d:0f:52:d0:b2:59:83:85:12:f1:cb:
55:d6:70:ec:31:10:02:61:57:f7:68:52:c7:56:83:5f:3d:40:
76:03:e6:ae:02:48:01:cb:52:96:85:cc:f5:31:dd:69:7d:7e:
14:44:51:cf:52:17:41:04:60:23:95:f4:5a:2f:a2:12:ba:85:
bf:aa:03:66:11:b2:49:09:c1:02:d1:21:b4:5d:3f:a8:73:8a:
bb:31:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:48 2025 by rpki-client