Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
File: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (raw, json)
Hash identifier: 1hrs4DLPh6jmKDUQsAVeS3tTO/nLdzEIlT+GiyvpCqk=
Subject key identifier: 49:70:B4:C7:49:91:8E:38:F5:CC:09:2D:28:2E:72:A5:72:18:25:96
Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
Certificate serial: 7A120C90267A8E391B0B4E9D9E9DF0284FDC02FF
Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
Signing time: Fri 13 Sep 2024 08:00:01 +0000
ROA not before: Fri 13 Sep 2024 07:55:01 +0000
ROA not after: Fri 12 Sep 2025 08:00:01 +0000
asID: 136842
IP address blocks: 103.100.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:12:0c:90:26:7a:8e:39:1b:0b:4e:9d:9e:9d:f0:28:4f:dc:02:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
Validity
Not Before: Sep 13 07:55:01 2024 GMT
Not After : Sep 12 08:00:01 2025 GMT
Subject: CN=4970B4C749918E38F5CC092D282E72A572182596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:73:a2:e3:25:d1:e6:28:90:b3:4a:22:29:
19:82:bf:fc:30:50:a8:cb:c8:8e:69:0b:86:68:f3:
93:31:6e:83:99:bc:7a:8c:d2:14:56:34:8b:67:55:
a8:f3:ff:6e:ad:b7:a3:4b:c4:f6:3e:97:05:59:b6:
9f:4a:99:4a:5c:ed:a3:35:e0:00:6f:c8:ae:02:72:
ce:46:bc:e9:1c:23:27:bd:5f:5f:e0:3b:4a:50:20:
fb:30:69:59:5d:bd:51:08:f2:4d:4b:df:2e:0f:cf:
78:57:27:cf:bf:db:e4:31:b4:8e:37:eb:75:8f:d3:
1c:bd:17:53:32:b9:6d:3b:72:e7:b9:70:ef:28:2c:
5a:f4:09:9e:81:d9:8c:73:07:6d:eb:69:aa:fb:24:
dc:01:12:f5:3b:97:1a:82:c1:9a:cb:38:d1:8f:9a:
e4:8e:49:30:9b:4c:08:54:e9:17:46:c8:f5:7f:07:
19:8c:a6:32:ef:b4:1a:ee:ce:3f:3c:c1:9e:45:4e:
e3:ed:a8:ed:cf:3f:78:8a:60:9f:d3:dc:9e:cc:df:
56:e7:b7:7f:6d:b3:e1:a0:cd:24:90:0d:b9:22:cf:
f1:fa:6a:cf:0c:c6:27:4e:78:05:a9:ce:52:99:03:
b9:af:23:ef:f4:8f:27:aa:71:1f:da:fc:5f:e2:d7:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:B4:C7:49:91:8E:38:F5:CC:09:2D:28:2E:72:A5:72:18:25:96
X509v3 Authority Key Identifier:
keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.247.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e1:96:46:34:cd:27:7a:4b:5b:e2:cf:0a:bc:70:45:ea:bc:
6b:b1:30:6c:24:3f:55:16:96:c3:69:dc:1f:75:02:65:ce:3b:
63:7b:c8:55:02:03:cb:45:cc:3e:83:5e:42:21:70:44:e7:97:
2b:b8:e3:67:9b:08:b7:5b:46:26:df:79:a5:d1:96:e3:13:3e:
e6:eb:f8:6b:74:2b:cb:10:1f:d3:b8:bb:25:f0:9e:38:07:db:
b1:2e:66:df:e9:8b:9a:6c:6c:95:73:13:8a:7f:fa:90:37:b7:
af:67:21:05:ad:78:b5:67:04:b4:8a:39:f0:da:59:fc:ef:db:
a5:ab:b8:46:43:ba:3f:f8:b4:58:93:a7:38:f1:c3:27:54:6a:
da:33:c5:bf:b0:6e:fa:d2:74:4f:cb:5b:4c:72:73:3c:db:90:
03:a1:03:91:a0:4c:56:3d:6b:a2:ad:be:d9:6a:e0:88:ce:38:
dc:0d:d4:6a:cf:78:d9:02:81:e4:fb:f7:0f:5f:eb:d8:dd:6c:
b7:79:af:f5:dc:27:be:3e:5d:60:8a:30:a1:29:68:19:ba:04:
5c:dd:c5:54:4f:ff:6d:08:b5:82:c7:9c:54:13:ab:ad:e0:1f:
89:a0:0d:14:b9:a2:04:d5:cf:20:d8:46:92:f4:75:cd:ec:60:
dc:52:fb:15
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUehIMkCZ6jjkbC06dnp3wKE/cAv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy
RjI3QTRFRjAeFw0yNDA5MTMwNzU1MDFaFw0yNTA5MTIwODAwMDFaMDMxMTAvBgNV
BAMTKDQ5NzBCNEM3NDk5MThFMzhGNUNDMDkyRDI4MkU3MkE1NzIxODI1OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfHOi4yXR5iiQs0oiKRmCv/ww
UKjLyI5pC4Zo85MxboOZvHqM0hRWNItnVajz/26tt6NLxPY+lwVZtp9KmUpc7aM1
4ABvyK4Ccs5GvOkcIye9X1/gO0pQIPswaVldvVEI8k1L3y4Pz3hXJ8+/2+QxtI43
63WP0xy9F1MyuW07cue5cO8oLFr0CZ6B2YxzB23raar7JNwBEvU7lxqCwZrLONGP
muSOSTCbTAhU6RdGyPV/BxmMpjLvtBruzj88wZ5FTuPtqO3PP3iKYJ/T3J7M31bn
t39ts+GgzSSQDbkiz/H6as8MxidOeAWpzlKZA7mvI+/0jyeqcR/a/F/i14iPAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUSXC0x0mRjjj1zAktKC5ypXIYJZYwHwYDVR0j
BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB
NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3
QTRFRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhOTdiY2Y0LWUxYWEtNDdkNi1i
ZGU2LTJlNjY3YjlkNjEzNC8wLzMxMzAzMzJlMzEzMDMwMmUzMjM0MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM0MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZPcwDQYJ
KoZIhvcNAQELBQADggEBAL7hlkY0zSd6S1vizwq8cEXqvGuxMGwkP1UWlsNp3B91
AmXOO2N7yFUCA8tFzD6DXkIhcETnlyu442ebCLdbRibfeaXRluMTPubr+Gt0K8sQ
H9O4uyXwnjgH27EuZt/pi5psbJVzE4p/+pA3t69nIQWteLVnBLSKOfDaWfzv26Wr
uEZDuj/4tFiTpzjxwydUatozxb+wbvrSdE/LW0xyczzbkAOhA5GgTFY9a6Ktvtlq
4IjOONwN1GrPeNkCgeT79w9f69jdbLd5r/XcJ74+XWCKMKEpaBm6BFzdxVRP/20I
tYLHnFQTq63gH4mgDRS5ogTVzyDYRpL0dc3sYNxS+xU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:40 2025 by rpki-client