Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa
File: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (raw, json)
Hash identifier: UhjsO7lD25cbpz0y9rL87C+R4mYJnmib/l7Rh5H6U/k=
Subject key identifier: 28:CB:50:16:E6:27:C6:61:F7:24:39:C0:A8:1B:3B:24:EB:AB:06:C0
Certificate issuer: /CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0
Certificate serial: 68EEDA408F263943B2982A44A5303A073194B24E
Authority key identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa
Signing time: Mon 01 Jul 2024 01:04:56 +0000
ROA not before: Mon 01 Jul 2024 00:59:56 +0000
ROA not after: Mon 30 Jun 2025 01:04:56 +0000
asID: 138828
IP address blocks: 103.137.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ee:da:40:8f:26:39:43:b2:98:2a:44:a5:30:3a:07:31:94:b2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0
Validity
Not Before: Jul 1 00:59:56 2024 GMT
Not After : Jun 30 01:04:56 2025 GMT
Subject: CN=28CB5016E627C661F72439C0A81B3B24EBAB06C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:15:01:ed:48:c2:b6:86:5b:89:c2:fc:12:
04:06:72:ef:2e:68:03:bf:fd:4a:74:c7:45:e7:44:
35:7e:88:a7:c7:d7:ae:64:66:85:23:f4:ef:a3:83:
8b:f3:dc:65:1b:40:90:ff:7c:5a:d3:25:c4:9e:e8:
08:f0:42:95:48:86:fb:29:7a:05:b8:03:d6:22:9c:
18:ae:4f:49:e5:70:2e:45:bf:35:36:b8:f2:bc:a1:
c4:a1:33:b8:06:38:c2:a3:0c:fb:69:58:99:2d:d5:
e5:fc:fa:56:87:fe:fa:5d:e6:52:3c:84:09:a4:bd:
38:ef:64:82:c8:2d:4a:4f:1d:f5:44:95:76:53:c1:
cc:95:b9:b1:00:e9:ab:0d:7d:a3:5a:c7:c2:69:80:
43:b6:74:b0:2e:20:ac:02:5f:3b:58:c6:39:d1:c5:
2a:94:7b:ee:73:7f:02:12:c5:b1:b8:bb:7f:90:d7:
4c:0f:bf:55:b1:05:1e:77:5f:d4:6c:7b:e5:32:44:
f9:1a:a4:8d:2f:81:18:7b:57:e5:cb:54:14:fa:62:
4b:e3:f3:b3:b8:5c:a4:77:0b:fc:e5:c2:b7:2e:e8:
28:ec:04:5c:57:54:25:60:e7:79:36:88:b4:52:9b:
04:e8:7c:ba:06:f1:c2:20:f2:ee:2e:1d:19:db:88:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CB:50:16:E6:27:C6:61:F7:24:39:C0:A8:1B:3B:24:EB:AB:06:C0
X509v3 Authority Key Identifier:
keyid:5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.137.82.0/23
Signature Algorithm: sha256WithRSAEncryption
49:23:4c:60:37:d4:4c:f8:0a:d7:c1:92:d9:6d:c7:b9:c0:81:
37:75:97:c1:d0:d1:78:f1:66:83:5e:5a:ab:64:cf:61:48:59:
f5:43:3d:99:45:e1:a5:3f:c3:7e:87:30:62:d7:9e:b3:99:be:
ff:08:22:20:5b:0b:34:72:b7:2c:91:2c:3d:f1:e7:8c:86:71:
3d:0f:ab:d5:4b:cb:48:4d:e8:61:e5:d4:84:ea:b2:33:75:cd:
41:82:29:7a:a1:f2:99:25:1c:1f:d1:1b:59:08:fe:a8:4e:0f:
4e:92:7c:da:2e:60:3c:44:b2:9e:8a:76:ab:6f:26:bf:54:57:
51:eb:c8:be:27:04:2e:2a:04:19:59:b8:a8:3a:3f:d2:9a:4c:
03:66:91:ac:aa:1b:d3:3c:d5:b3:0f:5d:12:37:6c:1e:ae:f0:
18:c5:6e:2d:17:f0:54:ef:6b:d3:fc:e3:ac:02:ea:d1:07:57:
7a:29:0b:03:39:11:9b:5a:41:64:5f:d4:9a:fc:29:a6:d9:e2:
c0:5e:cb:81:4d:9d:27:a4:18:22:73:fe:09:f0:0c:52:8c:17:
fd:f4:29:3d:7d:1d:7d:51:fc:47:80:05:17:0a:82:cd:f5:75:
4d:be:c9:05:1b:9c:2f:79:03:d4:38:a1:35:3e:a8:fb:ae:a2:
3c:61:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:31 2025 by rpki-client