Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa
File: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (raw, json)
Hash identifier: KlZJ5jckt5FYQJMvvreG32ZohfgvtBwGxRusjNz2t24=
Subject key identifier: 65:00:2F:E3:1D:DB:E9:A2:61:D4:B3:57:46:65:AC:C8:0E:2C:B5:F8
Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial: 39B8B69807EC1C77579DF04C08B7D0F271B7BB33
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa
Signing time: Sat 06 Apr 2024 04:00:00 +0000
ROA not before: Sat 06 Apr 2024 03:55:00 +0000
ROA not after: Sat 05 Apr 2025 04:00:00 +0000
asID: 64297
IP address blocks: 103.77.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b8:b6:98:07:ec:1c:77:57:9d:f0:4c:08:b7:d0:f2:71:b7:bb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Validity
Not Before: Apr 6 03:55:00 2024 GMT
Not After : Apr 5 04:00:00 2025 GMT
Subject: CN=65002FE31DDBE9A261D4B3574665ACC80E2CB5F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:60:b0:fc:51:8a:87:0e:02:8d:95:4d:89:
e9:9b:ec:0d:98:93:01:f6:57:b9:8a:11:50:72:cc:
7f:80:ae:94:59:36:85:fe:9f:81:c3:1e:8d:1e:8a:
99:64:89:bb:ae:53:8d:10:66:90:5d:48:5b:3d:8c:
e7:db:87:5f:ba:90:59:e0:05:ce:07:f9:0f:52:0c:
dd:b1:4f:82:a6:cb:cc:0e:80:97:7b:3c:e5:00:f8:
c2:81:02:c7:f9:fa:4b:bd:c7:b1:f4:db:e8:53:5e:
ba:d1:03:57:d9:ef:99:57:84:fb:a3:cc:88:37:c7:
50:98:07:38:88:71:ca:c7:16:ca:cc:7b:ef:6b:b8:
e9:3a:3b:26:67:1a:3f:4c:74:3d:da:f2:7c:ea:79:
84:2d:d9:2d:31:e7:b8:7f:57:e9:5b:c6:ad:b9:91:
b3:6e:58:3b:93:b9:26:02:97:e4:5e:ef:f5:3f:52:
43:20:09:1b:4f:1e:12:63:4d:68:26:be:c0:af:5b:
eb:ac:8c:67:d4:5f:f6:4b:96:3f:f2:f0:4b:41:7a:
09:d0:8e:cf:0a:fd:c1:27:18:ac:0b:b0:4f:4e:cd:
15:07:09:10:df:df:9a:9b:a0:7a:54:9b:82:e3:ba:
60:bf:fd:0b:6b:71:94:76:c7:87:5b:f4:eb:15:82:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:00:2F:E3:1D:DB:E9:A2:61:D4:B3:57:46:65:AC:C8:0E:2C:B5:F8
X509v3 Authority Key Identifier:
keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.206.0/24
Signature Algorithm: sha256WithRSAEncryption
09:99:cc:7a:02:59:b4:7c:4d:c4:55:9f:c9:c8:6e:53:5e:2b:
0b:63:56:54:e5:f1:5a:cf:b5:8b:bf:ff:c8:16:d3:67:ec:b3:
00:64:dc:3e:e1:88:b9:f4:92:3b:00:b1:5a:c3:14:25:b6:b0:
0c:7a:c2:ef:8a:39:19:40:53:3f:2f:10:53:a8:8e:6a:fb:81:
1a:79:0b:ef:cb:ae:b4:2c:f5:8c:0c:7b:8e:44:48:92:83:73:
09:d4:f3:6a:58:95:25:48:99:83:1d:88:33:c4:78:ba:68:2d:
5b:7e:90:86:85:b8:54:d2:1d:53:54:9a:c3:11:97:e0:3d:e0:
41:39:03:fc:88:5d:d0:39:74:5e:6d:40:1c:ca:e9:61:3f:10:
4a:1b:7e:cf:0d:55:a7:a9:53:f6:e0:02:39:37:4c:ae:e5:8f:
0f:f6:1c:5f:6f:10:12:55:90:ce:8a:c8:d1:3f:4e:a5:01:f5:
44:dd:b3:96:6d:94:f2:41:5b:0e:b2:ad:50:cf:20:c8:1f:44:
d8:25:2d:84:f7:69:d5:2e:dd:1b:53:b8:db:18:ff:e2:e2:63:
d5:86:4c:a1:99:9c:49:af:10:0a:f8:b8:a3:15:d2:cf:bd:9b:
35:c0:2f:43:6e:ba:bf:ee:0e:ef:e6:d5:13:d2:41:e8:c2:fb:
78:29:c2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:29 2025 by rpki-client