Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa
File: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier: ljwF6ITVZZqVtcMOWEgbQb3tCP2RBo+I4AZDViUqEJs=
Subject key identifier: 51:D1:8F:63:7D:CB:2F:83:8C:F3:7F:1A:9E:92:B3:E7:14:9D:C2:C5
Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial: 53E346E24DF3A5B6BA0BA97929FCF3A1704C80B9
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa
Signing time: Mon 01 Jul 2024 01:05:27 +0000
ROA not before: Mon 01 Jul 2024 01:00:27 +0000
ROA not after: Mon 30 Jun 2025 01:05:27 +0000
asID: 58477
IP address blocks: 103.31.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e3:46:e2:4d:f3:a5:b6:ba:0b:a9:79:29:fc:f3:a1:70:4c:80:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Validity
Not Before: Jul 1 01:00:27 2024 GMT
Not After : Jun 30 01:05:27 2025 GMT
Subject: CN=51D18F637DCB2F838CF37F1A9E92B3E7149DC2C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:42:69:0c:e1:f3:79:a8:6b:7b:58:88:81:
1e:b7:49:6c:34:84:fd:3b:9e:ed:69:ba:66:49:a6:
21:00:49:59:22:83:e2:80:75:d8:a5:f5:55:f8:d6:
33:9f:ee:d9:77:eb:bd:0c:40:1f:77:59:3b:4f:93:
82:38:61:b1:df:f6:17:c8:0f:bc:89:6f:a7:3c:3a:
37:93:52:0e:65:68:ab:1e:a0:3e:16:5a:3d:55:c8:
3f:0e:e5:ed:4a:68:2c:95:0b:85:20:44:ec:0d:b5:
7b:64:1a:b0:78:59:e2:c9:28:44:f0:6d:2d:83:ef:
26:da:d9:43:21:d9:29:49:0b:f8:5b:32:bd:90:67:
cc:f8:5a:54:c4:fe:d5:b7:01:bc:23:e8:80:75:ca:
a0:30:83:04:79:77:8d:39:5b:a9:22:c7:d7:14:1f:
0f:fc:76:93:6f:89:72:74:aa:c6:81:75:47:eb:2e:
17:fc:2f:2c:20:82:da:cf:53:df:ae:6a:34:c1:78:
7d:81:3d:82:10:84:44:b7:f7:84:1e:b1:6e:2c:08:
13:64:a5:31:19:0b:28:b8:04:9e:ec:d7:f8:9a:83:
20:9f:89:8c:17:80:79:55:f0:5f:13:2c:a6:c9:de:
c8:2d:ad:46:6d:9d:e9:b3:3e:af:5f:43:e7:79:a9:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D1:8F:63:7D:CB:2F:83:8C:F3:7F:1A:9E:92:B3:E7:14:9D:C2:C5
X509v3 Authority Key Identifier:
keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:cd:13:a9:94:81:dc:b6:90:a9:f7:75:fd:30:51:54:ee:dc:
d0:74:d9:12:e0:97:1e:5e:b4:90:56:7d:8e:68:21:47:dd:87:
e7:3b:ae:d2:4e:d2:80:e5:1c:6b:7d:3d:02:0e:44:32:a2:1f:
4b:87:0f:4b:8d:5e:2b:87:a8:ed:75:b5:f6:7d:77:42:af:31:
37:e1:26:89:61:c8:d2:f4:ff:7c:e4:b4:dd:78:29:5c:ab:16:
00:82:aa:c7:d4:67:69:53:0b:6e:fc:1e:4e:5a:68:dc:b5:4e:
61:08:cc:dc:e9:1d:8e:ba:cf:db:6e:80:8e:55:3b:19:69:e0:
30:9c:13:4c:df:7f:87:20:b5:c0:65:ba:ed:8c:02:3b:54:a2:
c3:12:e8:97:44:01:b0:ad:05:82:ff:9a:35:7f:15:8f:e9:f6:
a2:70:b8:b2:3a:e0:10:66:20:6f:59:21:f8:e6:cc:8b:5e:e2:
da:74:0c:7e:01:4b:d9:ab:6a:4f:7f:ea:06:61:68:33:a5:be:
2f:dc:b1:11:62:79:93:10:e8:48:10:16:e9:23:d8:63:36:e1:
ca:be:53:31:22:1e:f7:bb:84:45:84:5f:82:2c:14:5e:9f:26:
97:e7:80:84:a6:30:74:44:51:e0:60:41:c3:f6:33:6b:14:d1:
c1:96:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:14 2025 by rpki-client