Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa
File: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (raw, json)
Hash identifier: GQEbPwKJpVW7oTCm9reh0gTs9OsI1XVrJgYQoBr+vxw=
Subject key identifier: 35:01:0D:7E:7E:EF:64:C8:A0:57:0D:B3:6E:8D:FA:CB:1C:06:EE:30
Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59
Certificate serial: 04E152CF793E3AA25FBA55C604AE028F99693920
Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa
Signing time: Thu 06 Jun 2024 04:00:01 +0000
ROA not before: Thu 06 Jun 2024 03:55:01 +0000
ROA not after: Thu 05 Jun 2025 04:00:01 +0000
asID: 149712
IP address blocks: 103.186.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e1:52:cf:79:3e:3a:a2:5f:ba:55:c6:04:ae:02:8f:99:69:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59
Validity
Not Before: Jun 6 03:55:01 2024 GMT
Not After : Jun 5 04:00:01 2025 GMT
Subject: CN=35010D7E7EEF64C8A0570DB36E8DFACB1C06EE30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:99:66:ba:b0:7b:01:4d:d2:ab:59:8d:41:28:
aa:fa:56:b1:62:8b:ea:6a:c0:ba:a9:c7:53:ad:3d:
31:62:04:03:48:ec:66:9c:ab:c1:cc:72:93:ab:96:
20:3d:b9:eb:9a:3b:18:44:06:c0:82:6b:7d:5c:02:
b2:17:18:1c:ba:78:36:e1:5d:28:e4:c6:ab:e9:86:
c5:fc:88:78:6b:79:7d:5a:67:3a:7e:6a:1c:c2:16:
97:e4:cb:cc:b7:6e:85:27:c8:d9:b4:54:9d:9c:8f:
4e:2a:31:3c:b0:30:fe:c3:6f:53:61:a0:d0:d7:9e:
7e:d4:6c:cf:ac:a6:31:9d:f4:ed:e4:0c:42:94:8f:
a7:ee:84:de:5e:06:ed:4a:08:d2:0a:e0:54:65:30:
48:73:f5:cd:a1:01:69:1d:1b:98:c6:6b:5b:02:86:
19:7f:42:6b:3f:fd:4e:77:e9:58:0f:99:59:b4:aa:
be:dd:37:bd:24:98:cd:54:60:30:2d:88:15:63:87:
cc:59:dd:f1:8d:62:c7:27:d3:6a:bb:24:6b:af:95:
0c:b4:00:51:27:b7:18:99:36:33:c6:45:9b:7d:be:
17:03:74:c7:13:d5:69:f1:cb:71:d7:c6:29:e2:38:
55:fc:c8:48:35:88:44:5c:61:a1:4b:bb:51:d7:85:
ed:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:01:0D:7E:7E:EF:64:C8:A0:57:0D:B3:6E:8D:FA:CB:1C:06:EE:30
X509v3 Authority Key Identifier:
keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.194.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ce:6f:bc:af:db:0c:7a:be:96:54:cf:b3:98:38:92:3a:29:
ec:bb:10:df:24:ae:00:d4:f0:a6:10:1d:28:63:8f:5f:db:6d:
61:7b:e8:46:ea:95:07:1c:14:fe:ce:87:a2:6a:64:00:e1:9e:
81:17:48:4d:57:0f:ad:60:9f:e3:ca:44:a9:34:ac:87:40:32:
6a:61:ab:23:e5:94:a6:a1:6e:17:d8:21:6f:99:d4:fc:df:d7:
67:10:77:d4:61:3d:a1:5c:be:6e:99:98:a3:22:ec:4c:43:28:
a4:89:98:23:9c:92:a9:06:8b:6e:15:96:8c:8b:32:23:81:de:
39:d6:9e:7b:58:4f:0f:00:1e:bf:ea:66:9b:48:d3:2c:39:77:
73:01:bc:c7:9d:c7:6c:f0:de:a5:82:01:56:3f:41:fb:b5:73:
66:0e:f2:5b:73:37:35:e6:04:1f:0d:66:cd:37:80:eb:71:3a:
4a:ad:ae:9d:7f:83:46:73:9f:bd:02:79:92:00:c2:6d:c0:5f:
ef:80:6c:37:c0:fb:e7:61:1e:c4:62:84:96:a2:d0:8d:4d:af:
2c:0c:15:ed:ff:1f:b3:ba:70:2c:d1:66:7e:9c:68:84:40:38:
97:d3:89:62:7e:01:89:1a:3c:76:c7:c0:b4:9f:5a:3a:82:4a:
1a:19:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:12 2025 by rpki-client