Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa
File: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier: PKJay4YTUMIamculUnWc/1iHvOFg1R7DDFoaRZ7eMb0=
Subject key identifier: 95:CE:E3:5A:31:A2:D4:1C:1B:BF:0B:2F:81:86:00:E7:62:5E:52:FE
Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Certificate serial: 3C390ACC6935951583F6647F3C51E17D9E54DC48
Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa
Signing time: Mon 02 Dec 2024 14:27:40 +0000
ROA not before: Mon 02 Dec 2024 14:22:40 +0000
ROA not after: Mon 01 Dec 2025 14:27:40 +0000
asID: 136087
IP address blocks: 103.87.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:39:0a:cc:69:35:95:15:83:f6:64:7f:3c:51:e1:7d:9e:54:dc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Validity
Not Before: Dec 2 14:22:40 2024 GMT
Not After : Dec 1 14:27:40 2025 GMT
Subject: CN=95CEE35A31A2D41C1BBF0B2F818600E7625E52FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:42:bc:b1:2e:c5:0b:a4:bd:3a:d9:c5:0f:
34:84:44:cb:11:0f:3d:dc:a7:7c:1f:ad:db:32:23:
b7:19:22:8b:3f:b1:32:f4:9e:87:95:2d:f9:47:53:
bc:d4:b4:8e:81:a3:53:76:83:ab:5a:03:d2:fa:3a:
2c:b9:10:29:c3:a3:17:a2:e8:68:f5:21:e8:82:e9:
53:65:48:f4:8c:8e:f8:70:fc:82:42:08:fe:8d:3d:
49:c4:f5:46:6e:26:f7:9d:d6:1a:cc:66:06:f5:3a:
6d:dd:7a:29:7c:76:ea:c9:31:02:63:f7:b4:8f:88:
84:16:9e:4c:58:b2:bf:c9:e5:df:3a:7a:1b:8d:af:
85:d8:b6:c3:ff:61:38:0a:bd:e9:e3:16:5b:ba:a7:
bd:52:c3:29:03:2f:da:60:9f:79:c1:c6:aa:cc:88:
c1:6a:5b:38:b4:4d:b2:1c:28:62:33:9d:05:c7:0d:
06:6f:6d:6d:50:b4:12:ca:5c:c3:e2:0c:84:8f:2a:
5d:64:6b:da:af:20:bc:20:f8:d4:ab:53:37:99:68:
4c:2d:1f:69:19:96:da:50:9f:26:1b:f0:4e:7c:0d:
de:c6:b9:fe:c9:f9:ec:ec:62:fc:83:26:53:2a:f1:
3a:b7:1d:88:25:76:aa:a2:1f:12:08:ae:62:d5:a0:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CE:E3:5A:31:A2:D4:1C:1B:BF:0B:2F:81:86:00:E7:62:5E:52:FE
X509v3 Authority Key Identifier:
keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:05:67:a4:4c:ec:9f:76:34:de:70:a0:60:a7:4e:8b:a1:f4:
6b:cc:87:07:57:a4:af:7c:e1:0a:92:be:b2:b6:9a:8d:30:a8:
ee:a9:98:42:77:85:64:e7:04:bc:69:1f:32:a5:d4:57:b9:10:
a0:03:6d:82:ed:fb:f8:d1:55:5a:c4:1a:d9:61:b9:88:08:e2:
0c:1d:00:0a:94:1b:f2:da:cf:9d:bb:1d:79:8d:eb:6c:c3:23:
c3:9e:bc:82:80:81:a7:5f:1b:3f:b4:62:40:e8:1c:7f:d7:40:
4f:b0:10:80:b8:b5:28:9e:a6:ba:0f:7b:14:ca:c6:93:ca:19:
ab:a4:5e:00:78:76:e2:e8:58:05:27:dd:15:60:cf:c9:16:55:
14:36:f0:5a:4a:28:b5:30:68:b5:8e:d4:6e:b9:72:1a:32:a7:
b9:c8:49:bb:c3:d3:4e:67:dd:b2:26:af:0a:16:42:7e:77:41:
4a:9d:44:8f:57:6c:d0:33:23:36:2a:31:d2:a7:85:18:5b:57:
30:4b:1f:ca:d7:78:e8:54:69:b3:fe:31:8a:e7:0d:c9:f3:94:
70:55:3e:01:78:5e:87:e6:03:0a:4f:a4:bf:33:da:d2:c7:db:
de:bf:a2:f6:44:2a:b1:34:a4:90:7a:23:22:f1:a5:6e:40:f9:
61:8e:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:15 2025 by rpki-client