Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa
File: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (raw, json)
Hash identifier: ndujuU6zQqtUrK6Yr3ZoJ+/Bj7YRfo0ShSgMQKBlGwY=
Subject key identifier: 6F:07:72:19:DF:84:0C:72:E4:26:1E:4C:71:72:6C:7C:D9:3B:B3:7C
Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Certificate serial: 027148644DA1A27DC5C6FD9032C02E234416A9D9
Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa
Signing time: Wed 24 Apr 2024 22:00:00 +0000
ROA not before: Wed 24 Apr 2024 21:55:00 +0000
ROA not after: Wed 23 Apr 2025 22:00:00 +0000
asID: 147087
IP address blocks: 103.69.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:71:48:64:4d:a1:a2:7d:c5:c6:fd:90:32:c0:2e:23:44:16:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Validity
Not Before: Apr 24 21:55:00 2024 GMT
Not After : Apr 23 22:00:00 2025 GMT
Subject: CN=6F077219DF840C72E4261E4C71726C7CD93BB37C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:f7:46:1c:c4:20:e0:1c:d4:ce:d8:5f:12:
a3:e0:52:6d:81:18:a8:b2:07:03:96:cb:88:6f:e8:
f6:17:f5:fc:f7:a0:3e:b4:2d:ab:21:3a:8c:6b:76:
29:bf:87:2d:ce:8d:b1:02:6a:72:b8:43:11:2b:0d:
d0:cb:22:53:94:a6:1c:78:8c:5b:c4:b8:51:73:dc:
d7:ec:41:15:a7:5c:e5:78:11:86:3a:32:d9:85:51:
e0:4a:5a:90:39:ed:de:36:65:4c:c8:2f:67:71:04:
3f:37:db:cc:fd:40:90:3d:73:95:12:3e:da:cd:ea:
a0:21:c7:74:66:a0:0a:36:3d:b1:a9:fe:21:a3:bf:
e9:98:65:91:e7:b6:3f:b8:5c:e3:6d:2f:a2:cd:af:
5a:6d:39:bd:7b:84:05:c4:f4:5a:5f:93:8a:ae:3d:
91:39:a0:6c:cc:45:22:7b:55:55:a5:69:64:f9:70:
a6:fd:e0:38:fe:9f:db:ac:6c:97:4b:35:a6:53:41:
ea:bc:31:0e:60:43:62:82:1f:bc:2a:67:de:b0:9a:
d6:10:b6:dc:5d:e8:83:6c:a7:1f:1f:71:76:d4:f3:
40:6f:a0:a1:34:0b:d4:17:75:33:07:5a:df:c8:d8:
5c:b1:5d:17:e2:83:e4:b1:54:73:70:a2:b3:4d:58:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:07:72:19:DF:84:0C:72:E4:26:1E:4C:71:72:6C:7C:D9:3B:B3:7C
X509v3 Authority Key Identifier:
keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.106.0/24
Signature Algorithm: sha256WithRSAEncryption
31:33:ee:e3:a3:b6:ab:b3:60:df:07:fb:17:d7:e0:7c:f6:27:
07:4e:b2:08:90:ca:c1:c4:67:fb:b7:b9:38:ee:e1:90:03:bb:
ac:1d:90:64:bc:61:07:69:02:66:67:08:ad:94:b4:20:9b:9f:
fa:0b:3b:44:11:85:66:0e:0a:8a:bd:47:e7:f3:53:ed:19:a2:
bb:94:8b:d4:5c:31:66:d8:86:c0:bf:43:42:f8:7a:ec:be:7a:
6e:30:91:ca:76:c9:be:e6:05:b2:c2:92:55:51:0e:69:57:8a:
03:72:b1:bd:c0:fe:f8:64:55:57:a1:77:8e:7f:8c:b4:bf:61:
dc:58:dd:45:2a:a6:fe:9f:71:49:17:23:89:25:fb:7f:fe:56:
9c:76:62:95:7a:0e:9b:f5:fe:c9:fa:b7:9a:68:ee:e5:57:7e:
f1:cc:9c:f5:45:25:f9:c5:c8:d1:06:21:5d:1e:c4:d2:65:fc:
e7:80:8a:b7:ef:5f:2e:a7:30:0c:77:a7:6f:4b:99:cf:54:63:
ae:0c:60:5a:ce:98:27:de:85:89:c0:d7:38:d4:0c:95:ec:cc:
c9:5d:f7:4b:c9:42:e0:ca:9f:d5:90:57:24:0b:ce:b6:c7:8e:
51:cf:f4:52:40:9f:f1:df:d9:79:a4:c9:76:5a:86:41:d7:8e:
9f:12:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:11 2025 by rpki-client