Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
File: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (raw, json)
Hash identifier: UsW2YwHH4LFyFimoT4EF026GcJwnzijmK41dMaXsjik=
Subject key identifier: 63:A9:DD:AE:8A:BC:D8:98:6D:AC:0D:C2:81:67:9A:01:59:12:15:71
Certificate issuer: /CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Certificate serial: 096407FD36AB1C13426E41CB8254ADA4CEF13D9A
Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
Signing time: Wed 03 Apr 2024 03:54:53 +0000
ROA not before: Wed 03 Apr 2024 03:49:53 +0000
ROA not after: Wed 02 Apr 2025 03:54:53 +0000
asID: 147119
IP address blocks: 103.175.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:64:07:fd:36:ab:1c:13:42:6e:41:cb:82:54:ad:a4:ce:f1:3d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Validity
Not Before: Apr 3 03:49:53 2024 GMT
Not After : Apr 2 03:54:53 2025 GMT
Subject: CN=63A9DDAE8ABCD8986DAC0DC281679A0159121571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:66:39:43:a0:a8:26:7b:2f:fe:90:12:fb:
50:9a:52:90:d2:b6:8d:0f:37:37:04:88:a9:05:e9:
5c:b2:1d:bb:ec:c9:09:4a:e2:19:c3:ba:0b:e5:d9:
c4:05:ca:7f:10:6f:06:3e:f4:1d:31:d3:4f:12:13:
f7:29:6a:0f:42:a2:21:d4:17:de:20:c2:e4:59:c5:
d3:64:fe:61:42:77:da:c0:ac:d7:20:23:3a:b9:e6:
54:60:93:72:4b:97:f7:71:c4:47:95:be:29:95:9c:
ae:96:bc:2b:6d:6f:b0:87:44:b3:3c:3f:9b:4b:2b:
39:19:67:17:d2:20:e3:e6:c7:bd:c5:8f:50:87:fa:
cf:6e:1d:78:1e:91:98:0b:d5:14:0d:ec:76:fc:3c:
7f:73:6d:25:b0:48:7c:15:25:d6:48:e7:57:7e:ed:
b8:2c:12:51:c3:07:34:f0:92:98:08:b2:17:3f:7b:
7a:fe:5a:14:73:1a:ca:8b:ca:94:22:01:7b:f9:b9:
55:9b:0b:b5:da:cb:2b:7a:98:0b:a5:11:e4:38:87:
d3:ca:24:b2:2c:34:a2:d9:7e:36:f7:b1:ff:ea:6d:
a0:9f:e4:7b:bb:33:bf:1d:94:8e:77:34:b6:1b:b7:
2d:a1:06:a9:97:db:e3:6c:3e:04:b9:b3:fa:48:5e:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:DD:AE:8A:BC:D8:98:6D:AC:0D:C2:81:67:9A:01:59:12:15:71
X509v3 Authority Key Identifier:
keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.204.0/24
Signature Algorithm: sha256WithRSAEncryption
93:91:76:1a:4f:cc:2f:17:f7:43:6f:4c:5c:6b:3e:b9:ab:2f:
93:dd:21:e8:ad:99:57:66:aa:48:3b:d7:95:54:3b:5a:02:e7:
56:92:b8:34:ba:b3:b6:b1:8e:34:bb:9e:2d:0c:8a:e2:0b:89:
55:a9:ab:81:d0:b1:30:5a:dc:ba:b0:38:f2:f2:85:3b:19:f3:
b2:02:72:a2:b4:d3:ad:81:69:7c:31:e5:65:36:a8:31:77:05:
e5:1e:cd:56:b6:ba:e9:c3:e9:b3:39:9e:b4:1f:f9:a7:0d:db:
b3:90:b6:6b:54:74:69:d1:e7:4e:01:0b:50:a7:fc:f8:d4:63:
be:00:aa:29:c5:77:11:b3:3e:4b:2d:42:be:75:d2:97:f2:fe:
d8:60:27:c3:67:49:6a:a7:46:14:19:fa:66:7e:b9:3b:72:44:
e9:e7:5b:07:53:25:01:5d:43:93:d6:29:1c:fb:23:74:b6:7f:
0d:7b:07:54:28:e6:84:83:ae:db:ea:0b:7d:a3:54:72:24:3e:
57:0d:69:2f:e9:94:31:10:c9:7f:81:d2:83:23:69:40:35:20:
ef:1a:9c:6c:12:3d:4b:5b:4d:5f:83:d1:fe:b2:0e:f2:60:5e:
1d:ee:18:07:50:91:84:29:3b:ca:cf:1c:12:4e:2d:31:a0:55:
51:eb:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:31:13 2025 by rpki-client