Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa
File: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (raw, json)
Hash identifier: nDE4tdDR8WhfxsC/YRE+tt+1XSAX7EsFc/5T1xijpks=
Subject key identifier: 88:45:46:86:49:57:BA:48:76:DE:13:D2:16:83:80:3F:A9:86:50:0A
Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3
Certificate serial: 1A24063718690C3A6581618CE5FC421EFA911003
Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa
Signing time: Tue 28 Jan 2025 05:01:06 +0000
ROA not before: Tue 28 Jan 2025 04:56:06 +0000
ROA not after: Tue 27 Jan 2026 05:01:06 +0000
asID: 141937
IP address blocks: 103.165.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:24:06:37:18:69:0c:3a:65:81:61:8c:e5:fc:42:1e:fa:91:10:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3
Validity
Not Before: Jan 28 04:56:06 2025 GMT
Not After : Jan 27 05:01:06 2026 GMT
Subject: CN=884546864957BA4876DE13D21683803FA986500A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:3b:f7:dc:2d:dc:4b:bf:be:28:9f:9e:df:
d9:93:2c:c2:52:4b:b6:5a:81:57:ec:60:8c:d1:71:
e4:10:49:a0:a0:27:2f:7f:35:c6:b3:21:24:b8:d6:
f3:14:68:fe:30:be:51:f0:95:a8:a3:31:71:05:81:
33:f4:af:de:28:e5:be:4c:7d:e8:df:ad:90:e8:69:
0b:00:12:3f:ce:ca:dc:6c:9d:11:ff:ce:09:52:ad:
57:90:69:13:7b:a9:87:58:b2:7e:9a:88:4c:46:c5:
95:0f:54:ed:45:2b:c8:55:d3:1f:9a:bf:39:78:d6:
39:d9:66:af:2f:ea:21:36:04:1c:ac:82:ad:d6:1e:
8c:c3:1d:b2:a3:c1:57:9a:02:6b:3f:10:e9:d2:12:
48:6c:84:4d:01:df:87:ad:43:aa:dc:71:5f:b3:c1:
14:e6:66:0e:63:d3:b6:6c:ac:4b:85:e7:cc:55:4e:
50:48:67:7f:04:28:db:67:44:fa:5c:5c:25:89:91:
e5:17:7d:f1:fc:c3:6c:c7:da:cc:14:d3:da:95:e6:
85:01:67:a2:a6:61:43:0d:b8:bb:cd:c2:e1:17:79:
22:e8:38:c4:5d:97:1c:e1:35:22:09:dc:74:33:7a:
93:9d:c4:52:3d:f2:b8:d3:c4:f8:14:2a:4d:71:04:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:46:86:49:57:BA:48:76:DE:13:D2:16:83:80:3F:A9:86:50:0A
X509v3 Authority Key Identifier:
keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.250.0/23
Signature Algorithm: sha256WithRSAEncryption
91:c8:7e:7b:a1:90:21:6c:b8:4e:1f:bc:24:fe:19:4b:ce:2e:
99:b2:1b:72:75:e6:4a:2f:4a:ed:a5:f6:5e:44:d2:74:c3:fd:
47:12:29:6b:68:46:04:1b:a5:fc:2e:67:2d:55:d1:89:34:71:
b7:b0:eb:aa:c2:39:5e:31:c6:d0:8a:c4:d5:f1:20:9b:90:1e:
06:d2:95:fe:86:94:69:80:01:b1:7e:35:0d:c8:00:f2:f8:b4:
7c:0f:48:f2:a4:94:8c:19:19:3a:6f:21:2f:e2:ed:d7:14:2b:
9d:75:d3:fc:c7:bb:d0:69:e2:c3:c2:3b:97:31:51:04:e7:f3:
6a:d8:b6:e8:40:d2:78:7c:4f:bf:55:19:06:e1:74:35:fb:df:
be:88:da:a3:a0:d5:9c:98:06:5b:12:04:41:32:8a:73:33:17:
e7:58:42:73:43:42:15:11:c6:6d:79:eb:75:c2:ba:ab:2f:9d:
3e:93:88:3a:87:50:4e:7a:f5:0e:83:9d:0b:b7:0a:f9:0b:d0:
09:12:5d:8e:13:50:f3:48:e4:8c:95:ae:37:e2:dc:ce:0e:80:
f2:15:98:b5:c8:91:25:f1:0d:6d:d8:bf:dd:f3:ba:ba:87:6c:
55:58:9d:e7:b0:a5:80:d7:5f:0b:30:6f:52:49:cb:2d:2e:ee:
44:93:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:43 2025 by rpki-client