Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa
File: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier: Ss59sjtuzZzHxU4wVgffc5lRWrpUhdlYbl1sQ1q9oHY=
Subject key identifier: 84:7E:0F:C3:57:E6:CF:77:E5:0B:2C:5E:6F:5C:65:93:00:5D:67:F4
Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18
Certificate serial: 168EE33407F64DB185821EDAA1E2256C8927B7D8
Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa
Signing time: Sun 29 Sep 2024 18:00:01 +0000
ROA not before: Sun 29 Sep 2024 17:55:01 +0000
ROA not after: Sun 28 Sep 2025 18:00:01 +0000
asID: 139952
IP address blocks: 103.175.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8e:e3:34:07:f6:4d:b1:85:82:1e:da:a1:e2:25:6c:89:27:b7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18
Validity
Not Before: Sep 29 17:55:01 2024 GMT
Not After : Sep 28 18:00:01 2025 GMT
Subject: CN=847E0FC357E6CF77E50B2C5E6F5C6593005D67F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:0a:13:dc:24:22:04:18:73:6f:63:46:01:
c4:44:71:d8:c6:1e:f0:3d:61:a2:48:5f:4a:ee:52:
67:34:22:06:60:02:10:8c:66:a2:9f:8b:7f:4a:f6:
ce:65:df:5a:35:88:8b:d1:4c:be:65:61:d9:a1:ba:
84:e0:f8:6f:3f:d9:d1:e0:31:22:18:f8:9b:f1:58:
e4:94:84:b9:c1:05:a0:e0:20:3f:b0:0b:88:b4:8a:
f0:65:62:4d:1b:0d:85:87:0b:79:ec:7d:2e:3e:b4:
5f:88:71:78:fc:1b:72:74:22:ef:08:5f:00:d6:96:
fc:ea:a7:aa:c5:6f:f2:51:40:60:04:4a:07:dd:a0:
e2:e5:ad:d1:36:48:49:7d:59:45:8f:d5:68:25:2e:
15:3f:8a:4f:36:8d:7f:24:d8:bd:75:35:75:fc:70:
55:ad:ce:fc:5b:16:32:b4:63:67:6b:20:e8:0d:16:
16:3b:37:6a:31:4c:86:aa:e4:77:6d:33:21:57:aa:
41:71:c7:d8:77:09:ab:1a:98:cd:02:a9:97:f6:e2:
cb:23:da:b4:90:90:6d:a1:bc:87:47:2d:ad:f3:70:
3b:52:ec:50:ca:db:e3:49:ed:68:d3:6a:c4:a3:d8:
3b:95:c0:ef:01:3b:ac:88:d0:c9:c1:18:ac:95:81:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7E:0F:C3:57:E6:CF:77:E5:0B:2C:5E:6F:5C:65:93:00:5D:67:F4
X509v3 Authority Key Identifier:
keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.25.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:dc:cc:5d:9a:e4:81:82:a3:18:30:ae:83:84:20:ad:f5:9c:
c9:ff:3d:55:e5:2a:d3:e9:f0:83:46:b0:8c:00:ec:8a:8d:8f:
e7:a2:25:91:7a:eb:00:99:cb:41:f2:2f:a6:f7:4b:03:58:bb:
15:0a:e6:73:23:e2:2e:80:63:ba:5b:a5:d8:fd:3c:c8:65:4b:
e2:c6:b6:d9:e3:c3:16:15:20:76:38:29:af:de:7d:49:44:81:
0d:6a:2b:62:47:e4:ab:8a:89:37:5a:d3:81:ce:74:4a:a0:03:
14:cb:be:18:39:8d:bd:bc:4b:b4:70:16:b7:ac:75:88:8c:d2:
3e:75:a8:f5:72:30:a8:01:89:f5:e2:3f:7b:06:45:c8:67:10:
6f:e6:f8:24:f1:fb:bb:26:a7:da:61:59:46:53:19:1a:a1:08:
a9:50:f7:bf:5c:b2:4d:39:29:73:2d:a4:47:e5:92:72:26:18:
80:c7:50:f1:35:cf:a3:36:e0:1a:a7:84:64:ba:59:ef:02:6b:
34:01:6f:a4:c4:db:99:54:30:65:16:cb:15:3b:97:39:35:42:
c0:52:ed:1c:bb:05:8f:1f:3c:ec:c2:c3:65:e7:c4:9f:07:2b:
13:a3:da:93:eb:87:cc:58:e6:cb:00:a7:1a:84:6c:3d:2f:04:
2c:00:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:33 2025 by rpki-client