Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa
File: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (raw, json)
Hash identifier: 0MVDItb8C3FhhIC7rIXn6NwP5T0CtYBqh4iPu/lAKuA=
Subject key identifier: 22:55:1B:60:AF:87:1F:CD:D7:67:9C:7B:92:B4:2D:92:88:76:90:67
Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial: 40223945789B89352CF26B4D09EBA006F4F07847
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa
Signing time: Fri 07 Jun 2024 15:47:25 +0000
ROA not before: Fri 07 Jun 2024 15:42:25 +0000
ROA not after: Fri 06 Jun 2025 15:47:25 +0000
asID: 152366
IP address blocks: 103.13.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:22:39:45:78:9b:89:35:2c:f2:6b:4d:09:eb:a0:06:f4:f0:78:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Validity
Not Before: Jun 7 15:42:25 2024 GMT
Not After : Jun 6 15:47:25 2025 GMT
Subject: CN=22551B60AF871FCDD7679C7B92B42D9288769067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:e4:2b:c5:38:4f:fd:96:7a:e4:88:23:e9:
ec:ea:46:64:3b:6c:dd:d8:79:06:b2:08:46:58:80:
07:d9:56:0e:5d:2b:52:05:b4:42:05:6d:ff:0b:09:
cd:5b:6a:11:93:22:98:c9:3a:ed:46:08:87:20:04:
f1:10:b5:66:2e:72:18:44:4b:fe:61:1a:9c:30:e7:
11:3b:81:db:7f:dc:86:dc:49:b7:10:61:97:e6:76:
20:78:a9:32:86:8a:92:41:31:1a:9d:d2:ba:c5:6f:
97:81:98:1e:80:d8:aa:6c:96:60:b3:63:ef:72:15:
99:27:a4:4c:99:32:09:6c:ec:d4:1e:e0:ac:69:2a:
86:97:46:ea:1a:81:f3:72:9e:d4:c5:09:2f:fa:61:
99:a9:34:aa:07:c9:67:ea:84:b6:2f:4b:6e:dd:e3:
cc:93:81:e6:b9:58:e3:2e:bf:09:01:e5:d4:fa:c4:
87:9e:44:4d:b8:84:c4:d3:ad:96:ad:37:eb:88:b4:
21:39:80:e4:d1:96:75:a1:55:2c:05:03:19:d4:72:
7f:81:b2:f3:38:ea:96:95:c2:6b:32:c1:b1:40:04:
b5:57:90:de:cf:09:48:05:ab:d6:e0:89:28:b1:54:
17:6a:af:06:b1:0b:45:3b:11:25:4c:0e:4a:40:bc:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:1B:60:AF:87:1F:CD:D7:67:9C:7B:92:B4:2D:92:88:76:90:67
X509v3 Authority Key Identifier:
keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.205.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:72:48:f7:01:90:90:0e:ba:73:81:4b:40:a9:f8:44:c7:b0:
6d:10:b9:00:24:01:27:a2:07:0e:ae:ac:c6:86:28:33:d5:bb:
e1:be:b4:ba:34:af:f9:67:20:67:3c:90:e7:7a:ec:91:c5:40:
d3:61:98:13:8f:e6:ac:ee:32:75:58:05:2d:56:56:a7:21:96:
f7:90:79:ff:8f:75:66:b3:96:b9:7a:2e:08:89:92:70:3e:28:
34:81:3c:2a:2f:b4:26:d0:d2:e6:c2:e6:fc:6e:40:ff:57:c1:
00:c0:57:ff:d7:50:6f:2d:50:b0:44:25:4c:68:96:f9:10:77:
a3:89:61:20:7f:1e:96:87:cd:5f:6c:06:24:4d:9a:13:57:5b:
a7:b4:df:98:3c:07:1d:3a:6a:28:6e:c0:72:22:e2:75:91:c5:
47:6a:71:f6:4d:7f:7f:44:35:b0:09:a8:38:3c:08:c6:63:9a:
93:cf:14:5e:6b:b1:0f:e5:23:b9:ca:9d:b7:8f:1d:e9:64:c9:
db:19:b9:9c:7c:59:5c:38:b6:84:0a:ff:b2:e7:8a:b2:51:19:
54:1e:65:a7:a6:94:b7:e0:94:0f:a6:7e:a3:2d:52:40:12:b0:
78:a9:0f:90:58:81:1d:32:8b:b2:aa:a4:3c:49:ad:3f:53:05:
70:12:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:38 2025 by rpki-client