Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa
File: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (raw, json)
Hash identifier: lVEj7yVRgPAOnA7GTJazM1LkRb/e2JCSnpV+CcugS70=
Subject key identifier: E1:65:60:07:80:02:AB:4B:BA:B5:E2:6C:E2:CC:58:2D:E3:42:07:26
Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial: 7770D757829DDA36920D120961D7B61099A767E0
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa
Signing time: Mon 01 Jul 2024 01:04:20 +0000
ROA not before: Mon 01 Jul 2024 00:59:20 +0000
ROA not after: Mon 30 Jun 2025 01:04:20 +0000
asID: 136088
IP address blocks: 103.87.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:70:d7:57:82:9d:da:36:92:0d:12:09:61:d7:b6:10:99:a7:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Validity
Not Before: Jul 1 00:59:20 2024 GMT
Not After : Jun 30 01:04:20 2025 GMT
Subject: CN=E16560078002AB4BBAB5E26CE2CC582DE3420726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:a9:47:b8:92:ee:0f:3f:e7:d4:41:f2:2d:
4b:85:2b:f2:7d:a2:22:51:ac:b1:73:07:1a:bf:b8:
21:96:94:f2:ec:0c:c3:19:2e:9e:98:f9:69:71:39:
07:c9:36:02:af:d9:73:0b:bf:1e:9c:4d:d2:db:d6:
ee:9c:29:a1:03:30:7f:30:6c:40:e4:09:1c:22:66:
e0:d4:5f:54:45:79:a4:94:33:a6:a4:00:d3:59:c7:
48:db:12:88:1f:94:56:3b:4a:96:a2:6e:ae:93:c6:
21:e7:b5:bf:b4:f3:33:ba:ee:b7:ff:9c:f4:48:74:
8f:32:d3:d7:3e:5b:96:e8:bd:49:77:49:37:9a:9c:
a0:47:05:52:2c:3a:ed:72:bf:ac:ff:21:31:d8:88:
89:91:d0:98:7b:b9:5d:ea:43:f6:5e:1f:3c:bc:1a:
53:a8:ac:35:b4:6a:d4:df:df:e2:f0:c1:a7:b4:65:
26:25:7a:6e:7b:ed:4b:ca:07:5b:ef:58:2e:70:4d:
28:75:20:4c:74:29:7d:66:ff:ce:a4:73:6d:24:63:
90:89:72:72:df:57:15:1d:dd:05:81:aa:9c:2d:18:
db:ad:8f:16:c6:d5:8f:9e:d6:48:03:de:0c:0a:01:
5d:d0:e5:0f:92:a7:01:17:98:58:eb:91:f0:45:f3:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:60:07:80:02:AB:4B:BA:B5:E2:6C:E2:CC:58:2D:E3:42:07:26
X509v3 Authority Key Identifier:
keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.230.0/24
Signature Algorithm: sha256WithRSAEncryption
26:49:86:6f:25:cf:0e:3c:fd:a0:c5:be:36:34:9b:e9:ff:02:
79:b4:a1:f9:9f:08:38:fa:0b:c7:fe:17:df:30:75:6b:b5:75:
53:ba:25:d9:94:8f:43:98:e4:63:78:88:6e:4f:9b:f1:2e:1c:
81:90:ee:8f:fd:d8:da:70:cf:4d:ae:62:c4:40:32:de:ae:72:
8a:07:5c:31:69:79:0a:e9:d2:0a:3a:f8:4d:1a:03:3d:4c:c0:
c3:c4:41:99:d2:51:c8:d8:f7:63:97:29:b8:e5:69:2f:62:72:
55:35:a2:73:c8:a4:d6:7c:fb:e6:de:b0:34:0f:22:c4:27:0b:
41:d3:ea:02:ee:ac:b2:f0:54:9c:6d:89:e5:29:b3:9c:7b:ab:
cf:4f:01:27:aa:ff:ee:d3:92:6d:2b:fe:5c:66:d2:59:10:a2:
2e:3e:ff:9d:ce:f6:ef:90:85:c1:28:4f:6d:e0:7a:59:35:cf:
f6:67:f4:88:6f:57:e7:6b:72:b2:b3:66:cd:d2:bc:95:07:8b:
e4:50:1a:6f:32:a4:c6:0a:e7:05:95:32:21:df:4f:6a:e6:38:
be:e8:84:1d:b8:74:3a:30:41:54:71:f9:04:13:4a:2c:7b:80:
8e:83:88:61:92:89:a4:ff:a8:0d:44:f2:85:a5:7a:ea:43:03:
eb:35:87:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:16 2025 by rpki-client