Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa
File: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier: uw1IMEfhECnCQ5x+C3EkhFtsv7FNGp+Ew9Y1n8aiN7E=
Subject key identifier: 0E:33:58:DA:BF:55:F1:B8:70:7B:11:DE:E4:BA:CE:A9:2A:34:2E:F7
Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Certificate serial: 1EA1A041F298D373BDA93A8F24C3400B11C93270
Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa
Signing time: Fri 12 Apr 2024 20:00:01 +0000
ROA not before: Fri 12 Apr 2024 19:55:01 +0000
ROA not after: Fri 11 Apr 2025 20:00:01 +0000
asID: 140389
IP address blocks: 103.150.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a1:a0:41:f2:98:d3:73:bd:a9:3a:8f:24:c3:40:0b:11:c9:32:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Validity
Not Before: Apr 12 19:55:01 2024 GMT
Not After : Apr 11 20:00:01 2025 GMT
Subject: CN=0E3358DABF55F1B8707B11DEE4BACEA92A342EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:cb:c3:c7:18:de:77:be:2e:5d:f8:69:6f:
dd:2a:4f:44:2b:b1:85:83:a6:73:66:ae:7c:2a:27:
2d:9d:7d:fe:3f:da:e9:79:55:4f:d5:2c:b2:33:b6:
f8:a5:c1:e6:9e:8b:b5:ed:d2:57:ce:1d:1b:99:4c:
ed:81:b8:db:7e:c8:29:10:92:88:cc:16:82:a6:1a:
a8:08:21:f2:5d:39:38:03:3b:c6:f5:20:f6:bf:e2:
75:d2:08:0a:41:08:bb:5d:da:ab:7f:4b:08:a6:06:
73:8e:a5:2d:ef:10:12:44:d5:ab:c0:bb:02:05:26:
8e:05:37:d8:62:5c:44:8c:7e:97:20:6c:9e:71:f7:
d7:a2:f7:8e:aa:f3:62:0e:ac:8d:dd:09:0f:df:2f:
c1:21:4f:8e:c8:d1:b7:a7:cb:7c:55:c6:1b:0b:5d:
25:e2:0b:06:bd:cf:60:5f:6f:ab:0e:dd:ac:a9:26:
6d:d0:63:4b:ca:46:dd:7c:80:6c:8d:dd:e3:20:46:
75:a1:c1:31:50:75:8b:c1:30:11:fd:46:fa:cc:db:
72:c0:af:a2:88:75:d4:e9:c2:f3:a3:89:bc:2d:ae:
94:6e:f2:97:1e:4a:19:cd:16:56:2e:10:90:c4:a8:
6f:bb:05:49:ab:4b:39:0e:6d:fe:51:fa:00:97:fc:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:33:58:DA:BF:55:F1:B8:70:7B:11:DE:E4:BA:CE:A9:2A:34:2E:F7
X509v3 Authority Key Identifier:
keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9e:b5:99:7e:91:66:4c:9e:cf:a5:84:e3:e3:03:6a:9b:1a:
4e:df:c6:a7:3a:ba:7e:81:d2:d2:11:00:b9:43:c4:e9:6e:03:
14:0d:ab:02:be:b7:be:80:82:6f:ea:bd:07:b2:2a:92:7e:13:
7d:64:9c:b3:11:37:6d:f4:df:63:4d:76:0c:f5:03:49:2f:9a:
d6:79:9c:fb:d2:2f:05:b4:1d:6b:ca:f4:6b:57:db:7f:c8:ca:
96:07:56:56:5d:1b:98:1f:98:5a:ee:98:f0:4b:7f:ae:ad:ab:
ce:54:a6:03:8c:35:ae:4b:1e:5d:37:64:fc:12:60:27:3f:a6:
ea:a0:25:cd:28:52:86:8f:32:55:68:af:4c:14:c2:ab:52:7d:
51:ec:43:82:d9:3b:61:03:52:61:e7:a9:c7:37:7d:c3:96:6e:
35:d6:c5:82:dc:16:1b:9e:a1:f7:10:fb:50:1e:8a:60:11:ad:
fb:ab:e0:03:e1:3e:ca:05:40:b8:31:55:e1:3f:4a:2e:6d:62:
94:d8:5f:6c:5d:bb:bf:69:8c:4b:95:26:02:ad:e5:41:ab:4b:
86:87:fe:f8:55:71:4f:26:eb:63:18:e5:ad:4c:42:7c:62:20:
34:80:1c:0a:f2:1f:2b:56:f7:a5:bf:06:b1:b7:f1:79:06:b2:
34:cf:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:18 2025 by rpki-client