Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa
File: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier: MHqEWkxk0lcqHf0DHOOzzwqgpatowmuSY53tgbg1pfo=
Subject key identifier: 05:ED:3D:9E:6D:A8:ED:13:0C:1F:AF:79:48:73:CE:3A:1C:18:5C:78
Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
Certificate serial: 698FACB194D2C308F17E2053872DEE2DD93B8E96
Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa
Signing time: Thu 12 Sep 2024 07:00:00 +0000
ROA not before: Thu 12 Sep 2024 06:55:00 +0000
ROA not after: Thu 11 Sep 2025 07:00:00 +0000
asID: 56255
IP address blocks: 103.224.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8f:ac:b1:94:d2:c3:08:f1:7e:20:53:87:2d:ee:2d:d9:3b:8e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
Validity
Not Before: Sep 12 06:55:00 2024 GMT
Not After : Sep 11 07:00:00 2025 GMT
Subject: CN=05ED3D9E6DA8ED130C1FAF794873CE3A1C185C78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:a1:09:0f:2a:af:b8:cb:70:08:14:24:6b:
42:65:ba:f1:e4:ea:82:b3:88:04:23:e1:d4:e5:ef:
bf:cf:7a:0a:ce:30:ae:2c:de:c9:c5:24:f1:be:35:
b4:b6:4f:1d:35:2b:35:05:47:33:70:58:59:b5:ab:
6d:b9:9b:14:cc:af:a6:07:1c:6c:d6:6e:a9:14:24:
35:22:95:d1:93:e9:eb:b4:e4:8d:61:3c:58:9b:1b:
55:ab:81:fd:e8:85:ef:42:51:bd:0d:08:69:51:ed:
18:04:d1:40:4f:f7:59:ba:af:55:ac:3a:83:4a:22:
68:e4:b8:b4:3e:6e:80:6a:e8:a6:61:a2:6e:19:13:
fa:f0:02:9f:83:64:18:e3:68:0a:0f:ab:eb:9a:2c:
88:3b:04:8d:cb:f1:23:4c:48:ff:c0:5f:16:ee:97:
11:5d:8b:b2:30:e8:76:0e:a8:a6:d6:8d:9a:31:6f:
16:64:77:73:64:a1:1b:e4:87:03:30:82:a0:57:3d:
e6:2c:42:3f:bb:04:8d:ea:92:ec:e9:90:b1:35:8c:
07:f9:58:e8:a6:8b:3e:37:81:b7:05:36:d1:8d:3f:
eb:6c:bd:d1:e8:5e:35:f6:f8:a6:1a:ad:49:1f:33:
71:1e:47:d7:ba:8d:c7:d2:92:38:85:3a:c6:4b:ea:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:ED:3D:9E:6D:A8:ED:13:0C:1F:AF:79:48:73:CE:3A:1C:18:5C:78
X509v3 Authority Key Identifier:
keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.224.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:70:54:d3:c3:3a:dd:91:3c:cc:71:4d:72:c7:59:f6:33:6c:
3c:f8:2a:7f:a1:29:3b:2e:df:36:a1:ad:7c:c7:09:5a:0b:ee:
40:ae:e8:60:6d:6f:ef:2f:a7:97:99:81:d6:69:31:de:1d:3c:
6c:79:30:d8:24:1e:60:e6:79:97:fb:f7:1c:98:61:66:35:ee:
d3:06:4e:8b:58:2d:92:c2:54:37:52:00:fb:d3:1d:1c:6e:9a:
46:c3:83:99:74:37:85:c4:cb:62:79:26:c2:bb:40:f5:b9:b5:
2a:de:87:8e:2b:cd:6a:c8:fb:04:01:d5:96:4b:1e:b5:41:f4:
5f:9f:96:27:fe:76:7c:09:d7:b0:0c:b6:6b:00:cc:00:db:07:
d6:1e:19:57:be:25:f5:4d:83:3d:d0:07:78:5a:3a:bf:3c:0f:
c3:6a:e3:29:ca:a4:ff:c6:e9:5a:a1:80:74:28:e1:89:74:63:
b9:48:1e:e8:20:e6:f6:82:7b:a4:21:18:22:c7:c3:39:90:8b:
28:2f:be:98:27:fb:e1:f2:58:4e:2d:7e:63:e3:08:0d:fa:d2:
0b:f7:18:63:40:8e:7e:40:3c:5b:5b:25:6e:ae:90:91:93:fa:
4c:e2:eb:ad:43:6e:04:b2:2d:81:34:11:4c:89:65:05:d2:e4:
b9:34:7c:8f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaY+ssZTSwwjxfiBThy3uLdk7jpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5
NTU4NTcxRDAeFw0yNDA5MTIwNjU1MDBaFw0yNTA5MTEwNzAwMDBaMDMxMTAvBgNV
BAMTKDA1RUQzRDlFNkRBOEVEMTMwQzFGQUY3OTQ4NzNDRTNBMUMxODVDNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUt6EJDyqvuMtwCBQka0JluvHk
6oKziAQj4dTl77/PegrOMK4s3snFJPG+NbS2Tx01KzUFRzNwWFm1q225mxTMr6YH
HGzWbqkUJDUildGT6eu05I1hPFibG1Wrgf3ohe9CUb0NCGlR7RgE0UBP91m6r1Ws
OoNKImjkuLQ+boBq6KZhom4ZE/rwAp+DZBjjaAoPq+uaLIg7BI3L8SNMSP/AXxbu
lxFdi7Iw6HYOqKbWjZoxbxZkd3NkoRvkhwMwgqBXPeYsQj+7BI3qkuzpkLE1jAf5
WOimiz43gbcFNtGNP+tsvdHoXjX2+KYarUkfM3EeR9e6jcfSkjiFOsZL6i0VAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBe09nm2o7RMMH695SHPOOhwYXHgwHwYDVR0j
BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF
NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4
NTcxRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyMjZiM2UxLWQ3ZjYtNDY1ZS04
MzAyLTdkNTJmNWMzNDBmZi8wLzMxMzAzMzJlMzIzMjM0MmUzNzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfgTTANBgkqhkiG
9w0BAQsFAAOCAQEAmnBU08M63ZE8zHFNcsdZ9jNsPPgqf6EpOy7fNqGtfMcJWgvu
QK7oYG1v7y+nl5mB1mkx3h08bHkw2CQeYOZ5l/v3HJhhZjXu0wZOi1gtksJUN1IA
+9MdHG6aRsODmXQ3hcTLYnkmwrtA9bm1Kt6HjivNasj7BAHVlksetUH0X5+WJ/52
fAnXsAy2awDMANsH1h4ZV74l9U2DPdAHeFo6vzwPw2rjKcqk/8bpWqGAdCjhiXRj
uUge6CDm9oJ7pCEYIsfDOZCLKC++mCf74fJYTi1+Y+MIDfrSC/cYY0COfkA8W1sl
bq6QkZP6TOLrrUNuBLItgTQRTIllBdLkuTR8jw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:54 2025 by rpki-client