Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa
File: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (raw, json)
Hash identifier: XBLpOc8QLNhoGsvmXEZNep/rcF2zC1JRvYdm6bbhbC8=
Subject key identifier: AF:22:F3:48:17:21:A1:6E:74:4E:66:84:4F:5A:30:77:EF:13:E7:42
Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial: 34807AEE22287A45DD306AF912065ADC40C343CB
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa
Signing time: Mon 01 Jul 2024 01:04:16 +0000
ROA not before: Mon 01 Jul 2024 00:59:16 +0000
ROA not after: Mon 30 Jun 2025 01:04:16 +0000
asID: 137366
IP address blocks: 103.116.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:80:7a:ee:22:28:7a:45:dd:30:6a:f9:12:06:5a:dc:40:c3:43:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Validity
Not Before: Jul 1 00:59:16 2024 GMT
Not After : Jun 30 01:04:16 2025 GMT
Subject: CN=AF22F3481721A16E744E66844F5A3077EF13E742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:4a:ed:f3:dd:17:4e:d7:47:42:d5:a6:d3:
c0:3a:29:25:b1:ab:eb:45:5a:08:94:8f:31:35:39:
ae:be:86:76:1c:ea:a0:5a:81:92:06:21:31:f5:b1:
56:06:d4:03:cc:b0:e4:de:8c:91:58:5a:26:1e:76:
95:58:70:4a:e4:90:a6:e0:dc:b7:ae:5b:3c:2b:d1:
37:8b:66:85:03:27:48:35:e3:72:db:5b:d1:54:17:
f0:df:58:04:95:1a:01:87:32:89:1d:6b:9f:ff:0e:
9b:2e:cb:51:46:25:41:27:9f:c9:fe:9c:d8:20:37:
8c:ec:4c:43:30:60:7a:05:bf:b7:26:49:6f:a1:a5:
c3:05:69:b4:d8:91:b6:25:d6:9d:4b:b3:fd:9c:78:
1b:de:c5:84:f2:91:6e:d9:45:30:a4:bb:db:04:41:
11:0b:c8:97:94:4e:26:82:12:92:56:f8:e5:32:16:
c4:d7:c9:d5:53:bd:b9:59:12:51:70:6b:9a:c5:73:
29:98:8e:23:5a:db:31:0a:44:8d:8c:05:c4:34:29:
ea:6d:22:ec:06:8a:3e:39:99:2e:22:6b:bf:eb:36:
e2:28:32:74:bd:94:60:b0:fb:94:63:da:d6:5c:ad:
63:e4:84:96:a9:cd:1b:14:19:4c:1d:b9:f0:cf:74:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:22:F3:48:17:21:A1:6E:74:4E:66:84:4F:5A:30:77:EF:13:E7:42
X509v3 Authority Key Identifier:
keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:94:fd:8e:ac:92:8c:ea:ae:ed:bc:39:01:9c:e8:37:32:1d:
66:8b:ac:08:3d:c8:0a:1e:27:45:1f:72:db:c5:27:c8:8d:fa:
3c:47:ce:ea:75:2f:17:eb:ef:73:44:d0:e5:0f:90:4d:f2:b5:
3a:5e:6e:96:a6:86:16:45:16:69:4a:88:ad:2b:cb:d7:cf:0e:
cc:f1:9a:e5:e5:47:62:3f:2a:d1:a8:06:22:16:c3:83:61:a2:
f6:da:f5:c4:5f:20:57:64:92:f0:3a:3e:5d:8c:4b:02:9d:d8:
70:86:60:d5:25:50:bc:de:6d:53:b2:c0:ab:5f:27:c7:d1:81:
12:03:9b:08:02:95:9f:a3:98:18:be:eb:20:9f:3e:eb:06:38:
87:6d:25:96:39:a5:23:fb:2d:ed:f1:df:2b:65:2b:9b:5c:ff:
aa:42:b3:11:5d:8c:d1:85:77:71:b3:d6:eb:f4:1b:5f:58:07:
d4:16:42:9b:fa:48:99:25:fa:16:c3:dd:b1:4e:b4:1d:cb:b8:
28:af:32:33:7b:d5:c7:1e:57:ee:4e:c7:27:2b:67:1a:d0:17:
52:10:92:84:7a:5e:60:6e:08:eb:12:61:21:05:ed:e9:42:67:
f4:df:77:39:10:36:75:e3:e7:17:b8:6a:a7:4a:ef:15:56:18:
2d:4d:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:38 2025 by rpki-client