Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa
File: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (raw, json)
Hash identifier: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=
Subject key identifier: EB:B0:9B:2E:14:0E:25:55:B9:4A:77:B8:76:BB:8D:EC:1E:AB:0E:12
Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530
Certificate serial: 66678CA4BCD5F78FCF0BAD61D065E5913265EA6E
Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa
Signing time: Fri 31 Jan 2025 07:02:48 +0000
ROA not before: Fri 31 Jan 2025 06:57:48 +0000
ROA not after: Fri 30 Jan 2026 07:02:48 +0000
asID: 139432
IP address blocks: 103.51.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:67:8c:a4:bc:d5:f7:8f:cf:0b:ad:61:d0:65:e5:91:32:65:ea:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530
Validity
Not Before: Jan 31 06:57:48 2025 GMT
Not After : Jan 30 07:02:48 2026 GMT
Subject: CN=EBB09B2E140E2555B94A77B876BB8DEC1EAB0E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:64:d0:28:08:88:53:c2:fe:84:d2:df:8b:
01:de:6b:c8:ad:ab:04:bf:b5:06:3a:d1:7d:1c:6f:
e3:89:63:98:cb:b0:bf:51:9c:7a:68:08:48:54:5a:
ac:5b:77:11:61:68:1e:33:06:06:6b:12:bc:65:a5:
b5:d3:34:bf:53:fd:39:2c:cf:d6:32:20:06:87:a4:
c8:09:4a:7d:d5:97:a5:14:ff:69:15:7c:12:83:2c:
7e:8c:d5:ff:de:a9:5c:02:5c:a4:14:37:15:b3:6e:
4d:fc:47:ea:37:64:d2:72:e0:8a:fb:c6:b9:b1:a1:
a0:b8:cd:e3:ce:df:51:42:dc:0f:6c:75:73:77:18:
1f:f3:23:ff:8f:93:2b:98:5c:7b:61:f3:cc:c7:61:
55:c4:9f:53:fe:b0:33:6d:cb:52:d7:f0:34:e6:46:
83:2b:d6:95:d3:68:ec:07:3c:19:ad:27:90:68:ca:
0d:77:43:23:76:eb:6c:99:97:37:09:e9:44:0f:12:
f0:64:e8:e9:b8:7f:38:02:02:df:15:0d:d6:5b:5b:
8a:da:a0:bd:14:ce:f8:91:4f:9b:da:86:a2:59:36:
53:61:1e:d6:9e:e7:ad:c9:46:9c:a2:82:b9:df:19:
47:24:79:aa:89:a7:d8:27:38:3f:b3:a5:1c:0f:3c:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B0:9B:2E:14:0E:25:55:B9:4A:77:B8:76:BB:8D:EC:1E:AB:0E:12
X509v3 Authority Key Identifier:
keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.51.103.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:b9:ab:73:58:63:6a:c4:f0:02:af:6c:66:54:14:14:46:ed:
54:ce:ea:e3:fa:4a:e8:00:1c:3e:39:e5:ac:42:bc:3c:45:44:
1f:70:38:24:f2:f9:eb:9b:58:cd:87:20:ae:e3:b9:8c:81:e4:
32:87:83:90:90:ff:e5:1c:a0:ec:ec:39:f2:cf:d9:02:0d:11:
75:d7:1e:7d:38:5e:c5:cc:96:43:3c:69:88:d8:fa:ee:b4:de:
0e:9f:25:3e:f6:56:b3:79:69:50:83:da:43:84:2e:34:08:21:
3e:dd:70:25:85:0d:f7:50:a6:8d:5e:0d:75:8b:50:ac:dd:8e:
8c:6b:b6:36:fc:f9:f4:b5:5b:59:73:a7:2b:1d:a8:fc:d8:a7:
a8:64:07:35:08:18:0d:3a:13:cd:0a:e0:eb:b2:28:56:58:01:
01:c2:72:f2:7c:de:06:25:a5:da:26:32:cf:a8:9f:03:ce:f1:
b2:4a:13:b1:a4:e5:83:2b:a1:9f:27:1b:de:a6:55:5c:9e:69:
a2:03:a8:45:80:2a:78:38:7b:6a:2f:08:ff:cc:ba:b2:97:d2:
9d:f6:4f:dc:bf:0c:20:c8:c1:5b:b1:ac:0a:78:dd:66:50:45:
0e:6b:bb:c2:5e:91:10:ff:ae:9b:bf:ab:3c:af:50:4d:8f:13:
98:e2:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:26 2025 by rpki-client