Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa
File: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (raw, json)
Hash identifier: hMJmJ4dw/81IwDHXcdYCEbx1mMe88CEi44Qr1Pj1eBk=
Subject key identifier: F0:09:41:B3:E5:AE:E3:44:42:B1:6C:13:15:CB:92:83:BC:FB:D4:F2
Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial: 186D53F8B2C87A9D3F91755F398C8B282FFEBC53
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa
Signing time: Mon 01 Jul 2024 01:04:25 +0000
ROA not before: Mon 01 Jul 2024 00:59:25 +0000
ROA not after: Mon 30 Jun 2025 01:04:25 +0000
asID: 138079
IP address blocks: 103.130.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:6d:53:f8:b2:c8:7a:9d:3f:91:75:5f:39:8c:8b:28:2f:fe:bc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Validity
Not Before: Jul 1 00:59:25 2024 GMT
Not After : Jun 30 01:04:25 2025 GMT
Subject: CN=F00941B3E5AEE34442B16C1315CB9283BCFBD4F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:db:51:68:f6:7c:24:ae:cc:17:3f:05:86:
d9:00:ce:86:59:31:0a:60:03:dc:1a:f5:7c:24:16:
39:e4:66:41:06:3c:21:ba:31:29:6c:d4:7c:d3:cc:
6e:06:78:45:11:d5:29:4a:10:d0:dc:ca:b0:d7:13:
5b:67:cf:78:7c:52:ea:5d:4f:4b:7a:c3:72:9d:ca:
ed:f7:45:e3:9d:dd:fb:7a:5f:8a:b5:24:ff:92:5b:
a5:ec:f1:9e:8e:33:22:f7:18:10:ea:ba:ad:61:dd:
a8:67:85:ba:03:5c:89:3a:c9:32:14:35:df:65:0a:
68:f8:2c:5d:67:fd:c5:7c:b0:a3:e4:ca:fe:e5:2f:
5f:87:37:73:f0:f9:6c:bb:78:11:6d:a2:2d:f0:82:
39:5a:a2:b7:32:e9:ee:89:ab:23:7e:a4:bb:71:06:
f6:b9:2d:55:6e:4a:88:01:1e:77:bc:6c:b8:97:df:
99:ff:03:c9:cf:65:3c:a1:0e:34:e9:f7:5f:89:28:
f0:9d:36:ef:ef:94:ff:0a:3b:b0:91:25:e2:48:f4:
5b:65:66:cf:2f:61:18:9a:3e:f4:13:c9:a8:da:91:
10:5e:be:b1:e8:72:ee:96:39:c4:e8:93:06:55:e0:
4b:37:09:fb:f5:ec:6b:f4:57:8b:32:75:01:e3:92:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:09:41:B3:E5:AE:E3:44:42:B1:6C:13:15:CB:92:83:BC:FB:D4:F2
X509v3 Authority Key Identifier:
keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.62.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:40:d3:ed:33:09:84:c6:93:91:1e:ac:53:c6:84:3c:5f:83:
10:e4:71:1a:f6:35:fe:1e:df:1d:e3:35:a2:d3:aa:4b:d7:b4:
fa:de:30:c5:52:be:eb:55:5d:e5:85:ae:75:f9:72:3b:91:dc:
45:f8:7c:de:fb:00:f7:32:ac:7f:bd:98:a8:60:64:e3:dd:63:
2a:7a:ba:76:1f:6f:ef:4a:53:78:ef:a1:8a:88:88:f5:b6:c7:
3e:77:67:aa:0d:a1:cc:1a:4f:b8:41:60:4b:00:8d:eb:47:87:
53:87:92:1e:a1:cb:07:7a:2a:f9:e0:a5:8e:b5:bd:22:a2:75:
dc:21:7b:75:36:ee:56:1d:da:86:5f:20:12:cd:35:31:c1:03:
ca:58:e1:72:54:a4:0a:3d:44:e2:83:9b:75:7d:78:07:49:11:
18:cc:0b:31:90:83:eb:1a:75:55:97:5b:ce:7f:b4:42:47:02:
ca:4d:3d:56:bd:84:9e:8f:8f:23:ad:ec:f1:b2:88:a7:8e:b9:
e8:58:a5:87:de:dc:31:46:87:ae:97:0a:b8:59:3f:93:07:5e:
75:35:94:aa:6f:4a:1a:a6:e6:8b:59:92:be:2c:7d:16:c1:04:
39:7e:db:34:42:39:f5:e3:e4:e5:f1:15:90:bc:ae:fe:82:ed:
bf:a7:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:20 2025 by rpki-client