Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa
File: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (raw, json)
Hash identifier: UcVriHXLq51fdaANA3PdMhx9PaPhtGFXAVilM8tjzJU=
Subject key identifier: 48:FB:00:BE:61:73:66:74:02:4B:29:F1:74:52:B3:B9:AF:EA:58:1E
Certificate issuer: /CN=7B7F414EB90DB2AC9713729961F3D35102FEA537
Certificate serial: 471DC9A4BFFCE8983EBDD6818F272F0E31E2777C
Authority key identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa
Signing time: Fri 15 Nov 2024 07:00:01 +0000
ROA not before: Fri 15 Nov 2024 06:55:01 +0000
ROA not after: Fri 14 Nov 2025 07:00:01 +0000
asID: 150481
IP address blocks: 103.115.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1d:c9:a4:bf:fc:e8:98:3e:bd:d6:81:8f:27:2f:0e:31:e2:77:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B7F414EB90DB2AC9713729961F3D35102FEA537
Validity
Not Before: Nov 15 06:55:01 2024 GMT
Not After : Nov 14 07:00:01 2025 GMT
Subject: CN=48FB00BE61736674024B29F17452B3B9AFEA581E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:38:39:08:5e:cd:58:32:71:b7:48:fb:ca:
7e:2a:a9:38:22:54:e5:b2:73:8c:d5:03:ad:a5:44:
44:9b:67:74:1d:91:7d:a4:31:78:27:f8:94:28:9d:
4b:13:08:82:04:f7:d2:ad:3c:01:66:98:eb:4b:3e:
a2:04:1d:b8:a1:ea:29:12:f4:eb:ad:09:11:05:0e:
32:af:8f:69:ed:f1:ad:d8:c3:74:bf:0e:3b:fb:14:
80:a5:e0:33:fa:f0:df:90:f2:88:6b:25:a3:08:d9:
f6:39:1b:e0:fa:08:c5:b9:75:13:8e:4f:1d:d1:d3:
37:36:39:6a:bd:97:a1:88:ef:51:5a:77:dc:e0:64:
98:44:37:26:77:7f:7a:f1:38:02:95:a9:bb:3c:99:
ac:55:91:35:f1:5c:90:d7:95:43:52:dd:c8:8b:be:
0a:fe:45:d8:8c:2d:e4:b0:fe:3d:3a:ef:e5:16:ee:
03:4f:61:18:71:5e:58:fb:aa:e4:f6:d4:72:cf:95:
2e:a2:2c:85:7c:00:d3:b5:19:92:6a:b1:16:c5:0c:
0c:f9:78:e4:3a:4f:10:e5:95:64:01:ed:f4:2d:5c:
34:da:0f:07:49:29:87:8f:9f:7c:8e:10:d3:24:8f:
51:e5:64:5d:4f:31:52:0f:52:f2:6d:68:75:17:54:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FB:00:BE:61:73:66:74:02:4B:29:F1:74:52:B3:B9:AF:EA:58:1E
X509v3 Authority Key Identifier:
keyid:7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.35.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a9:d8:e0:eb:07:39:d3:50:56:ea:e8:6a:ea:95:ba:8d:11:
bd:b6:9b:5b:1f:58:7e:d1:95:84:2f:a8:25:5f:c2:5b:13:21:
45:86:3d:51:ea:bd:8d:dd:b7:2e:ea:88:5e:27:5b:67:a1:6f:
8f:d7:03:9a:7c:48:44:b2:ba:ca:7e:e4:e7:32:7e:43:ea:47:
5e:fd:70:73:dd:20:f4:b5:6d:5c:22:96:fc:e8:d1:86:5e:46:
08:2f:f3:df:12:03:55:7a:a5:11:09:93:80:49:81:d9:33:49:
a3:17:7f:87:62:a6:eb:eb:f8:4f:59:c4:50:99:71:66:46:df:
82:4d:04:6b:f9:93:af:0b:50:83:19:13:fc:aa:cc:47:8c:64:
69:e6:b4:7b:6a:f0:20:c5:a6:5a:35:80:c3:ce:6d:d5:3c:a8:
ca:2e:21:c1:6e:9b:f1:af:2c:79:39:96:64:08:c4:03:03:f9:
f6:4c:45:25:92:b8:a1:a4:54:bd:d8:3a:88:33:0f:42:c0:c5:
79:8c:8c:a3:d7:2a:14:87:25:46:63:55:93:6e:28:76:d4:83:
7d:43:cb:37:e5:3c:44:b3:b7:df:fa:11:be:47:83:00:54:28:
61:5a:85:eb:a3:aa:38:f1:6a:7f:66:a6:08:14:6b:1c:da:22:
e0:e5:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:56 2025 by rpki-client