Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa
File: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (raw, json)
Hash identifier: Wj7M1inq6nzKkGSYNAsMKNcxvsfpPzzRRsQVe4syiBI=
Subject key identifier: 4C:64:52:5B:5A:DA:78:6E:62:EF:EF:27:87:0F:5E:D9:14:D4:F7:17
Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Certificate serial: 472A7153D294091A5FA21F8B5272AFD817350AF2
Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa
Signing time: Mon 01 Jul 2024 01:02:29 +0000
ROA not before: Mon 01 Jul 2024 00:57:29 +0000
ROA not after: Mon 30 Jun 2025 01:02:29 +0000
asID: 136868
IP address blocks: 103.105.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2a:71:53:d2:94:09:1a:5f:a2:1f:8b:52:72:af:d8:17:35:0a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Validity
Not Before: Jul 1 00:57:29 2024 GMT
Not After : Jun 30 01:02:29 2025 GMT
Subject: CN=4C64525B5ADA786E62EFEF27870F5ED914D4F717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:4c:a7:27:8d:57:18:6e:88:4d:8e:eb:00:
dc:25:23:0d:27:99:bb:f2:03:5a:1c:04:4b:f5:ac:
f5:2c:54:b9:d5:c4:f0:78:9c:55:5d:6b:b1:55:3b:
7c:45:73:a4:fb:1c:86:9d:35:15:ff:d3:3a:20:68:
ed:75:87:19:97:63:0f:43:89:15:37:3a:d5:9f:31:
a9:0b:85:4f:52:12:e3:c3:91:ee:b1:26:59:10:36:
69:35:bc:98:07:ca:18:39:df:20:ae:47:ff:47:53:
8b:a0:a7:c4:7d:22:b8:b0:aa:a9:81:f6:72:58:73:
db:e7:7d:2c:08:82:bf:75:cc:65:d4:e5:26:59:72:
c2:b9:af:2d:c3:16:a4:1c:aa:3a:e2:20:b8:c1:d7:
57:8b:a5:60:7b:32:cb:28:ba:a5:cc:69:e0:f6:64:
a9:8f:b7:bc:e3:d8:e3:21:6e:10:8c:5e:34:95:50:
55:46:1a:2c:13:88:ea:cb:bd:0a:01:f2:26:0b:8c:
a0:a2:b2:ce:c7:18:d0:3a:18:10:19:9d:5d:76:8a:
80:67:90:bf:27:62:f1:85:14:b3:d1:a3:6c:a0:a7:
e0:d3:d9:9c:9a:c6:54:30:8f:de:47:83:46:43:68:
8f:e3:29:e9:33:cc:fe:7d:43:be:27:71:df:c1:fa:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:64:52:5B:5A:DA:78:6E:62:EF:EF:27:87:0F:5E:D9:14:D4:F7:17
X509v3 Authority Key Identifier:
keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.98.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:71:30:c5:01:b8:45:d5:e1:46:7b:9b:a9:46:5d:5c:1f:96:
56:a8:71:aa:e2:de:d6:f1:1f:8c:4e:f5:99:19:1d:59:66:66:
cb:c3:59:6d:88:95:49:70:46:55:69:0f:ac:e7:8f:f7:18:3a:
30:db:ae:38:d8:4d:5b:b1:61:8e:93:02:43:bb:4e:90:40:4f:
8b:90:8d:65:b8:12:11:ac:ba:9f:40:2f:05:68:06:e6:2b:12:
92:08:08:5e:82:e7:2c:37:30:9f:f2:73:68:47:5a:db:a9:10:
51:32:2f:3b:00:27:eb:24:9e:86:7f:a0:3b:84:be:14:5a:ed:
38:d6:99:6b:7e:1c:a8:47:83:99:6e:5c:0b:85:74:97:b0:6a:
0e:98:31:b9:7e:ba:ff:ce:eb:65:d1:8b:9c:6f:9a:04:5c:de:
b7:d1:6c:dc:be:18:fd:c6:30:42:8a:59:6e:07:fb:72:f9:20:
eb:c8:43:4e:77:11:04:9f:34:b1:c2:d1:49:d3:9b:e8:c1:23:
14:ca:27:f2:9c:83:3e:5d:52:84:b6:50:6f:57:a7:c7:aa:c6:
59:72:14:a8:7b:ea:65:44:44:32:86:06:de:2a:a1:6f:15:12:
1f:9e:3d:2e:79:c4:62:97:be:b2:91:b7:37:a2:dc:5d:ab:7e:
e5:38:03:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:11 2025 by rpki-client