Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa
File: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier: gxQnMC7IT2KHIqm7lUTUCzsWjHJe7NBVBWkdEYqy9R4=
Subject key identifier: EB:7A:ED:0C:D3:40:E0:B9:01:68:82:8E:20:D7:80:3C:CF:4B:ED:53
Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
Certificate serial: 512EBFDEE3A2923C804E24A17079F311712C6166
Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa
Signing time: Tue 02 Apr 2024 05:02:49 +0000
ROA not before: Tue 02 Apr 2024 04:57:49 +0000
ROA not after: Tue 01 Apr 2025 05:02:49 +0000
asID: 38496
IP address blocks: 103.91.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2e:bf:de:e3:a2:92:3c:80:4e:24:a1:70:79:f3:11:71:2c:61:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
Validity
Not Before: Apr 2 04:57:49 2024 GMT
Not After : Apr 1 05:02:49 2025 GMT
Subject: CN=EB7AED0CD340E0B90168828E20D7803CCF4BED53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:8f:29:76:5f:5a:3a:d1:28:e9:f7:96:83:
7e:7c:61:2e:98:dc:57:9e:13:8d:7a:a9:55:b6:d6:
48:fc:74:ed:39:7e:f5:63:d4:e9:7f:49:e3:e2:1c:
f4:18:35:dd:e1:34:5e:56:2e:ca:27:32:07:06:34:
01:8a:f5:96:6e:3e:44:62:3e:9b:b3:22:d4:d9:c8:
30:1e:ea:20:84:47:b6:8a:7a:9b:c6:71:16:08:86:
59:d6:1a:89:e7:9c:47:26:16:74:13:de:f3:97:49:
65:33:85:73:06:3f:db:f8:f3:1d:cc:78:c1:70:2d:
be:74:fb:e5:c0:a0:af:0f:5d:35:7a:11:80:21:79:
cc:61:ba:60:38:56:c6:7c:58:60:6b:d4:21:3c:8b:
ed:4c:ff:4b:5f:11:cd:f2:79:4e:98:40:7c:3b:4b:
88:44:9f:17:81:fa:02:d8:3a:47:97:3f:32:40:b8:
4f:a0:9c:81:91:f4:1f:cf:97:f1:83:14:19:39:87:
2a:a3:72:d5:87:0c:95:12:a1:8b:8d:d9:ed:7d:a6:
c5:dc:31:e2:d3:36:c8:40:00:85:0e:c7:95:00:1f:
c6:ea:2a:90:94:78:3c:cf:e6:fe:8c:92:c5:06:29:
aa:59:ff:05:c4:fe:e4:21:be:c6:24:62:0d:b4:2e:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7A:ED:0C:D3:40:E0:B9:01:68:82:8E:20:D7:80:3C:CF:4B:ED:53
X509v3 Authority Key Identifier:
keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/3130332e39312e33322e302f32322d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
10:f4:ea:9a:7e:2e:7b:c9:bc:55:ba:31:6e:64:0d:7f:0a:6f:
43:f0:9c:03:55:08:da:ac:64:0a:31:9a:12:02:cc:ef:9f:f8:
09:c6:e1:1a:40:66:e8:af:96:d9:80:c3:01:91:8c:86:97:27:
69:e8:8c:8c:77:05:1c:d0:fc:5f:83:cc:f7:cb:db:9e:1d:98:
ce:e9:9d:a0:52:ff:78:70:c7:d3:a2:54:15:49:9f:68:38:41:
a4:4f:7a:e3:85:29:ab:bb:e1:07:17:d4:28:cd:8a:72:76:ae:
74:5d:18:82:d9:68:bf:00:c0:9f:d8:5b:c7:ee:d0:b1:e1:43:
31:42:91:ef:42:8b:5e:6c:e1:2f:53:f4:b7:ef:8a:39:83:33:
d2:4d:1e:d1:f4:23:9e:20:9f:40:90:ac:cf:ed:b5:e4:13:2f:
09:64:e3:5b:9f:b0:ad:c3:c3:16:59:d8:b8:6e:79:53:07:e1:
4c:db:9d:f9:81:6e:f3:a9:f4:95:db:be:43:fd:2d:7d:38:7c:
de:f4:03:70:5f:d3:a5:e2:95:0c:1d:b1:e4:15:c3:04:5f:71:
a3:1d:7c:5b:56:08:7f:e1:69:dd:10:60:9d:22:b0:ea:e6:90:
0a:1a:58:0e:7b:50:6c:d0:9b:e6:95:8e:9a:39:1f:1b:d5:41:
ed:81:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:44 2025 by rpki-client