Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa
File: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (raw, json)
Hash identifier: RvGZ8/hcgMop9VXaD+Vs0ha5tl7QqHP8KwJKxolCiEE=
Subject key identifier: 86:6C:5C:98:EE:10:B1:DC:D4:03:2B:81:4A:09:18:53:9E:08:01:34
Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
Certificate serial: 58EC5A9CD83E11F1C5A4D7D86973CF6EA91A96FD
Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa
Signing time: Thu 07 Mar 2024 21:00:01 +0000
ROA not before: Thu 07 Mar 2024 20:55:01 +0000
ROA not after: Thu 06 Mar 2025 21:00:01 +0000
asID: 150927
IP address blocks: 103.209.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ec:5a:9c:d8:3e:11:f1:c5:a4:d7:d8:69:73:cf:6e:a9:1a:96:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
Validity
Not Before: Mar 7 20:55:01 2024 GMT
Not After : Mar 6 21:00:01 2025 GMT
Subject: CN=866C5C98EE10B1DCD4032B814A0918539E080134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:dc:7f:d9:e9:1b:5d:e3:93:2a:ff:35:f3:
17:1a:13:ee:3a:8c:c6:4b:7d:5c:20:05:40:f8:c7:
15:7f:23:43:dd:cb:0f:04:2c:c7:0e:6f:bc:89:32:
16:8a:5d:d5:df:b3:0c:79:d9:27:3b:e8:9f:99:2d:
20:c1:f7:58:7b:58:59:cd:96:f2:0b:e1:10:69:0f:
eb:58:29:bc:26:a6:b1:c9:0c:e5:71:66:ca:29:cb:
0b:ab:8a:68:1d:75:03:e6:0b:bd:3e:f8:28:64:48:
2a:b4:48:3b:5b:b1:a5:bc:40:80:35:4f:08:59:b7:
c2:25:6d:74:00:54:a9:4a:64:5d:3b:2b:17:28:54:
45:1f:30:0b:8c:f4:ae:e6:1e:6f:99:e3:bb:f2:c2:
4c:c0:62:3a:26:23:26:59:b6:77:f1:78:45:8e:45:
22:8d:65:50:89:19:91:6b:05:e6:8e:7c:45:e3:15:
49:36:8f:27:ea:15:e2:66:43:93:b9:a6:45:d8:12:
e7:5f:5b:f3:af:f9:ea:52:cd:1b:96:8a:68:9c:6a:
10:f0:9f:b8:2b:4e:96:e2:f8:a6:1a:5e:05:97:e6:
a5:c0:3d:27:e1:95:9c:80:c8:e4:4a:31:02:72:d3:
3f:0f:44:53:6f:6f:d0:94:95:15:ea:c1:98:dc:a9:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:5C:98:EE:10:B1:DC:D4:03:2B:81:4A:09:18:53:9E:08:01:34
X509v3 Authority Key Identifier:
keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.209.10.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:71:d0:15:3d:f7:7a:6e:2b:c4:2c:fc:cb:7b:1d:0a:c3:92:
0a:16:f2:b1:e0:7f:ea:fe:75:dd:19:13:e3:45:07:bc:6f:49:
4f:29:30:09:50:22:7c:fd:14:92:cc:ad:15:dc:fa:9e:2d:c0:
0a:14:1d:a0:8f:68:ba:fc:c3:bf:63:b2:4d:8a:c6:e5:26:68:
7c:10:f1:89:5f:50:9b:7b:ba:f0:6f:c9:2e:c8:b6:8b:40:49:
20:4d:bd:27:c9:6c:17:4c:0f:84:3e:70:a7:30:f2:5d:fe:c4:
b0:18:d7:7d:64:2d:9b:fa:73:42:e2:57:40:3c:f1:47:e8:ec:
d1:63:76:58:c6:46:39:04:0f:90:d0:32:46:fe:70:a0:be:34:
83:71:1b:8c:82:4e:eb:07:14:75:67:bd:b3:b0:eb:84:b7:67:
a4:5a:4f:da:fe:5c:85:2a:2a:cb:16:17:b9:78:0b:cd:80:40:
30:fa:0a:2f:53:3b:c3:f3:e1:00:fd:43:cb:af:de:c3:f9:37:
8d:93:23:a4:d3:eb:37:a0:07:9c:00:99:f3:79:50:cc:4b:e3:
84:75:8a:b3:70:03:7d:8d:02:ea:7c:23:04:ae:f3:63:55:08:
71:29:45:22:b0:14:2f:fe:a7:88:46:66:3e:2a:05:cd:5b:c9:
98:59:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:23 2025 by rpki-client