Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa
File: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier: nZcY2gfxAEyBR5vBIabcGR8YJ3boENfhzaPlLrFWCrY=
Subject key identifier: 7D:58:CA:CD:AE:35:CE:F8:6A:C5:E4:79:36:60:A3:7A:EF:72:81:B2
Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial: 4EA43E7CA416DC9DE67A383692699E28B560E73A
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa
Signing time: Mon 01 Jul 2024 01:03:49 +0000
ROA not before: Mon 01 Jul 2024 00:58:49 +0000
ROA not after: Mon 30 Jun 2025 01:03:49 +0000
asID: 45722
IP address blocks: 103.94.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a4:3e:7c:a4:16:dc:9d:e6:7a:38:36:92:69:9e:28:b5:60:e7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Validity
Not Before: Jul 1 00:58:49 2024 GMT
Not After : Jun 30 01:03:49 2025 GMT
Subject: CN=7D58CACDAE35CEF86AC5E4793660A37AEF7281B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:5c:0a:b1:b7:83:7d:36:9f:dd:82:fd:8e:
66:c8:eb:34:45:9b:f5:33:e5:94:c9:69:b0:d3:fb:
01:90:50:dd:4b:76:1a:aa:7b:de:8b:2a:a5:bf:9f:
b5:68:5a:9d:7d:13:45:71:e8:2c:2c:a5:32:7d:44:
e4:88:1d:a3:8d:1c:57:18:29:fa:cc:6a:85:6c:d7:
18:10:db:2f:cd:1c:5d:b9:27:76:20:c4:06:da:8f:
de:23:8c:ab:93:f5:2c:46:07:ca:43:aa:a8:90:e1:
2b:6d:c7:16:85:bd:8e:04:89:78:78:f9:a5:49:7a:
db:2f:e1:0a:e8:8b:b2:0f:fd:3d:2f:01:e8:88:06:
f1:f5:64:bb:69:1e:98:45:20:23:ba:da:58:a4:7e:
4c:0e:37:91:eb:a3:ec:49:8e:a9:6f:0e:2c:dc:46:
fb:b0:ae:6a:b2:e4:39:ff:7e:7f:46:75:24:e3:9e:
8d:9e:42:81:ac:63:20:f3:da:3b:43:93:01:40:9c:
55:3a:c0:12:9b:9e:74:cc:aa:02:30:78:04:9a:eb:
82:a6:f2:a0:b5:7e:64:02:8a:60:bd:7f:27:b4:4a:
62:0e:1c:b1:34:e7:1a:7f:b7:a8:08:ad:6d:14:e2:
a4:2a:b4:18:3d:15:bf:fe:fb:b0:d3:dc:f3:90:69:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:CA:CD:AE:35:CE:F8:6A:C5:E4:79:36:60:A3:7A:EF:72:81:B2
X509v3 Authority Key Identifier:
keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.10.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a1:0a:20:c4:f7:c2:24:1b:c4:d1:85:27:ce:5a:9f:91:05:
ba:b0:ef:86:05:0f:b5:46:a9:a6:44:bf:f1:95:09:1e:cc:77:
1c:61:7e:11:ed:78:62:6b:b8:5e:03:ea:a5:44:f3:6c:35:7d:
5b:13:a8:c5:83:04:23:0c:71:32:31:ac:95:da:a1:f6:f9:83:
b1:92:9e:de:74:e5:bc:1a:b6:3e:02:0e:9a:09:62:7c:b1:5d:
f2:99:53:f2:e9:d9:a7:74:e8:c4:f4:07:ea:82:d6:28:52:7f:
a7:6f:be:30:74:f8:7b:cb:98:c8:71:57:4b:1d:47:92:db:5c:
2b:05:94:0c:92:6d:ba:23:da:e7:c0:10:53:cd:59:fc:52:10:
a0:32:48:73:dd:52:31:a6:14:64:2f:e8:86:b6:1e:6f:41:37:
d1:be:d6:12:7d:1b:9f:a1:86:8f:3c:36:60:bb:41:d8:9d:98:
dd:0d:ad:b6:f6:e7:0b:7d:cc:01:97:af:0f:c6:cf:fc:5f:42:
45:90:ea:2c:7a:4e:ae:10:36:0e:b6:8b:8e:44:91:9d:45:db:
82:b4:6f:70:00:0f:98:b4:4a:64:32:45:6a:62:23:c7:2c:15:
41:c5:94:a3:ee:52:62:6c:9d:89:83:b7:9e:81:8c:b2:fc:ee:
92:cd:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:02 2025 by rpki-client