Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa
File: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (raw, json)
Hash identifier: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=
Subject key identifier: FA:8F:A6:80:86:22:EC:33:6B:7B:A7:52:CB:8B:06:0F:2C:85:33:DB
Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50
Certificate serial: 7D8070EB780FBB78F80D94EB02EB62A397F78B6F
Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa
Signing time: Sun 06 Apr 2025 21:00:01 +0000
ROA not before: Sun 06 Apr 2025 20:55:01 +0000
ROA not after: Sun 05 Apr 2026 21:00:01 +0000
asID: 142342
IP address blocks: 103.169.128.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:80:70:eb:78:0f:bb:78:f8:0d:94:eb:02:eb:62:a3:97:f7:8b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50
Validity
Not Before: Apr 6 20:55:01 2025 GMT
Not After : Apr 5 21:00:01 2026 GMT
Subject: CN=FA8FA6808622EC336B7BA752CB8B060F2C8533DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:c4:00:9b:c8:53:89:6f:f1:52:d2:dc:bc:
2b:32:50:f1:ec:67:72:98:65:46:52:f0:86:cf:98:
0b:67:47:2e:b4:80:1c:78:80:61:bf:b2:96:58:b4:
16:c9:57:7b:41:03:16:f4:75:c5:05:72:20:c4:43:
fc:47:5d:2c:47:a8:dd:68:5c:36:a0:d9:1a:65:41:
c6:f2:ec:25:c1:72:17:d3:94:df:01:36:59:69:95:
92:cf:7a:d3:a7:2c:a0:69:a4:2e:65:24:6d:31:6d:
76:c4:b0:84:ec:b7:f1:29:93:b6:46:1e:08:c5:69:
59:b7:12:c2:0f:60:78:08:59:d0:eb:57:82:54:27:
3d:f2:86:bd:f7:95:ea:02:ac:2e:24:ac:9d:81:bb:
1f:a6:cb:67:b4:c2:10:8b:53:20:bf:ca:d1:8c:92:
75:0e:c1:bb:49:4a:a6:03:32:0f:5b:24:42:02:cb:
dc:93:1b:d6:1b:c5:1f:7e:48:65:d9:16:d9:de:2e:
a7:d7:fc:7a:a4:4e:35:c2:c0:db:05:1c:2c:aa:9b:
9f:ee:b4:21:bd:4f:6f:6d:6a:d1:cc:c3:78:64:17:
52:96:93:67:a7:f3:cc:33:2d:85:8e:41:1d:ef:5b:
fc:1c:ae:93:4b:e6:ab:aa:df:7e:ba:dc:e7:36:e3:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:A6:80:86:22:EC:33:6B:7B:A7:52:CB:8B:06:0F:2C:85:33:DB
X509v3 Authority Key Identifier:
keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.128.0/23
Signature Algorithm: sha256WithRSAEncryption
42:86:c8:d7:5f:c1:2e:1e:74:85:a4:60:7e:07:6f:0c:72:04:
1a:a5:57:51:ca:5f:4e:fa:b6:32:7a:4a:d8:5f:53:d6:83:69:
c6:1c:47:df:9f:3f:86:cc:6f:78:54:63:94:af:ce:1a:cf:2d:
b7:2a:2a:7b:ab:53:74:3c:22:69:07:b3:e0:79:58:38:23:d0:
29:41:55:0f:de:20:84:81:ed:08:b6:6e:f0:30:6b:64:14:e3:
fe:a5:1c:6b:75:34:eb:d4:42:60:75:2e:9c:75:db:99:2d:c2:
2e:ab:2e:37:b4:a3:0c:51:fe:50:8a:64:93:78:a6:32:71:2a:
de:b1:2d:74:1d:15:53:cd:e4:77:f4:de:05:d4:f7:b4:fb:97:
53:8a:5a:ac:39:16:c0:bc:a3:c2:81:09:e8:d6:45:76:6b:66:
38:ca:ae:35:79:46:fa:3e:c2:34:59:ef:7c:ed:41:b5:ff:28:
ad:44:c5:26:ca:60:4a:28:1d:e5:25:11:d7:b8:1a:ba:e2:27:
2c:c6:3f:a0:61:dd:16:91:0a:71:af:10:42:3f:88:eb:ae:0c:
48:7a:ec:a9:40:04:84:1d:62:9c:89:0e:1a:1a:1b:45:d0:45:
eb:16:6f:3f:78:b5:11:8e:ee:5a:bd:cb:9a:0e:3f:38:9f:29:
b9:20:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:48:30 2025 by rpki-client