Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa
File: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier: ZoCcekYbdPtZF1d0wHmqp26jbbPlMBnCSh/Sj6Wzh/Y=
Subject key identifier: 3E:2C:49:55:13:A0:71:5F:C2:DD:CD:33:BF:32:CB:D8:4E:1F:9D:47
Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130
Certificate serial: 32B0DFC0D7789AB71E662B5CC7BDF600D300B85D
Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa
Signing time: Sat 14 Dec 2024 10:00:02 +0000
ROA not before: Sat 14 Dec 2024 09:55:02 +0000
ROA not after: Sat 13 Dec 2025 10:00:02 +0000
asID: 132634
IP address blocks: 103.18.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b0:df:c0:d7:78:9a:b7:1e:66:2b:5c:c7:bd:f6:00:d3:00:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130
Validity
Not Before: Dec 14 09:55:02 2024 GMT
Not After : Dec 13 10:00:02 2025 GMT
Subject: CN=3E2C495513A0715FC2DDCD33BF32CBD84E1F9D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:d2:3e:5c:49:27:ee:dd:1f:92:53:4e:d8:
03:44:1e:7f:ca:a6:17:f7:b2:f2:bc:1d:6e:29:db:
34:66:d6:d5:e6:49:6c:95:84:10:6a:db:67:bc:33:
cf:58:07:bc:58:93:77:92:7f:8a:31:f2:bf:89:94:
13:f2:6a:5f:a1:70:31:f0:81:f6:12:32:21:6b:b0:
7c:97:ae:41:ea:52:3d:c6:35:31:a1:35:d4:91:5e:
c0:79:cc:38:b6:ff:3c:66:29:5d:60:6a:e7:e5:26:
da:64:d5:ff:89:7b:b4:b8:74:f1:12:d1:b2:ae:f6:
76:83:fe:b6:c5:7f:11:e0:3c:42:aa:ca:c5:67:38:
0a:e5:bf:3b:87:14:fd:ad:3b:09:8a:d2:b8:c0:fe:
75:44:95:d0:16:f8:5f:10:7a:69:7c:f2:59:d0:4d:
e1:9c:24:db:2d:67:e6:2a:d6:0b:13:1e:04:36:72:
fb:f4:53:78:ad:81:dd:19:51:a4:d1:e5:91:29:3c:
cf:41:36:be:70:6d:cd:8e:83:47:ad:09:f2:36:65:
b4:af:73:4b:fc:4f:6a:f2:0f:06:2f:d8:24:bc:d5:
1a:68:92:21:77:37:99:a6:b3:a1:8b:be:08:6a:13:
a2:b0:dc:26:c5:fb:df:12:63:9b:a9:f6:85:a0:a4:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:49:55:13:A0:71:5F:C2:DD:CD:33:BF:32:CB:D8:4E:1F:9D:47
X509v3 Authority Key Identifier:
keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.117.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0a:8b:f8:80:89:39:8b:fc:10:27:f9:4d:33:f9:0c:98:de:
6c:74:00:9f:bb:e0:e0:0b:58:20:62:3b:97:cc:dc:8c:56:7c:
a2:f1:0c:66:9f:46:f3:a2:d9:f2:ce:35:bd:e7:c4:0b:38:b0:
a1:0d:38:89:14:66:cc:ee:17:07:5f:06:ce:42:12:dc:25:b9:
4f:68:84:46:50:fb:ac:1c:71:8d:83:7b:3b:49:41:5f:8c:06:
da:c1:eb:7e:36:67:ba:be:59:18:ea:3f:91:0e:d0:03:da:15:
ca:bb:11:ab:5f:6d:f3:bf:77:a5:b6:fc:de:e1:c8:f1:77:3d:
8d:c7:22:74:07:10:93:c6:0d:cc:97:dd:94:83:ad:9c:67:37:
7f:5e:19:e1:3c:a2:5b:6c:54:96:f2:3e:ad:df:7b:fa:21:3d:
f6:ef:a6:d7:86:bc:55:91:32:f4:d2:57:ad:36:69:8a:fa:73:
27:95:a2:f3:28:da:83:d5:cd:f9:17:14:ac:e5:1c:97:6f:04:
d0:4f:be:90:17:3d:f1:c2:b5:76:5e:fa:ff:1a:36:32:e6:3b:
09:21:d3:b6:2c:aa:22:3f:4f:c3:52:3a:24:c7:16:94:3d:d7:
0e:34:bc:76:68:f1:a9:e9:9c:5b:74:bf:3a:30:b1:fa:79:5f:
35:9e:5c:fd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMrDfwNd4mrceZitcx732ANMAuF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0
MUY1NTEzMDAeFw0yNDEyMTQwOTU1MDJaFw0yNTEyMTMxMDAwMDJaMDMxMTAvBgNV
BAMTKDNFMkM0OTU1MTNBMDcxNUZDMkREQ0QzM0JGMzJDQkQ4NEUxRjlENDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClTNI+XEkn7t0fklNO2ANEHn/K
phf3svK8HW4p2zRm1tXmSWyVhBBq22e8M89YB7xYk3eSf4ox8r+JlBPyal+hcDHw
gfYSMiFrsHyXrkHqUj3GNTGhNdSRXsB5zDi2/zxmKV1gauflJtpk1f+Je7S4dPES
0bKu9naD/rbFfxHgPEKqysVnOArlvzuHFP2tOwmK0rjA/nVEldAW+F8Qeml88lnQ
TeGcJNstZ+Yq1gsTHgQ2cvv0U3itgd0ZUaTR5ZEpPM9BNr5wbc2Og0etCfI2ZbSv
c0v8T2ryDwYv2CS81RpokiF3N5mms6GLvghqE6Kw3CbF+98SY5up9oWgpMvBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUPixJVROgcV/C3c0zvzLL2E4fnUcwHwYDVR0j
BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG
RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1
NTEzMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwZjdiZTA2LTk2NzItNDY0MS05
N2JkLTliZmRmOTU1ZGUxNy8wLzMxMzAzMzJlMzEzODJlMzEzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxJ1MA0GCSqG
SIb3DQEBCwUAA4IBAQBjCov4gIk5i/wQJ/lNM/kMmN5sdACfu+DgC1ggYjuXzNyM
Vnyi8Qxmn0bzotnyzjW958QLOLChDTiJFGbM7hcHXwbOQhLcJblPaIRGUPusHHGN
g3s7SUFfjAbawet+Nme6vlkY6j+RDtAD2hXKuxGrX23zv3eltvze4cjxdz2NxyJ0
BxCTxg3Ml92Ug62cZzd/XhnhPKJbbFSW8j6t33v6IT3276bXhrxVkTL00letNmmK
+nMnlaLzKNqD1c35FxSs5RyXbwTQT76QFz3xwrV2Xvr/GjYy5jsJIdO2LKoiP0/D
UjokxxaUPdcONLx2aPGp6ZxbdL86MLH6eV81nlz9
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:23 2025 by rpki-client