Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa
File: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (raw, json)
Hash identifier: RxO0GFnTPCDcjYRMtgcgcPJ7K16NUO62Ah0OPKUzzSk=
Subject key identifier: 47:4D:B7:32:F9:69:DF:83:C0:88:08:0A:12:2E:E3:6C:E4:16:6C:81
Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
Certificate serial: 2489AC1237A2C25F52E6DB3F9BEAA3B365C628C6
Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa
Signing time: Wed 01 May 2024 22:01:57 +0000
ROA not before: Wed 01 May 2024 21:56:57 +0000
ROA not after: Wed 30 Apr 2025 22:01:57 +0000
asID: 138064
IP address blocks: 103.70.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:89:ac:12:37:a2:c2:5f:52:e6:db:3f:9b:ea:a3:b3:65:c6:28:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
Validity
Not Before: May 1 21:56:57 2024 GMT
Not After : Apr 30 22:01:57 2025 GMT
Subject: CN=474DB732F969DF83C088080A122EE36CE4166C81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:a0:7c:e8:5e:55:ab:d1:0f:5e:75:5b:85:
a5:f8:54:2f:fd:92:0f:68:1c:09:28:46:a1:27:ef:
ae:3b:21:40:64:41:0a:38:f8:ec:69:95:a8:21:25:
89:b0:19:8f:76:e6:3f:59:78:a5:bf:c3:13:0c:be:
78:7b:99:92:77:ed:59:6f:12:33:ca:e2:3b:92:22:
71:3c:62:19:c1:76:8b:21:6c:e0:c4:ed:0d:df:e3:
3f:c0:b6:30:bd:87:65:5f:fb:45:8d:73:9d:26:51:
85:12:3d:2b:31:9c:7a:01:bd:4d:9f:3c:12:39:88:
dd:83:e2:2f:1c:c5:8e:cb:79:94:9e:d9:25:96:c7:
f1:6e:24:90:f2:8a:33:b0:9a:73:a3:3c:8f:5f:fb:
4a:e1:3d:6a:1a:c4:ab:95:6b:22:1a:f8:b8:f7:17:
8d:9d:f4:4c:f8:e5:72:bc:be:51:dd:a0:80:90:9f:
f5:96:35:f7:85:bf:0c:6d:eb:a3:44:0f:8c:8a:84:
6f:eb:b7:9d:80:f2:b4:87:90:c4:f8:52:4b:d6:aa:
9f:ae:9c:1a:2f:3e:b1:66:41:14:9e:e9:aa:2d:c4:
ce:98:da:98:ff:1f:21:5f:6c:f5:0d:bb:d8:23:c5:
87:ad:2a:ef:ba:2e:54:ef:e7:51:77:10:2a:62:e9:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4D:B7:32:F9:69:DF:83:C0:88:08:0A:12:2E:E3:6C:E4:16:6C:81
X509v3 Authority Key Identifier:
keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.70.92.0/23
Signature Algorithm: sha256WithRSAEncryption
39:66:2d:dd:8b:78:af:f8:98:f8:92:51:d7:67:e2:8f:b5:10:
a8:b5:b9:74:5f:f3:b0:7d:af:0b:f6:7d:2a:8a:87:07:a4:f8:
69:2f:8a:ff:bd:73:8b:6f:97:72:d8:6d:c1:13:da:11:1f:21:
d3:d7:44:37:33:f7:3e:84:7f:f5:df:72:dd:d7:2b:2f:d3:63:
f6:55:8c:dc:83:e0:6a:71:6b:6a:c9:c9:43:c8:24:fc:6d:a4:
fe:c5:9c:3f:de:6b:2e:67:23:a7:8d:b9:2f:b7:e7:74:3b:06:
41:57:26:32:72:e7:42:ee:14:46:e9:32:46:2b:13:65:99:9b:
fe:d9:11:6d:8f:2f:71:b8:aa:61:9f:4a:64:83:49:de:d3:cb:
11:3a:f8:20:d0:cb:61:00:f3:70:87:3a:19:fa:b8:7b:a7:ae:
48:af:91:10:d6:a6:25:43:6c:74:dd:d9:74:11:ad:36:de:72:
0f:1a:9e:62:5e:b0:83:55:b2:37:0d:10:cd:b7:d6:c8:f7:d0:
25:42:fc:bd:bd:12:f7:18:e5:0a:9d:ba:14:a8:98:3d:b4:25:
10:ab:57:75:24:41:f2:40:db:91:58:e8:df:ae:b4:88:94:ac:
7d:dc:73:50:34:ae:2a:c8:c0:72:b1:a6:8a:41:f7:41:5c:5b:
5e:b1:cc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:14 2025 by rpki-client