Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa
File: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (raw, json)
Hash identifier: ZAYr5wm6M1zzmW0l6EsgawSZJfTDiZWgdh/sXE3rAP8=
Subject key identifier: 7F:AE:CB:4F:E0:00:0D:EE:1A:38:2C:0A:09:DD:94:17:0C:19:5A:9B
Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Certificate serial: 3AA55388DBDDBC23519D4C5535758FF024E05B3F
Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa
Signing time: Thu 13 Jun 2024 17:00:00 +0000
ROA not before: Thu 13 Jun 2024 16:55:00 +0000
ROA not after: Thu 12 Jun 2025 17:00:00 +0000
asID: 150284
IP address blocks: 103.43.164.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a5:53:88:db:dd:bc:23:51:9d:4c:55:35:75:8f:f0:24:e0:5b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Validity
Not Before: Jun 13 16:55:00 2024 GMT
Not After : Jun 12 17:00:00 2025 GMT
Subject: CN=7FAECB4FE0000DEE1A382C0A09DD94170C195A9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:3f:c5:f0:b7:60:b3:38:da:5e:9a:49:8f:
38:72:00:ca:e8:45:df:fc:c1:db:af:41:30:13:d8:
e2:14:41:e7:06:df:3d:51:c0:88:66:94:93:9f:d4:
ad:d2:62:0c:1e:76:ae:4b:65:2e:de:a9:62:52:e8:
c7:ed:4a:73:13:81:27:cf:b4:87:d6:51:d5:3f:5b:
e5:20:e1:08:d1:ad:fa:62:7f:0e:9d:c6:b0:bb:41:
15:ff:55:a2:9e:14:0f:04:a7:95:35:68:3c:5b:68:
4e:b0:11:9f:d2:69:1e:f1:ec:d4:7a:0a:ce:ba:56:
7b:6a:0a:b3:4e:97:71:70:c5:6c:8f:53:c7:3e:c0:
42:ff:d8:17:43:12:15:51:49:ef:14:f8:bf:7f:98:
28:2b:bd:31:84:c5:2e:7f:e3:d9:e3:7e:af:1c:cd:
03:c4:56:ec:e5:4b:45:67:96:e4:de:dd:c6:31:5f:
64:90:5f:f1:8d:d7:9b:18:27:01:b9:9a:b9:2d:a5:
bb:a0:a4:58:63:2f:48:60:a9:76:8b:68:b2:ca:50:
f7:2c:94:72:2f:21:24:c8:a6:e9:10:87:08:85:39:
ba:15:32:df:c7:13:45:be:95:5d:fd:93:ae:3d:3f:
77:50:44:3f:9c:f8:81:50:5a:36:70:c6:c5:1d:e9:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:CB:4F:E0:00:0D:EE:1A:38:2C:0A:09:DD:94:17:0C:19:5A:9B
X509v3 Authority Key Identifier:
keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.43.164.0/23
Signature Algorithm: sha256WithRSAEncryption
98:da:75:b0:1b:88:0c:19:c2:a6:c7:02:ca:36:68:c0:8f:9b:
5b:93:54:a0:30:41:03:04:de:91:13:b6:be:e6:a9:1f:81:70:
c2:7a:d6:80:3b:dc:84:78:27:ed:4a:1c:1d:d0:29:1f:d7:61:
91:9c:f8:33:4e:c5:86:e5:26:bd:83:d1:5a:5b:cb:b8:45:45:
c0:0a:59:18:fc:23:51:3d:73:29:57:4b:33:d2:54:e7:62:6e:
95:a8:79:21:c3:32:78:c9:dc:d0:89:cc:39:ad:8c:95:88:15:
ac:54:f9:ec:f5:57:20:9a:1a:a6:ae:4d:a7:3c:8b:db:9a:7f:
10:c6:52:d2:f4:05:e5:1d:97:21:24:da:3c:ad:1e:3b:54:1c:
bf:ad:8f:dc:2e:2b:11:8c:28:8c:57:11:68:56:d1:49:4b:ed:
d3:91:4a:04:7a:0a:0a:a1:7e:02:17:6a:37:0d:b0:84:13:64:
fa:7c:68:66:7c:67:a1:85:d8:6e:dc:f8:43:4c:a7:f3:60:a0:
db:05:82:be:98:e7:5b:2e:83:25:83:f3:c6:61:6e:39:71:74:
de:d1:48:01:a3:f2:ad:59:00:c5:51:f3:6c:fb:58:96:a3:b4:
1e:07:2e:8f:b5:ea:6e:1a:10:ea:7d:33:3e:30:f6:9a:9c:93:
98:f3:67:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:59:07 2025 by rpki-client