Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa
File: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (raw, json)
Hash identifier: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=
Subject key identifier: E2:CD:42:9E:55:A0:E7:BE:20:4D:5A:DC:78:24:64:9F:6D:74:2F:9C
Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
Certificate serial: 18FC752DC8DB7116B50C3726A740D300BCAF8D08
Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa
Signing time: Fri 07 Feb 2025 08:33:36 +0000
ROA not before: Fri 07 Feb 2025 08:28:36 +0000
ROA not after: Fri 06 Feb 2026 08:33:36 +0000
asID: 150196
IP address blocks: 103.229.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:fc:75:2d:c8:db:71:16:b5:0c:37:26:a7:40:d3:00:bc:af:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
Validity
Not Before: Feb 7 08:28:36 2025 GMT
Not After : Feb 6 08:33:36 2026 GMT
Subject: CN=E2CD429E55A0E7BE204D5ADC7824649F6D742F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:ca:11:b1:5e:5e:2d:82:f5:c5:0c:87:9a:
6c:aa:dd:b6:22:08:e2:7d:69:a8:a3:85:1f:c2:e9:
59:e7:1c:20:46:de:cc:d7:80:8e:6e:72:d9:5d:75:
e8:bf:3a:cb:fe:af:0b:8d:b4:7c:d3:c2:75:6f:be:
ac:b2:83:b2:55:b8:3a:c6:39:61:ff:d0:80:e5:83:
90:f3:93:1c:c5:e9:6c:ef:71:34:e1:2b:09:60:e8:
b4:0a:fa:65:9b:e5:47:93:c5:1e:ed:48:74:cd:62:
78:f0:1c:3b:7b:22:d9:7b:f4:e0:a4:58:23:af:4d:
ec:57:74:6e:d0:29:a9:56:62:8b:d7:4e:cf:16:51:
ed:11:ac:fd:f2:57:2a:bb:9f:42:4f:9a:36:4d:4c:
ed:ab:c9:cf:2f:e9:8a:cd:31:e5:38:f4:29:42:bd:
af:65:33:e8:3d:af:36:5d:c8:f7:12:d4:d6:da:9c:
e6:60:9d:17:90:18:ea:23:b7:79:60:08:6d:a1:7e:
ab:91:2a:15:d9:42:32:33:52:e9:59:b8:80:dc:d6:
6f:cc:27:c9:ca:90:ca:dc:c6:f4:6e:82:50:de:71:
74:89:55:99:c2:8d:20:56:14:b5:8c:6c:e8:a1:44:
99:84:3c:71:b2:66:c2:16:4f:2c:46:5c:fd:94:2e:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:42:9E:55:A0:E7:BE:20:4D:5A:DC:78:24:64:9F:6D:74:2F:9C
X509v3 Authority Key Identifier:
keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.14.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:d3:84:78:07:d1:34:be:7e:25:ef:e7:3f:d4:bc:91:ff:a2:
d5:13:95:4f:da:ee:8c:90:c4:2c:83:2e:55:7e:fd:9c:3e:0b:
6d:fa:cb:e7:b9:33:55:cf:62:e3:df:af:58:1d:7b:c7:6d:1c:
99:d1:71:1f:31:99:ca:6a:03:3c:4c:14:e9:30:3f:68:56:94:
77:1f:5f:73:b9:07:28:a0:8e:9d:61:d0:09:5f:75:f1:a2:20:
d9:29:f2:73:ee:68:12:f4:13:e4:81:26:64:9d:ce:0e:86:2c:
31:a1:79:af:46:0f:3a:c2:f8:f2:88:9c:bc:ad:c7:24:2d:1d:
41:01:dc:b1:6d:07:bb:a5:a4:a4:fa:c3:23:ee:23:44:a9:ad:
07:cf:3a:7b:63:35:de:4a:eb:2f:4a:f7:db:94:8b:a7:8c:dc:
98:46:87:17:dc:0c:13:87:41:ec:89:75:83:88:14:15:f1:8b:
dc:31:ae:a5:89:3a:b1:ed:20:12:61:c0:b2:68:92:b9:57:58:
63:a6:34:cd:8a:3e:8f:de:d4:be:cd:3b:d7:d0:cc:ca:7f:37:
b6:c8:4b:87:60:dc:e3:72:d3:be:c4:84:85:35:76:5d:2d:6e:
be:35:3b:d6:d9:24:de:b9:04:c4:b2:d1:45:0e:cd:d6:94:30:
b1:e8:68:52
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGPx1LcjbcRa1DDcmp0DTALyvjQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3
REZDNkE4RTAeFw0yNTAyMDcwODI4MzZaFw0yNjAyMDYwODMzMzZaMDMxMTAvBgNV
BAMTKEUyQ0Q0MjlFNTVBMEU3QkUyMDRENUFEQzc4MjQ2NDlGNkQ3NDJGOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VcoRsV5eLYL1xQyHmmyq3bYi
COJ9aaijhR/C6VnnHCBG3szXgI5uctlddei/Osv+rwuNtHzTwnVvvqyyg7JVuDrG
OWH/0IDlg5DzkxzF6WzvcTThKwlg6LQK+mWb5UeTxR7tSHTNYnjwHDt7Itl79OCk
WCOvTexXdG7QKalWYovXTs8WUe0RrP3yVyq7n0JPmjZNTO2ryc8v6YrNMeU49ClC
va9lM+g9rzZdyPcS1NbanOZgnReQGOojt3lgCG2hfquRKhXZQjIzUulZuIDc1m/M
J8nKkMrcxvRuglDecXSJVZnCjSBWFLWMbOihRJmEPHGyZsIWTyxGXP2ULngxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU4s1CnlWg574gTVrceCRkn210L5wwHwYDVR0j
BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy
QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD
NkE4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiNzViZmQwLWE4NmMtNGJlYi05
Zjk5LWFhYzMzZmI1ZTQ5Zi8wLzMxMzAzMzJlMzIzMjM5MmUzMTM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+UOMA0GCSqG
SIb3DQEBCwUAA4IBAQCO04R4B9E0vn4l7+c/1LyR/6LVE5VP2u6MkMQsgy5Vfv2c
Pgtt+svnuTNVz2Lj369YHXvHbRyZ0XEfMZnKagM8TBTpMD9oVpR3H19zuQcooI6d
YdAJX3XxoiDZKfJz7mgS9BPkgSZknc4OhiwxoXmvRg86wvjyiJy8rcckLR1BAdyx
bQe7paSk+sMj7iNEqa0Hzzp7YzXeSusvSvfblIunjNyYRocX3AwTh0HsiXWDiBQV
8YvcMa6liTqx7SASYcCyaJK5V1hjpjTNij6P3tS+zTvX0MzKfze2yEuHYNzjctO+
xISFNXZdLW6+NTvW2STeuQTEstFFDs3WlDCx6GhS
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:40 2025 by rpki-client