Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e32382e3136332e302f32342d3234203d3e203536323539.roa
File: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (raw, json)
Hash identifier: wNXvnBOlqkuZ+mDM8d8H+wRf148WwJ/aSIjk47cajS4=
Subject key identifier: 8B:AF:DD:BE:78:06:47:E5:48:5A:84:AC:66:0A:F1:3C:25:0A:F2:F5
Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
Certificate serial: 6710FA48C1FB22E5DB87645A22AF535E59DBDAF1
Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e32382e3136332e302f32342d3234203d3e203536323539.roa
Signing time: Mon 19 Aug 2024 15:00:01 +0000
ROA not before: Mon 19 Aug 2024 14:55:01 +0000
ROA not after: Mon 18 Aug 2025 15:00:01 +0000
asID: 56259
IP address blocks: 103.28.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:10:fa:48:c1:fb:22:e5:db:87:64:5a:22:af:53:5e:59:db:da:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
Validity
Not Before: Aug 19 14:55:01 2024 GMT
Not After : Aug 18 15:00:01 2025 GMT
Subject: CN=8BAFDDBE780647E5485A84AC660AF13C250AF2F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:e0:a0:6b:c3:ea:2e:c0:56:47:df:05:98:
70:45:77:fb:84:43:da:33:e9:bd:1c:9b:e5:ae:71:
b4:f6:22:91:db:0f:4c:9a:2a:05:fe:bd:22:6d:1b:
a9:61:a2:8f:ed:a9:2c:15:3b:30:f5:a4:4d:06:21:
84:77:f7:97:6c:14:b6:2a:c2:9d:38:60:ce:57:de:
64:cc:e9:c2:e2:05:ea:9b:81:41:fc:15:66:ca:e8:
88:4b:ac:c8:06:8e:bb:f9:f2:e7:c0:3f:d6:11:55:
9b:fe:5b:68:f8:01:f9:70:71:58:8e:0a:94:ee:3d:
84:4c:e6:c0:bb:f9:f2:fb:87:ee:9d:84:ed:aa:16:
27:d9:ef:bd:5a:e8:b0:68:ff:ec:e4:e9:72:4e:a7:
0e:6d:c9:70:ae:6a:d1:50:a0:da:8a:65:fa:58:1f:
35:b3:5d:a9:7f:ba:71:e8:d8:b8:38:e8:23:44:54:
da:bd:33:7a:9e:1c:df:99:d6:d1:78:cd:7f:c4:a1:
c5:82:49:f0:d4:05:d7:cf:06:0d:7b:99:57:2c:41:
24:71:85:a1:db:11:f9:33:f2:7b:b1:92:a0:e9:c1:
96:a7:15:a4:3e:09:15:8e:89:c6:88:f0:25:f2:71:
f3:b5:53:1d:fc:6c:8b:e0:e9:73:1e:1a:e9:34:56:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AF:DD:BE:78:06:47:E5:48:5A:84:AC:66:0A:F1:3C:25:0A:F2:F5
X509v3 Authority Key Identifier:
keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e32382e3136332e302f32342d3234203d3e203536323539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:0e:ea:d7:7b:1e:9a:fd:bd:e6:20:61:37:59:5b:dc:a3:5f:
9c:7f:a6:9b:11:b4:0c:c9:b5:f9:95:5b:6d:48:48:67:ea:e8:
86:75:03:51:e3:bc:e2:b6:b9:93:f6:0d:ec:68:98:54:e5:c7:
5c:5f:db:09:1d:22:78:32:bd:a8:20:aa:9b:d0:7a:6a:15:58:
be:e8:f3:3a:c4:5a:fc:80:37:ae:ff:72:2f:93:0b:ee:07:b8:
03:74:56:be:92:a3:44:4d:64:c7:76:86:98:df:e1:a6:26:fc:
45:04:a1:36:fb:22:ea:20:06:cb:c9:8c:62:ef:79:97:56:bd:
17:38:2a:ae:e5:2a:79:ca:89:b4:75:66:39:af:44:ea:0d:e2:
eb:4b:58:1b:81:bb:74:81:84:d1:49:f9:1c:e2:c2:54:33:a7:
0a:6b:72:af:97:7f:22:73:0d:48:b4:88:c7:0a:d7:59:ef:e8:
23:60:7e:f6:4a:a1:bd:58:13:bb:00:5a:c3:b7:16:90:68:8a:
8b:09:ff:e6:16:21:80:d7:d8:19:67:9d:4f:a8:34:9e:29:55:
25:f4:f4:f4:8b:17:09:29:0b:80:25:4b:91:88:11:2a:8a:50:
ab:f1:8b:fb:72:33:3b:8e:9b:cb:2d:8b:f4:61:6f:5e:f7:82:
91:6a:a0:54
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZxD6SMH7IuXbh2RaIq9TXlnb2vEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4
NUMzNUU0RjAeFw0yNDA4MTkxNDU1MDFaFw0yNTA4MTgxNTAwMDFaMDMxMTAvBgNV
BAMTKDhCQUZEREJFNzgwNjQ3RTU0ODVBODRBQzY2MEFGMTNDMjUwQUYyRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELeCga8PqLsBWR98FmHBFd/uE
Q9oz6b0cm+WucbT2IpHbD0yaKgX+vSJtG6lhoo/tqSwVOzD1pE0GIYR395dsFLYq
wp04YM5X3mTM6cLiBeqbgUH8FWbK6IhLrMgGjrv58ufAP9YRVZv+W2j4AflwcViO
CpTuPYRM5sC7+fL7h+6dhO2qFifZ771a6LBo/+zk6XJOpw5tyXCuatFQoNqKZfpY
HzWzXal/unHo2Lg46CNEVNq9M3qeHN+Z1tF4zX/EocWCSfDUBdfPBg17mVcsQSRx
haHbEfkz8nuxkqDpwZanFaQ+CRWOicaI8CXycfO1Ux38bIvg6XMeGuk0VvUnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUi6/dvngGR+VIWoSsZgrxPCUK8vUwHwYDVR0j
BBgwFoAUPXifr19+vmk4xMcj3NLu14XDXk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZDk3MDAzMi0wOGVhLTQ4OTAtYmRiYS02MzA5YTQ5NzkxN2QvMC8zRDc4OUZBRjVG
N0VCRTY5MzhDNEM3MjNEQ0QyRUVENzg1QzM1RTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4NUMz
NUU0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkOTcwMDMyLTA4ZWEtNDg5MC1i
ZGJhLTYzMDlhNDk3OTE3ZC8wLzMxMzAzMzJlMzIzODJlMzEzNjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGccozANBgkqhkiG
9w0BAQsFAAOCAQEAsA7q13semv295iBhN1lb3KNfnH+mmxG0DMm1+ZVbbUhIZ+ro
hnUDUeO84ra5k/YN7GiYVOXHXF/bCR0ieDK9qCCqm9B6ahVYvujzOsRa/IA3rv9y
L5ML7ge4A3RWvpKjRE1kx3aGmN/hpib8RQShNvsi6iAGy8mMYu95l1a9FzgqruUq
ecqJtHVmOa9E6g3i60tYG4G7dIGE0Un5HOLCVDOnCmtyr5d/InMNSLSIxwrXWe/o
I2B+9kqhvVgTuwBaw7cWkGiKiwn/5hYhgNfYGWedT6g0nilVJfT09IsXCSkLgCVL
kYgRKopQq/GL+3IzO46byy2L9GFvXveCkWqgVA==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:59 2025 by rpki-client