Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e36352e39362e302f32332d3234203d3e203536323539.roa
File: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (raw, json)
Hash identifier: CZ4K7GFD9Go5aD48WSkhSXI8wxpmYnTQCrXJMjgAzo4=
Subject key identifier: EE:FF:B0:09:A8:7D:C8:91:E7:ED:8E:7A:96:56:8F:2D:3F:D9:EE:EF
Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
Certificate serial: 40848B27275BC9902D9C6DA38425A64706BED53A
Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e36352e39362e302f32332d3234203d3e203536323539.roa
Signing time: Mon 19 Aug 2024 15:00:01 +0000
ROA not before: Mon 19 Aug 2024 14:55:01 +0000
ROA not after: Mon 18 Aug 2025 15:00:01 +0000
asID: 56259
IP address blocks: 103.65.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:84:8b:27:27:5b:c9:90:2d:9c:6d:a3:84:25:a6:47:06:be:d5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
Validity
Not Before: Aug 19 14:55:01 2024 GMT
Not After : Aug 18 15:00:01 2025 GMT
Subject: CN=EEFFB009A87DC891E7ED8E7A96568F2D3FD9EEEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:6f:99:95:49:40:35:63:c3:2a:2d:9b:5e:
b5:16:a5:b5:99:48:5c:8c:2d:01:55:64:b0:a2:04:
e7:51:1d:c0:51:f8:f5:b1:b1:d2:92:bb:c7:4a:27:
34:c6:e9:ca:87:25:d5:4f:24:fd:54:06:75:bc:34:
8c:72:87:08:d4:97:b4:4c:ea:2b:4d:92:28:8d:52:
b6:bd:f1:7c:40:4d:c4:28:49:95:e2:a1:49:bc:d2:
4b:81:0d:e0:d0:f7:78:c0:f1:01:c6:6b:ec:fa:bf:
3c:75:3b:4a:d4:46:a4:84:84:0f:b1:64:ca:49:77:
50:14:f9:75:19:8f:f6:a2:bf:a2:06:2e:ae:ff:a5:
24:75:81:d7:2a:cd:55:c8:b8:bf:6f:d0:bf:e7:ee:
a3:ba:fa:e3:17:8f:3a:9e:15:20:e7:a3:b5:68:94:
0f:0a:b5:8f:a7:b2:a3:9a:ed:a9:4a:92:49:8a:47:
23:a9:4c:25:a3:5f:ac:2b:92:e2:8d:29:29:28:25:
70:49:ff:36:2a:00:db:f5:52:50:69:32:8b:b1:8a:
6d:30:31:5b:ba:01:b6:06:25:4b:7c:c8:23:ab:de:
a3:f4:e0:73:4d:01:5d:6e:cc:aa:74:32:be:f9:99:
38:1c:61:91:ca:ce:56:c4:0f:58:e9:b8:82:c3:f3:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FF:B0:09:A8:7D:C8:91:E7:ED:8E:7A:96:56:8F:2D:3F:D9:EE:EF
X509v3 Authority Key Identifier:
keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e36352e39362e302f32332d3234203d3e203536323539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.65.96.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:b6:82:7e:38:55:1c:3c:8b:98:03:b7:2a:66:10:91:34:0e:
92:6a:a9:91:61:2e:49:ec:8c:72:7e:5f:f1:45:cf:35:da:37:
1c:5e:4c:03:dc:57:eb:86:ea:5c:b0:59:d9:c7:6f:bd:0c:16:
9e:c7:ea:4a:9d:e3:28:a0:bf:29:77:60:d7:47:d8:c9:53:5a:
6c:4f:fc:48:ec:de:1b:27:d0:43:8a:1e:c5:c9:a5:06:02:98:
27:34:89:9f:e3:12:6f:82:83:77:26:4d:f3:9f:c2:ec:fe:8f:
36:af:b6:b8:b7:18:13:62:65:91:5c:bd:9f:45:d2:44:94:f8:
42:19:27:8f:05:bc:0b:42:42:74:f5:b4:c4:ee:df:9a:8d:66:
3b:3d:e8:18:68:24:fa:75:77:f3:57:4a:79:cb:ee:e7:ee:ea:
81:7e:d6:9f:01:52:fd:96:2b:ba:96:e6:bc:b0:65:77:b1:87:
aa:e7:d0:3c:f9:90:d9:1a:47:6d:a5:7a:23:43:46:a9:9f:8a:
f5:b0:95:a5:8a:b9:45:27:5b:a9:36:58:d9:a7:eb:a7:75:c3:
35:4d:db:55:a8:0f:b6:d4:82:d0:ee:be:8a:72:24:dd:aa:56:
dd:32:51:69:1f:c8:88:20:80:13:85:22:03:a4:b1:b9:30:f4:
4e:1d:b5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:24 2025 by rpki-client