Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa
File: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (raw, json)
Hash identifier: Gana4QKhwHnw0VC/M1qNMIrQlt1jUUuSXlhGSBWKWAo=
Subject key identifier: 01:80:94:12:32:C3:31:69:9F:75:11:14:C7:07:0E:F8:BD:17:11:3F
Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
Certificate serial: 75B9DA9B32732C134A0963C6447899D42B1611D6
Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa
Signing time: Tue 17 Dec 2024 10:01:38 +0000
ROA not before: Tue 17 Dec 2024 09:56:38 +0000
ROA not after: Tue 16 Dec 2025 10:01:38 +0000
asID: 139424
IP address blocks: 103.144.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b9:da:9b:32:73:2c:13:4a:09:63:c6:44:78:99:d4:2b:16:11:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
Validity
Not Before: Dec 17 09:56:38 2024 GMT
Not After : Dec 16 10:01:38 2025 GMT
Subject: CN=0180941232C331699F751114C7070EF8BD17113F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:44:28:4c:69:d8:9c:c2:21:df:cd:57:2c:
b2:04:40:14:66:57:c6:18:d3:e0:fb:7c:c5:df:62:
2b:4f:af:8a:9b:ac:a7:11:12:a7:b2:a7:6e:8d:96:
33:41:b8:3b:38:05:03:e0:79:04:49:f9:51:14:ea:
be:19:df:07:b3:11:54:4b:51:00:49:a9:cf:c3:8d:
09:5e:6f:27:8c:65:d8:cc:cb:96:cf:07:3b:ea:44:
35:bf:b0:d0:64:69:a3:89:36:df:de:d9:5c:42:a0:
a4:a2:29:75:cf:c5:ba:5c:66:c3:6c:4a:25:53:e5:
08:cb:bb:d6:34:d4:d1:a3:6d:f7:c6:6b:0c:75:ab:
28:d5:b8:61:fd:63:d2:dd:3f:b0:d5:13:ba:6d:d1:
b7:91:7f:39:db:90:5b:21:22:e9:1e:bc:0b:d9:1a:
cd:19:b8:c6:be:0f:25:12:4a:8f:16:c9:7a:9c:a1:
95:2e:a1:2d:07:de:cf:9c:18:7b:33:c1:a5:cb:00:
a8:50:ff:12:06:43:7b:ed:ea:dd:77:05:d0:ff:31:
95:d2:d7:0e:1c:29:c7:af:6c:9f:66:cf:de:d5:a5:
69:2f:6f:af:14:67:0a:2b:3d:61:4e:f6:d7:7d:81:
92:8e:90:0e:22:03:33:bf:b7:73:26:a6:b1:9b:d1:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:80:94:12:32:C3:31:69:9F:75:11:14:C7:07:0E:F8:BD:17:11:3F
X509v3 Authority Key Identifier:
keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.38.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:41:5b:27:a6:09:5b:8c:89:44:52:16:39:b3:b1:eb:0b:e0:
4d:19:62:16:4a:0e:d4:8e:65:ec:e0:86:e9:53:8b:75:40:df:
52:d0:52:13:57:d0:cb:89:20:ee:b8:cb:5a:73:ed:77:75:46:
50:f2:0d:e7:c3:4a:ca:d8:07:09:57:15:4e:62:4e:03:4e:b3:
c0:74:49:71:1a:67:c0:96:73:cd:db:16:a2:66:2c:4c:89:2f:
2d:6e:31:bb:9b:03:92:ee:ec:62:2c:d1:88:32:9e:2d:3e:e4:
2a:48:84:b1:67:4e:6f:a4:59:92:47:b7:41:c6:cc:6c:0f:73:
f9:6f:f0:c1:12:1b:a8:0e:72:70:3b:69:8c:4e:5d:78:90:b3:
53:4b:12:81:4f:7d:ac:fc:2f:ae:0a:22:b0:25:26:1f:8a:11:
a1:f4:0e:95:64:f2:f8:1d:84:81:7c:38:4a:78:c7:f8:39:0b:
2c:fa:fc:1a:10:f6:5e:31:00:43:0f:6c:36:6c:96:b5:97:45:
6d:2c:73:38:63:d4:8f:41:5d:b0:c0:ea:94:47:50:cc:4e:9c:
3f:ea:af:2a:8e:d5:ad:1d:c7:53:37:d2:78:bd:cd:0c:5b:d5:
bb:7a:fb:6b:97:d8:c5:08:b6:dd:5a:3b:37:47:ba:28:f5:29:
4d:fe:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:53:21 2025 by rpki-client