Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa
File: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier: bgwOzvgwDnc9ezV4Ont6t+9ZL+lOmgTEDPxux2zorVE=
Subject key identifier: 5F:E5:0A:7D:68:94:59:3E:DB:82:6E:12:34:78:BF:CC:DD:2F:C3:79
Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC
Certificate serial: 73F2D1C37A15358C8C167679FB7ADD9B52FA7ABE
Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa
Signing time: Wed 18 Sep 2024 09:00:37 +0000
ROA not before: Wed 18 Sep 2024 08:55:37 +0000
ROA not after: Wed 17 Sep 2025 09:00:37 +0000
asID: 131111
IP address blocks: 103.177.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f2:d1:c3:7a:15:35:8c:8c:16:76:79:fb:7a:dd:9b:52:fa:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC
Validity
Not Before: Sep 18 08:55:37 2024 GMT
Not After : Sep 17 09:00:37 2025 GMT
Subject: CN=5FE50A7D6894593EDB826E123478BFCCDD2FC379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:35:26:f6:69:4a:77:c8:4b:eb:c2:78:94:
84:eb:89:03:de:76:2c:51:2f:c6:e7:b7:e0:da:8c:
0a:0c:42:69:7f:97:c9:cb:49:39:8b:0d:1c:45:68:
22:b1:69:6a:b3:46:aa:7c:c8:b3:cc:0a:af:b8:2a:
fe:79:35:d2:b6:f4:c1:a0:ee:a9:01:d1:80:1a:d7:
98:ee:e5:06:02:2e:de:a7:c4:dd:e0:7f:55:59:60:
46:e3:a5:75:25:4c:71:22:1c:30:75:73:d3:1c:fa:
cd:e8:d8:f7:2c:d7:e3:86:57:eb:a5:6c:bd:15:e0:
a1:95:97:38:95:23:5a:6d:c7:c0:9a:78:01:c1:84:
61:1e:d8:fc:ca:de:01:00:ed:86:1e:19:8b:73:53:
55:91:3d:46:57:48:bf:13:12:2d:8e:24:37:05:df:
9c:56:94:37:01:62:07:62:fa:82:f4:c0:65:ba:98:
ab:c2:76:00:a1:4a:88:65:c3:71:ce:eb:ca:fc:d6:
c1:0d:92:fa:a4:5d:bf:55:d0:ee:48:98:e8:d3:5d:
f7:6b:c6:6a:58:3b:91:37:ac:41:27:10:6f:01:7a:
af:c2:0c:20:f4:57:fb:b7:17:f8:3a:5d:b4:1d:8d:
b2:c9:bd:9b:1b:cf:30:29:02:c6:56:0b:2a:b4:f1:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:0A:7D:68:94:59:3E:DB:82:6E:12:34:78:BF:CC:DD:2F:C3:79
X509v3 Authority Key Identifier:
keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.90.0/23
Signature Algorithm: sha256WithRSAEncryption
25:15:1d:c3:63:0a:8b:b0:b9:17:3a:3f:fa:cb:92:eb:1e:7d:
7d:93:a7:06:8d:bf:c1:72:cf:58:50:44:e6:77:36:8f:c3:de:
e7:05:2d:6c:96:65:07:20:e8:d7:2f:af:18:98:3d:58:10:28:
e4:a6:42:7d:29:3c:86:7c:5a:29:c9:9b:04:1a:cc:7a:9b:80:
7a:1c:a9:c9:91:8b:a8:e6:09:f7:82:60:d6:dd:60:6e:e2:16:
19:fe:01:6b:74:dc:40:3a:56:b1:3d:29:f5:b1:89:85:cc:d9:
10:30:e9:13:6b:f0:02:71:b4:a3:0b:41:03:4c:de:37:87:de:
0d:3f:67:40:08:95:f5:03:e4:d1:5e:6d:cf:30:9a:5f:22:63:
65:5e:37:d7:c1:02:c8:46:3e:95:df:41:8e:37:bd:cc:82:e9:
c2:80:1f:40:b3:ee:1b:0c:5a:76:6a:62:4e:9f:9e:fd:ef:7d:
70:c6:56:21:38:66:54:cd:ed:c5:8f:97:68:56:a5:7d:60:26:
21:59:56:f2:92:c5:bb:fc:be:3a:cc:6b:60:dd:1c:b3:6c:be:
ec:f3:73:3a:da:bf:07:3a:27:0b:1d:a6:f5:c2:4d:c5:81:fb:
d8:01:89:43:17:89:c0:b6:fe:c3:a1:cf:09:2b:48:c3:3a:84:
c7:a2:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:34 2025 by rpki-client