Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa
File: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (raw, json)
Hash identifier: gwCL3bf8ZYDEakqa3g/8jLVhUBUPIyS/P9TiFjOt9l8=
Subject key identifier: CD:AB:F8:48:B5:C2:91:2A:A2:29:58:69:C6:FD:64:A5:C1:FD:D5:ED
Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
Certificate serial: 666D5E25F6B4C263C28262743C90DC1B07A0840C
Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa
Signing time: Sat 13 Jul 2024 12:00:02 +0000
ROA not before: Sat 13 Jul 2024 11:55:02 +0000
ROA not after: Sat 12 Jul 2025 12:00:02 +0000
asID: 136856
IP address blocks: 103.102.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:6d:5e:25:f6:b4:c2:63:c2:82:62:74:3c:90:dc:1b:07:a0:84:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
Validity
Not Before: Jul 13 11:55:02 2024 GMT
Not After : Jul 12 12:00:02 2025 GMT
Subject: CN=CDABF848B5C2912AA2295869C6FD64A5C1FDD5ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:af:89:e6:e6:43:56:30:1b:b2:c1:6c:bd:
71:60:eb:70:ee:26:12:e2:c6:c2:62:35:4b:52:c7:
19:5e:9a:19:d5:82:6f:09:c6:38:9e:15:ee:b7:98:
8a:bf:2e:89:84:b2:8a:21:68:b6:86:45:c4:96:5a:
b2:eb:bd:95:f2:a8:e0:e5:1a:c3:d5:cc:2e:39:76:
37:c1:62:4a:16:89:cf:70:71:4a:96:b8:38:46:b8:
29:54:1f:65:97:a7:e0:77:f9:b5:60:fc:4e:3c:b4:
52:af:6a:45:63:70:5e:f7:c0:c8:8a:6a:29:f7:a0:
a4:08:79:2b:5a:58:37:98:02:65:c5:87:2c:c2:58:
19:45:8b:38:e0:c6:9e:cd:99:1f:31:68:68:f1:0f:
47:8f:97:38:b7:19:34:1c:7b:83:62:81:17:a2:0c:
0f:25:43:e9:98:63:55:b2:2f:93:df:e6:b2:fb:f2:
25:0e:09:95:df:be:4a:26:ae:dd:d6:f1:cd:c1:85:
c2:ea:0f:8d:15:dc:22:bf:bf:bf:a9:82:a2:24:62:
dd:17:c3:14:70:75:5f:04:80:64:7a:d3:72:06:4c:
51:f1:52:0f:ee:82:50:61:58:2b:dc:6b:03:0c:bc:
74:76:92:0a:89:7a:81:5f:47:df:dc:ff:ec:32:e5:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:F8:48:B5:C2:91:2A:A2:29:58:69:C6:FD:64:A5:C1:FD:D5:ED
X509v3 Authority Key Identifier:
keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.114.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:ef:27:e2:6a:16:ac:ed:65:d6:4c:b9:e1:4c:03:7f:b4:fd:
1c:7b:39:6e:af:21:ad:19:48:46:cb:18:55:29:b4:f7:0e:a6:
68:f6:db:23:2d:33:ae:42:48:ec:b8:b5:83:9a:dd:7d:88:8b:
d6:51:75:6b:68:92:da:17:90:89:7f:52:54:b3:6c:06:67:cb:
28:cd:65:f3:67:7a:b9:9d:36:a6:e1:ad:21:22:d4:73:b3:1e:
f4:17:6f:26:45:d2:89:c6:44:48:1d:dc:99:18:dd:49:b7:6f:
07:f9:76:3d:81:e8:85:be:24:91:69:60:b8:fe:2f:24:c8:3b:
82:13:f9:07:cf:1c:e6:83:29:d6:a3:37:46:d0:6d:3d:13:d6:
82:ca:8d:56:4f:53:0a:db:77:9b:bc:96:f3:72:57:f4:b1:33:
bf:ea:6b:0c:c7:c7:43:15:b2:ee:70:a1:c0:c8:23:d4:54:df:
79:1d:be:b9:53:b6:c1:73:47:26:a7:48:45:b6:99:06:06:d4:
40:a5:39:f4:64:cd:60:2f:c9:0f:f2:3e:e6:82:27:2c:c4:03:
bf:ea:de:33:e7:71:8c:c3:7e:85:97:54:8b:3a:df:4d:c8:2c:
bd:29:d9:67:ac:6c:44:d6:80:7b:97:5d:69:a5:ad:8a:e4:b7:
ed:91:94:2b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZm1eJfa0wmPCgmJ0PJDcGweghAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw
MjdEMUI2MzAeFw0yNDA3MTMxMTU1MDJaFw0yNTA3MTIxMjAwMDJaMDMxMTAvBgNV
BAMTKENEQUJGODQ4QjVDMjkxMkFBMjI5NTg2OUM2RkQ2NEE1QzFGREQ1RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xa+J5uZDVjAbssFsvXFg63Du
JhLixsJiNUtSxxlemhnVgm8JxjieFe63mIq/LomEsoohaLaGRcSWWrLrvZXyqODl
GsPVzC45djfBYkoWic9wcUqWuDhGuClUH2WXp+B3+bVg/E48tFKvakVjcF73wMiK
ain3oKQIeStaWDeYAmXFhyzCWBlFizjgxp7NmR8xaGjxD0ePlzi3GTQce4NigRei
DA8lQ+mYY1WyL5Pf5rL78iUOCZXfvkomrt3W8c3BhcLqD40V3CK/v7+pgqIkYt0X
wxRwdV8EgGR603IGTFHxUg/uglBhWCvcawMMvHR2kgqJeoFfR9/c/+wy5exhAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUzav4SLXCkSqiKVhpxv1kpcH91e0wHwYDVR0j
BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC
MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE
MUI2My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1YzdhNDA0LWViM2YtNGNmMS05
OWY5LTgyNzk2MTY2MWYzMS8wLzMxMzAzMzJlMzEzMDMyMmUzMTMxMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzYzODM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnZnIwDQYJ
KoZIhvcNAQELBQADggEBAFzvJ+JqFqztZdZMueFMA3+0/Rx7OW6vIa0ZSEbLGFUp
tPcOpmj22yMtM65CSOy4tYOa3X2Ii9ZRdWtoktoXkIl/UlSzbAZnyyjNZfNnermd
NqbhrSEi1HOzHvQXbyZF0onGREgd3JkY3Um3bwf5dj2B6IW+JJFpYLj+LyTIO4IT
+QfPHOaDKdajN0bQbT0T1oLKjVZPUwrbd5u8lvNyV/SxM7/qawzHx0MVsu5wocDI
I9RU33kdvrlTtsFzRyanSEW2mQYG1EClOfRkzWAvyQ/yPuaCJyzEA7/q3jPncYzD
foWXVIs6303ILL0p2WesbETWgHuXXWmlrYrkt+2RlCs=
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:56 2025 by rpki-client