Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa
File: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (raw, json)
Hash identifier: 0R9+UBK5TWnVEw9k06N3J5DiMjElLSqquHAFTmuP/mY=
Subject key identifier: 4B:63:68:0B:25:DF:8B:A4:0B:B2:03:83:8A:76:4B:50:0D:A3:76:06
Certificate issuer: /CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C
Certificate serial: 1417B651669DD26B27480EF1281004D97C5E9495
Authority key identifier: DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa
Signing time: Tue 28 May 2024 09:00:01 +0000
ROA not before: Tue 28 May 2024 08:55:01 +0000
ROA not after: Tue 27 May 2025 09:00:01 +0000
asID: 142374
IP address blocks: 103.171.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:17:b6:51:66:9d:d2:6b:27:48:0e:f1:28:10:04:d9:7c:5e:94:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C
Validity
Not Before: May 28 08:55:01 2024 GMT
Not After : May 27 09:00:01 2025 GMT
Subject: CN=4B63680B25DF8BA40BB203838A764B500DA37606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:88:eb:71:2a:d9:01:86:a0:17:19:15:cb:
aa:3c:3c:6c:8e:7f:62:c6:5a:04:10:58:2e:85:64:
06:be:58:2c:d2:4c:56:d0:f7:af:4a:8a:ab:11:25:
ec:d3:78:2c:2a:d8:0f:ee:4b:39:b8:e6:f2:e2:2a:
37:2d:86:e5:db:21:e1:0c:ec:4b:4f:31:33:6a:11:
da:85:40:b2:d7:c1:8c:cc:35:c4:49:1e:c0:f2:ea:
9c:94:4f:1f:04:f4:f4:ff:29:2f:88:c3:8e:28:b2:
7d:3f:4a:fd:6e:44:8f:7d:03:e8:3f:7c:de:21:1e:
59:4a:cd:ac:26:7d:c8:13:bd:58:6d:6e:86:fe:b6:
6e:0b:57:a2:a2:27:54:27:6a:75:22:5d:ce:0b:5e:
0f:fc:54:1a:70:0b:60:c5:4b:e3:b1:ed:cc:ca:e1:
ef:32:db:8b:db:9f:60:56:51:51:51:e2:a0:9d:00:
32:09:45:46:2c:10:d6:f8:ac:eb:78:97:a2:74:cd:
b0:3e:4f:ca:5b:69:ab:da:27:d4:51:f4:93:1c:c1:
03:f0:80:ab:e8:b4:d1:06:2e:9d:3a:df:27:03:af:
21:cc:9e:7e:50:c6:bc:da:a8:36:a4:40:3c:0c:ab:
d2:9e:dd:8e:c0:53:cf:aa:90:d0:3a:54:e1:cc:e8:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:63:68:0B:25:DF:8B:A4:0B:B2:03:83:8A:76:4B:50:0D:A3:76:06
X509v3 Authority Key Identifier:
keyid:DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.184.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c4:c3:3a:19:f1:fe:3d:ea:a5:5b:91:c4:a8:37:07:0c:55:
6c:90:36:18:29:0e:9f:dc:34:50:b6:a1:44:77:0f:78:48:3f:
1d:39:fc:01:64:d3:aa:79:cf:09:51:b5:fe:19:31:d3:ee:ca:
b0:09:91:bb:70:ea:76:84:b6:55:b9:9d:41:62:42:d3:fb:73:
78:80:05:c6:41:aa:eb:03:a0:d0:00:ce:31:ae:4f:95:3b:6c:
de:13:95:32:00:53:c6:e4:ab:f5:40:c8:09:b5:d8:1f:78:6d:
46:1d:26:52:91:83:85:fa:a5:f0:64:8e:d8:c7:a8:4d:d5:6f:
4a:61:f7:da:bb:63:ff:98:a1:04:b3:bc:08:66:eb:31:b5:8f:
a3:fa:ba:fc:fa:55:47:21:af:05:91:a9:10:86:76:00:13:a4:
cc:6e:4a:72:5d:63:3a:95:cb:be:1a:35:d1:c7:7d:33:1f:4d:
ef:2d:89:60:a9:20:f2:6b:dc:be:f3:02:89:c7:ec:a3:3d:08:
39:4a:44:7c:1f:4d:d9:f7:52:43:58:cc:c3:e4:25:ab:7e:e9:
e0:bc:08:84:29:72:d8:2b:ea:f9:76:b8:0d:c9:0b:f5:0a:f9:
16:9b:49:5e:8a:59:39:70:2d:34:20:73:5f:15:98:5e:2a:6a:
d3:52:b9:3e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUFBe2UWad0msnSA7xKBAE2XxelJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0ND
MUY1MzA2QzAeFw0yNDA1MjgwODU1MDFaFw0yNTA1MjcwOTAwMDFaMDMxMTAvBgNV
BAMTKDRCNjM2ODBCMjVERjhCQTQwQkIyMDM4MzhBNzY0QjUwMERBMzc2MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhIjrcSrZAYagFxkVy6o8PGyO
f2LGWgQQWC6FZAa+WCzSTFbQ969KiqsRJezTeCwq2A/uSzm45vLiKjcthuXbIeEM
7EtPMTNqEdqFQLLXwYzMNcRJHsDy6pyUTx8E9PT/KS+Iw44osn0/Sv1uRI99A+g/
fN4hHllKzawmfcgTvVhtbob+tm4LV6KiJ1QnanUiXc4LXg/8VBpwC2DFS+Ox7czK
4e8y24vbn2BWUVFR4qCdADIJRUYsENb4rOt4l6J0zbA+T8pbaavaJ9RR9JMcwQPw
gKvotNEGLp063ycDryHMnn5QxrzaqDakQDwMq9Ke3Y7AU8+qkNA6VOHM6L2bAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUS2NoCyXfi6QLsgODinZLUA2jdgYwHwYDVR0j
BBgwFoAU364RQY8hdaV9Adj4CmFJfMH1MGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODU1ZjQ1MC1lYjdmLTRhMjYtYTZjNC1mOTgyN2VlMGE1YjgvMC9ERkFFMTE0MThG
MjE3NUE1N0QwMUQ4RjgwQTYxNDk3Q0MxRjUzMDZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0NDMUY1
MzA2Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4NTVmNDUwLWViN2YtNGEyNi1h
NmM0LWY5ODI3ZWUwYTViOC8wLzMxMzAzMzJlMzEzNzMxMmUzMTM4MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnq7gwDQYJ
KoZIhvcNAQELBQADggEBAETEwzoZ8f496qVbkcSoNwcMVWyQNhgpDp/cNFC2oUR3
D3hIPx05/AFk06p5zwlRtf4ZMdPuyrAJkbtw6naEtlW5nUFiQtP7c3iABcZBqusD
oNAAzjGuT5U7bN4TlTIAU8bkq/VAyAm12B94bUYdJlKRg4X6pfBkjtjHqE3Vb0ph
99q7Y/+YoQSzvAhm6zG1j6P6uvz6VUchrwWRqRCGdgATpMxuSnJdYzqVy74aNdHH
fTMfTe8tiWCpIPJr3L7zAonH7KM9CDlKRHwfTdn3UkNYzMPkJat+6eC8CIQpctgr
6vl2uA3JC/UK+RabSV6KWTlwLTQgc18VmF4qatNSuT4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:31 2025 by rpki-client