Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa
File: 3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier: qZyyqemZker5mLJct0Ssx2ZQrnylXGFblJRgWoAPLEk=
Subject key identifier: 7D:12:22:53:A9:23:1C:63:54:7E:8C:10:EC:BD:A8:FE:61:AC:5E:A9
Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial: 081F07D3A30F80DF5C745251194A2F0276AA08CA
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa
Signing time: Thu 30 Jan 2025 05:01:18 +0000
ROA not before: Thu 30 Jan 2025 04:56:18 +0000
ROA not after: Thu 29 Jan 2026 05:01:18 +0000
asID: 140389
IP address blocks: 103.16.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1f:07:d3:a3:0f:80:df:5c:74:52:51:19:4a:2f:02:76:aa:08:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Validity
Not Before: Jan 30 04:56:18 2025 GMT
Not After : Jan 29 05:01:18 2026 GMT
Subject: CN=7D122253A9231C63547E8C10ECBDA8FE61AC5EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:dd:53:aa:b9:78:5e:ac:7f:7b:81:7c:f1:
51:40:57:1b:d5:3f:e8:bf:b2:65:9c:8d:7e:e6:6e:
7b:46:85:dd:8f:15:84:bf:8b:ae:3d:59:b1:ab:4a:
3f:eb:9d:70:3f:f9:da:6d:3f:fb:03:77:d3:62:18:
06:1b:2b:4a:4b:53:d5:2a:dc:e7:dd:06:bd:fa:87:
5d:42:ad:3c:b3:71:5c:f7:8c:00:15:a1:59:c9:ea:
79:14:7c:d1:f9:67:95:ff:2f:b6:84:00:e2:73:ab:
4f:ba:3d:c3:fe:3b:5a:68:c3:ec:7d:ff:14:be:6d:
29:13:f4:b1:63:e1:1f:bb:df:fc:10:fa:46:41:e0:
25:4d:3b:6a:9c:4a:62:4b:62:d1:db:46:17:7a:c2:
23:ca:b8:3c:fa:7e:8d:e5:e7:5f:ff:a1:f6:32:da:
6b:c1:6e:57:4d:8c:39:e6:94:ae:b4:50:94:5f:5c:
b2:58:f1:bd:d2:34:d3:f8:3a:97:c0:de:45:9a:48:
b7:f1:b5:3a:5f:c8:ef:a0:d4:43:b5:b5:e7:23:ae:
a5:a5:1e:0e:24:24:6e:e3:b0:66:db:97:44:9b:e3:
30:1f:b8:49:8b:29:06:88:b1:19:27:b4:b8:6a:de:
c3:11:fe:06:90:fc:bc:0a:29:e0:90:b1:9f:4b:ab:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:12:22:53:A9:23:1C:63:54:7E:8C:10:EC:BD:A8:FE:61:AC:5E:A9
X509v3 Authority Key Identifier:
keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.139.0/24
Signature Algorithm: sha256WithRSAEncryption
59:11:e7:31:9f:f7:91:e1:27:fd:26:f0:60:ce:4e:cb:cd:a1:
38:3f:81:f7:4d:cd:35:28:63:e0:88:79:d1:4c:44:84:97:49:
dc:fe:50:ca:42:f3:f3:4c:f1:07:9b:f9:c3:2f:c8:6a:e2:3b:
f5:72:46:c0:f0:a9:03:68:38:12:ae:4f:46:4d:50:79:68:2e:
2e:05:62:6b:e4:9b:fd:f8:04:75:e6:e5:de:7b:88:ce:26:1c:
d5:af:2c:8b:73:b1:62:e8:27:7c:8a:f8:e9:12:dd:79:69:2b:
00:8a:bc:c9:e8:14:8f:00:33:66:e5:38:bf:48:39:fb:63:1d:
63:40:ff:35:7d:32:36:0a:bd:db:44:af:0c:d9:15:52:3a:e1:
0d:14:af:73:46:fa:bc:c7:7e:ae:fa:34:d7:ed:10:a3:db:82:
1f:73:a8:4d:cc:5b:f9:71:df:f7:54:a2:51:7d:e7:fb:36:96:
6d:e1:1e:3a:c2:8a:67:1d:58:19:36:cb:bd:49:5b:5f:5b:32:
00:7d:d2:a0:cc:58:f2:9c:f6:b4:7f:cf:47:51:88:ed:63:51:
be:1d:39:ec:db:de:c2:18:cf:8a:81:88:f7:97:4a:b2:83:16:
d1:cf:df:e8:5a:cf:e0:d5:8a:bd:2f:9b:a0:89:d8:03:89:90:
6f:e4:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:29 2025 by rpki-client