Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa
File: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (raw, json)
Hash identifier: VUXxXSjdw/tewePYso0nLi7PuBiFv1hIb0UmgFSc+fg=
Subject key identifier: B1:49:89:F1:ED:F3:2A:D9:DC:00:82:BE:07:FE:3E:A0:83:BE:E3:E2
Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Certificate serial: 5D07C399E4C798AB488DE39D32E103F70BF44ACB
Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa
Signing time: Tue 10 Dec 2024 08:00:01 +0000
ROA not before: Tue 10 Dec 2024 07:55:01 +0000
ROA not after: Tue 09 Dec 2025 08:00:01 +0000
asID: 152001
IP address blocks: 103.67.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:07:c3:99:e4:c7:98:ab:48:8d:e3:9d:32:e1:03:f7:0b:f4:4a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Validity
Not Before: Dec 10 07:55:01 2024 GMT
Not After : Dec 9 08:00:01 2025 GMT
Subject: CN=B14989F1EDF32AD9DC0082BE07FE3EA083BEE3E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f2:04:89:e7:e3:a4:66:4f:7d:65:6d:86:79:
a9:47:0b:69:af:14:dc:b0:a8:88:bc:3a:b9:5e:74:
97:89:b2:e5:85:23:23:33:9e:3a:86:d2:f1:c3:1a:
31:fb:d8:f1:9e:85:d9:95:2c:7d:de:95:de:db:b0:
70:52:19:a4:06:05:9e:9e:80:b7:a3:6a:ba:2e:d0:
13:a4:71:2d:b0:a8:7b:a6:45:d6:f8:45:ac:8b:f2:
22:f4:c7:cb:c3:d4:d8:46:56:58:46:5a:29:71:67:
5d:83:28:7b:42:f5:71:95:fa:b9:ce:18:b6:9f:eb:
e1:fe:17:60:89:4a:bb:5e:b5:73:d5:b1:b9:bd:42:
99:5e:71:bf:ed:a5:c7:49:a5:ea:72:ef:0d:ce:bc:
7e:f3:a5:8f:74:37:e5:fb:43:3a:d8:8b:77:ec:fe:
21:8a:2c:a4:44:ea:81:03:48:d2:61:f9:bb:cb:48:
c1:85:c5:de:fb:b0:6d:1f:a4:e3:33:82:08:19:53:
1c:2b:2f:d2:33:0f:c5:26:d3:4c:16:1e:9c:cc:79:
35:45:ca:d9:cc:1a:47:8e:b3:b5:e5:44:42:20:24:
74:a9:1a:1a:7d:ed:74:68:10:2e:6a:28:e0:4e:55:
a6:cb:1a:8e:f1:2a:64:55:f0:b8:4c:be:15:92:46:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:49:89:F1:ED:F3:2A:D9:DC:00:82:BE:07:FE:3E:A0:83:BE:E3:E2
X509v3 Authority Key Identifier:
keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.67.81.0/24
Signature Algorithm: sha256WithRSAEncryption
81:da:69:b8:b5:26:9e:cd:49:90:ef:c2:6b:45:3e:cc:b4:11:
d8:cf:33:dc:e6:6d:55:c6:e8:23:27:1b:7c:59:e1:2a:cb:8d:
65:87:61:bc:02:ca:8d:c6:93:ef:1e:05:ce:18:d5:de:e4:25:
e5:50:37:b4:a3:66:f4:f9:6d:31:70:10:5b:58:2c:19:60:9e:
0d:2b:c8:18:ec:34:bc:d2:d9:4d:f4:03:b8:0c:b5:e2:45:4f:
c6:89:75:4a:62:ee:39:e9:ac:3d:b5:7e:ac:74:74:9a:ef:a6:
49:cd:ca:77:47:e4:01:91:ff:c2:26:06:47:a7:cc:c4:bf:df:
7a:22:f1:67:73:e4:76:3c:ab:33:49:20:6f:cc:e8:e3:ec:e6:
d6:87:e5:87:7c:89:3a:42:e4:6d:ac:a6:5a:6e:b1:4d:60:c8:
5f:7c:c3:4d:1d:ed:ac:e5:d9:ff:59:33:51:30:61:0d:da:ae:
50:ff:b7:1c:23:14:4d:03:0f:18:a4:27:bb:4f:27:24:d5:41:
61:e8:3f:fd:23:8d:f5:1a:f4:16:8c:01:53:ab:1b:4f:ea:46:
90:90:8d:81:ae:7d:0d:1b:43:0b:ef:02:ef:9a:07:53:d2:51:
d4:5a:0f:e1:3d:61:97:1c:80:08:41:1e:ac:d1:9c:27:66:04:
22:3e:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:52 2025 by rpki-client