Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37382e302f32342d3234203d3e203435373031.roa
File: 3130332e38392e37382e302f32342d3234203d3e203435373031.roa (raw, json)
Hash identifier: yjkQvhl3lWhDuwGVVQghf0hSHRRy4Xjnuo/O5QntUbY=
Subject key identifier: 75:3F:33:9A:F6:11:E2:45:8F:E4:E4:EB:20:20:A0:75:4B:3A:E4:CD
Certificate issuer: /CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
Certificate serial: 787C0B01071E500BD1F6EBBA139960767AE35A83
Authority key identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37382e302f32342d3234203d3e203435373031.roa
Signing time: Thu 16 Nov 2023 06:00:01 +0000
ROA not before: Thu 16 Nov 2023 05:55:01 +0000
ROA not after: Thu 14 Nov 2024 06:00:01 +0000
asID: 45701
IP address blocks: 103.89.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:7c:0b:01:07:1e:50:0b:d1:f6:eb:ba:13:99:60:76:7a:e3:5a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
Validity
Not Before: Nov 16 05:55:01 2023 GMT
Not After : Nov 14 06:00:01 2024 GMT
Subject: CN=753F339AF611E2458FE4E4EB2020A0754B3AE4CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:e6:65:0b:18:a2:d7:e5:2a:14:85:79:16:
93:1c:93:77:09:e7:9c:b9:c8:e7:d5:35:6d:05:68:
35:83:92:5d:c2:04:25:a5:5b:1a:5d:d5:e0:c4:d1:
a9:79:54:c1:f2:52:7d:a9:ae:59:d0:9f:8d:d2:ad:
8c:df:a2:5b:4d:cc:58:05:b6:e9:44:d6:d1:f4:f8:
ff:a8:df:34:68:d1:a3:d5:30:bd:86:99:a6:ff:b5:
53:55:86:56:22:14:79:58:eb:83:99:2c:a8:57:7f:
62:85:22:8a:0c:f1:f8:71:f4:b3:e7:1a:d6:bf:d8:
4e:0f:15:90:92:19:43:1c:be:5f:ee:95:85:83:f8:
50:98:ec:00:64:b5:13:4c:47:de:b1:3b:7a:5f:c7:
e8:1c:1f:1d:88:45:c4:5a:ae:6a:16:9d:d1:d4:f3:
5d:f9:9e:33:67:96:53:e5:91:eb:2d:b1:b7:ee:83:
75:7b:52:4f:6a:29:70:6f:c9:48:37:1e:3c:27:20:
0f:f9:f4:13:1e:b0:77:ae:bd:04:0d:9c:e4:87:87:
8c:4f:ab:63:66:e9:cf:ed:26:2e:35:28:94:59:de:
88:84:50:5c:32:ca:be:78:bc:75:bf:ee:6d:60:5e:
51:ab:d6:b5:5f:72:d9:b4:9c:3e:0e:e7:be:34:e4:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:33:9A:F6:11:E2:45:8F:E4:E4:EB:20:20:A0:75:4B:3A:E4:CD
X509v3 Authority Key Identifier:
keyid:FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37382e302f32342d3234203d3e203435373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8b:6b:6e:52:9f:14:9c:9d:89:05:c1:ff:8e:6d:73:94:88:
1e:cc:8f:6a:bc:cf:13:85:8a:16:d5:16:97:03:26:e1:e8:33:
16:be:e6:c2:ab:0d:32:61:3b:9b:31:e7:e3:c3:cc:ae:58:dd:
7f:e1:42:b1:61:ac:e8:fe:70:d1:64:1e:11:a1:74:3d:b1:c3:
1c:86:0f:77:e4:7a:45:64:4c:14:f1:35:84:57:d9:aa:a2:5a:
59:52:2e:a9:14:41:10:3a:e1:f3:1a:08:9a:91:d0:b0:a0:77:
a4:df:33:3e:ef:4c:fe:d7:b6:f3:b6:34:32:69:b2:b2:f7:99:
e5:09:eb:b1:16:1d:a9:79:1a:f3:b6:63:82:da:34:bc:11:ce:
2a:1d:d6:ed:85:27:93:a1:f9:8f:43:bc:7d:6e:8f:8c:f4:d2:
2e:19:bc:21:48:f8:87:c5:78:d4:35:4f:85:14:05:8e:3c:ab:
8f:53:56:fc:46:2e:b4:10:42:df:12:61:37:7b:1f:74:19:59:
0f:0c:1e:21:76:93:54:38:f9:0a:26:7c:25:05:97:1b:37:ed:
d3:0d:f8:41:3c:04:6a:1a:d1:84:a4:34:e5:e1:43:07:d8:7b:
e4:d9:01:56:21:7b:33:d9:ba:29:4b:6c:24:1a:04:0a:23:44:
87:19:53:ae
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUeHwLAQceUAvR9uu6E5lgdnrjWoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI4OEE4ODUyNTE2REJDRUFDNDI5QzVCNkY5QjdGOThG
QUEwMTQwRTAeFw0yMzExMTYwNTU1MDFaFw0yNDExMTQwNjAwMDFaMDMxMTAvBgNV
BAMTKDc1M0YzMzlBRjYxMUUyNDU4RkU0RTRFQjIwMjBBMDc1NEIzQUU0Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRuZlCxii1+UqFIV5FpMck3cJ
55y5yOfVNW0FaDWDkl3CBCWlWxpd1eDE0al5VMHyUn2prlnQn43SrYzfoltNzFgF
tulE1tH0+P+o3zRo0aPVML2Gmab/tVNVhlYiFHlY64OZLKhXf2KFIooM8fhx9LPn
Gta/2E4PFZCSGUMcvl/ulYWD+FCY7ABktRNMR96xO3pfx+gcHx2IRcRarmoWndHU
8135njNnllPlkestsbfug3V7Uk9qKXBvyUg3HjwnIA/59BMesHeuvQQNnOSHh4xP
q2Nm6c/tJi41KJRZ3oiEUFwyyr54vHW/7m1gXlGr1rVfctm0nD4O57405NddAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUdT8zmvYR4kWP5OTrICCgdUs65M0wHwYDVR0j
BBgwFoAU+4iohSUW286sQpxbb5t/mPqgFA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MWIxY2RkNS0yYjNkLTQ2MWEtOWE3Mi0wMDMxZjBiZmI0NWQvMC9GQjg4QTg4NTI1
MTZEQkNFQUM0MjlDNUI2RjlCN0Y5OEZBQTAxNDBFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkI4OEE4ODUyNTE2REJDRUFDNDI5QzVCNkY5QjdGOThGQUEw
MTQwRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxYjFjZGQ1LTJiM2QtNDYxYS05
YTcyLTAwMzFmMGJmYjQ1ZC8wLzMxMzAzMzJlMzgzOTJlMzczODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnWU4wDQYJKoZIhvcN
AQELBQADggEBAC6La25SnxScnYkFwf+ObXOUiB7Mj2q8zxOFihbVFpcDJuHoMxa+
5sKrDTJhO5sx5+PDzK5Y3X/hQrFhrOj+cNFkHhGhdD2xwxyGD3fkekVkTBTxNYRX
2aqiWllSLqkUQRA64fMaCJqR0LCgd6TfMz7vTP7XtvO2NDJpsrL3meUJ67EWHal5
GvO2Y4LaNLwRziod1u2FJ5Oh+Y9DvH1uj4z00i4ZvCFI+IfFeNQ1T4UUBY48q49T
VvxGLrQQQt8SYTd7H3QZWQ8MHiF2k1Q4+QomfCUFlxs37dMN+EE8BGoa0YSkNOXh
QwfYe+TZAVYhezPZuilLbCQaBAojRIcZU64=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:39:49 2025 by rpki-client