Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa
File: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (raw, json)
Hash identifier: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=
Subject key identifier: C4:D6:20:F7:C9:DB:45:68:20:6E:EB:13:D0:BD:BB:25:DD:E4:BA:2B
Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
Certificate serial: 353C95E7DA4A4EEB487E120B7E41250398CE5439
Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa
Signing time: Wed 05 Mar 2025 18:21:04 +0000
ROA not before: Wed 05 Mar 2025 18:16:04 +0000
ROA not after: Wed 04 Mar 2026 18:21:04 +0000
asID: 149944
IP address blocks: 103.73.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3c:95:e7:da:4a:4e:eb:48:7e:12:0b:7e:41:25:03:98:ce:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
Validity
Not Before: Mar 5 18:16:04 2025 GMT
Not After : Mar 4 18:21:04 2026 GMT
Subject: CN=C4D620F7C9DB4568206EEB13D0BDBB25DDE4BA2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:ec:12:42:26:85:2b:5d:97:7d:e2:cc:d7:
e1:1d:69:e8:31:9e:74:86:3e:3e:e4:34:f4:da:63:
e5:e6:cb:1e:0a:cd:83:06:62:15:c7:54:ee:52:75:
95:51:72:44:4e:d7:9f:57:07:45:ae:4d:ca:40:55:
34:73:f1:f4:49:72:3c:58:11:37:64:d9:11:b0:29:
17:b9:54:9e:85:38:f6:15:1a:ff:81:d9:72:26:34:
da:2c:41:1b:a6:f6:67:cd:83:a5:af:27:3e:f3:2b:
49:5e:ba:7f:50:19:16:15:76:3e:4f:e2:2b:07:37:
64:03:4f:a5:9a:cc:bb:ca:3a:99:fa:e5:80:50:96:
fe:d5:23:91:07:43:d5:a8:52:cc:be:4a:61:05:a6:
29:0d:12:1f:67:3d:1b:14:94:6a:1b:1f:7f:47:49:
ab:1f:f9:ce:78:b9:f0:5a:c9:2d:d6:a4:22:cf:76:
6a:8e:b0:75:ad:84:b3:03:57:50:47:58:74:47:24:
4b:52:a2:b6:dc:b5:28:5c:56:da:72:18:d1:03:93:
65:89:f6:e1:31:1e:fa:38:ff:79:5d:20:b4:2e:35:
34:f3:44:00:05:22:f5:36:7b:f5:14:20:d7:1b:72:
fc:ef:b7:05:bb:49:9f:5b:2b:88:5a:64:2e:41:f4:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D6:20:F7:C9:DB:45:68:20:6E:EB:13:D0:BD:BB:25:DD:E4:BA:2B
X509v3 Authority Key Identifier:
keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.73.192.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0e:0a:91:f5:f9:4c:d9:2a:e6:01:41:b6:e4:8a:2d:34:43:
1e:52:c8:8e:28:ad:04:af:e0:b1:8b:4f:9c:96:d6:7b:62:b1:
03:33:05:63:ff:74:25:77:29:79:59:ad:5b:38:f8:bd:4d:21:
5c:6a:3c:9d:6d:a6:18:24:d7:cc:1e:17:a4:80:26:07:2b:cd:
ab:7c:0b:a9:d1:7e:32:d7:63:48:4e:f8:1a:9d:e9:40:fc:81:
14:d0:f6:df:bc:43:c3:4e:4c:a7:e4:44:81:80:fd:1e:a5:3f:
e7:63:0d:9d:14:28:00:44:6e:20:bb:cf:36:d8:98:69:f8:43:
39:3f:4e:b8:d9:43:bb:4d:43:58:de:f1:ab:f8:a7:83:36:6a:
87:96:82:cb:c1:03:83:be:ff:80:c4:d5:f7:ab:ab:8c:23:e0:
87:f4:d2:ec:83:40:9b:d9:35:a2:f1:e5:15:9b:5c:8a:fc:94:
8c:08:03:a0:b8:2e:52:aa:b9:31:35:ee:9a:cd:6d:81:db:86:
d9:df:ff:3a:72:f4:96:01:1d:d3:f9:f7:7a:62:b6:fa:d5:c3:
e1:e8:fa:b7:68:8d:0e:2a:ff:3e:d5:fd:fd:eb:5e:95:52:5b:
0d:c0:8f:d1:54:fb:64:76:ef:75:23:40:b8:22:d1:41:dd:70:
13:b1:d8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:09 2025 by rpki-client