Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e32302e3136362e302f32332d3234203d3e203538353531.roa
File: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (raw, json)
Hash identifier: ZQeUJA8FemXPUrCCTqWQsa/Ey/xybN+VqtEDuKlLH5M=
Subject key identifier: EE:E4:54:28:3F:97:97:F1:3D:FA:40:0E:35:AA:A1:0B:08:2C:B9:B5
Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450
Certificate serial: 78750057E9DE417B7707E42359C240DBE01D9182
Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e32302e3136362e302f32332d3234203d3e203538353531.roa
Signing time: Wed 17 Apr 2024 08:00:00 +0000
ROA not before: Wed 17 Apr 2024 07:55:00 +0000
ROA not after: Wed 16 Apr 2025 08:00:00 +0000
asID: 58551
IP address blocks: 103.20.166.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:75:00:57:e9:de:41:7b:77:07:e4:23:59:c2:40:db:e0:1d:91:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450
Validity
Not Before: Apr 17 07:55:00 2024 GMT
Not After : Apr 16 08:00:00 2025 GMT
Subject: CN=EEE454283F9797F13DFA400E35AAA10B082CB9B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:3a:f4:b4:b5:36:96:2a:d0:3d:2b:4b:36:
f5:b3:b3:e5:24:aa:ef:ce:16:66:cc:2d:cb:96:a6:
40:0d:ba:cd:3d:6b:b2:5d:86:91:84:dd:32:82:0f:
39:7a:68:b0:c4:99:4f:8a:aa:fd:3b:06:6d:00:a4:
09:77:b6:12:6c:0b:4d:93:29:c5:cb:01:79:ac:7e:
ef:b6:ec:88:ca:3f:4c:12:d1:11:57:b7:b1:ab:15:
9e:d6:8f:32:72:59:b5:81:ec:72:2e:02:eb:d9:66:
33:c9:54:4c:ad:73:2d:52:03:5c:46:82:ef:e3:93:
dc:a2:72:e6:0d:b6:f9:46:f1:9e:b7:f4:40:f4:8c:
a6:fc:ff:0f:a8:de:56:0c:52:ad:58:88:1b:19:24:
74:ba:ed:d0:fa:18:a8:a0:cf:d4:d7:a5:6a:65:5a:
cf:29:99:0b:9f:b8:67:81:4b:af:9a:19:41:b9:bc:
e7:cf:9c:9d:4d:27:9a:1a:f1:c3:97:3c:f3:95:96:
21:1a:93:75:11:c2:18:91:74:e4:a5:f5:45:ff:c9:
90:1c:e0:75:48:28:33:17:bb:d2:f3:de:ff:89:28:
0e:8d:41:26:ee:c6:60:d1:90:99:58:df:ac:21:47:
a2:b8:07:95:8d:13:de:82:87:46:7f:f9:f6:67:ea:
38:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:54:28:3F:97:97:F1:3D:FA:40:0E:35:AA:A1:0B:08:2C:B9:B5
X509v3 Authority Key Identifier:
keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/3130332e32302e3136362e302f32332d3234203d3e203538353531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.20.166.0/23
Signature Algorithm: sha256WithRSAEncryption
84:b8:9b:55:85:21:61:c5:53:f2:d2:bf:cc:c7:e7:af:e6:f5:
ec:90:ff:85:b8:ba:34:27:64:46:8a:1b:46:96:b8:7f:ee:64:
77:45:3c:58:8b:12:68:b6:63:d0:f0:ef:35:83:fd:c4:5b:1a:
38:47:96:07:c3:ac:dc:a1:4e:63:b4:d2:68:0b:61:cb:df:5e:
2b:ad:17:5b:00:c7:b0:8d:6d:e9:10:a9:f2:f6:5e:4b:bf:da:
10:f9:f5:80:be:69:8e:b0:05:25:85:32:d9:67:eb:f7:bb:88:
7d:08:bc:fc:18:d0:ca:98:58:f5:ca:a1:43:e6:41:24:65:e3:
ba:2b:ad:79:20:02:9d:22:d3:e9:40:95:35:df:18:c7:db:32:
be:fd:75:d4:df:3e:52:45:2f:d5:93:ce:59:a1:f8:98:a1:c6:
8b:e3:4c:09:c8:2e:ad:9d:c2:0d:b3:ac:5e:8f:2d:f7:af:42:
bf:2e:96:c1:eb:28:47:33:08:18:89:79:fe:d1:0b:f6:0b:b9:
33:12:92:07:15:48:50:e9:f3:08:65:b3:c4:82:74:b4:48:2e:
af:3a:ae:58:42:73:a9:3f:7a:8c:85:ad:15:4f:2e:c2:a3:07:
c2:0e:83:14:72:63:d0:55:fd:01:4a:33:21:a2:8d:b2:61:7c:
dc:ed:fe:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:13:20 2025 by rpki-client