Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa
File: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (raw, json)
Hash identifier: GKVVkkXboxeT4WcoJCcUdHA/7DHycn3Kvf/vm4KqRk4=
Subject key identifier: AF:AC:59:37:D9:90:18:90:0F:5F:C5:30:1A:F0:6C:4A:B5:0C:DE:AD
Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525
Certificate serial: 0590973D7EFCD60CCA121D9CA51132B0C29A4BF9
Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa
Signing time: Wed 05 Mar 2025 12:00:01 +0000
ROA not before: Wed 05 Mar 2025 11:55:01 +0000
ROA not after: Wed 04 Mar 2026 12:00:01 +0000
asID: 141970
IP address blocks: 103.167.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:90:97:3d:7e:fc:d6:0c:ca:12:1d:9c:a5:11:32:b0:c2:9a:4b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525
Validity
Not Before: Mar 5 11:55:01 2025 GMT
Not After : Mar 4 12:00:01 2026 GMT
Subject: CN=AFAC5937D99018900F5FC5301AF06C4AB50CDEAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:7f:61:bd:b1:c7:73:ff:d3:2a:1e:dd:5f:
b0:9c:6d:b3:09:32:40:93:7d:73:ba:69:4b:e6:7f:
13:9b:98:56:34:11:76:7b:b9:cd:4b:ac:0d:30:63:
33:67:0a:bd:77:81:9e:26:9f:97:dd:d5:77:43:51:
75:ca:87:a7:19:1f:d1:c2:2d:52:e9:16:2a:d6:46:
1c:d8:f0:4f:1c:85:13:f2:e7:97:4f:cf:07:5f:c1:
1f:fc:e2:b1:79:e6:f9:73:d5:25:b2:de:d4:27:25:
8a:e7:e2:32:3f:37:16:b8:58:b8:5b:8c:f1:e3:44:
28:0a:ed:02:6d:ac:9d:cd:76:cc:2a:55:d5:41:f9:
c0:3c:e4:9c:01:13:57:c2:11:38:71:45:6a:03:ea:
ea:35:c0:3d:f5:27:6c:45:0c:0f:3f:c3:63:2a:fa:
8f:dc:c9:5a:0d:50:c0:29:03:6f:ca:c7:96:89:3a:
50:17:86:b7:2d:64:ee:0d:68:52:57:12:03:c0:d4:
e3:bd:f0:6c:f9:d5:3e:59:a0:00:c5:fa:96:04:fa:
4d:ab:c1:95:40:9a:df:ec:64:01:61:87:a0:62:aa:
e4:7c:a1:61:45:d7:66:c1:32:64:ac:08:0e:75:f9:
e4:5e:14:40:d5:58:7e:38:dd:bc:80:9a:1a:e7:93:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AC:59:37:D9:90:18:90:0F:5F:C5:30:1A:F0:6C:4A:B5:0C:DE:AD
X509v3 Authority Key Identifier:
keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.20.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ec:0b:05:2e:94:1e:eb:86:90:6d:8b:96:22:69:d3:d6:43:
62:6d:aa:88:f4:7f:62:b1:29:b2:4e:24:cc:4a:6b:09:5a:ed:
38:f7:db:fc:2c:6f:b8:76:45:96:73:2c:19:1f:2d:21:b4:6c:
a4:f0:3e:8b:3c:cd:bd:b4:9b:c0:c6:bd:80:5e:74:df:4e:ce:
2c:d3:e7:4c:33:da:3b:6b:03:1f:49:d1:9e:44:7a:30:21:07:
6b:a7:45:7f:57:00:32:9e:99:f9:4a:3c:78:85:d4:42:99:f4:
53:4e:cd:95:7d:b8:24:f3:04:55:8b:6e:16:ad:2d:0c:cd:c9:
ce:1e:83:05:9c:d2:bd:2b:93:40:83:7c:c5:ab:31:ee:d6:6a:
cc:0c:fc:0c:52:e9:93:d9:cf:67:17:54:4d:6b:32:0f:5e:f1:
b8:2c:5c:a4:a4:72:1c:77:e8:89:48:22:1e:e0:ac:d9:99:26:
4b:16:ce:ea:ef:41:8b:26:f6:aa:c3:58:04:2a:aa:b9:e1:e6:
84:72:23:f2:e4:1b:92:dd:ad:35:8f:f3:24:4c:39:31:f1:af:
80:22:4c:56:01:1a:bc:21:65:b5:91:35:36:c1:95:8b:3b:3f:
8c:13:6f:d6:94:0c:15:7b:af:fc:8d:18:67:68:55:20:2e:e8:
c6:bc:47:5b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBZCXPX781gzKEh2cpREysMKaS/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC
QzY0MzUyNTAeFw0yNTAzMDUxMTU1MDFaFw0yNjAzMDQxMjAwMDFaMDMxMTAvBgNV
BAMTKEFGQUM1OTM3RDk5MDE4OTAwRjVGQzUzMDFBRjA2QzRBQjUwQ0RFQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgOH9hvbHHc//TKh7dX7CcbbMJ
MkCTfXO6aUvmfxObmFY0EXZ7uc1LrA0wYzNnCr13gZ4mn5fd1XdDUXXKh6cZH9HC
LVLpFirWRhzY8E8chRPy55dPzwdfwR/84rF55vlz1SWy3tQnJYrn4jI/Nxa4WLhb
jPHjRCgK7QJtrJ3NdswqVdVB+cA85JwBE1fCEThxRWoD6uo1wD31J2xFDA8/w2Mq
+o/cyVoNUMApA2/Kx5aJOlAXhrctZO4NaFJXEgPA1OO98Gz51T5ZoADF+pYE+k2r
wZVAmt/sZAFhh6BiquR8oWFF12bBMmSsCA51+eReFEDVWH443byAmhrnkwSTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUr6xZN9mQGJAPX8UwGvBsSrUM3q0wHwYDVR0j
BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG
MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0
MzUyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmNzZiNzczLTQwNWYtNDU4Zi05
Yjg4LTg1MjA5NTE3M2YxNi8wLzMxMzAzMzJlMzEzNjM3MmUzMjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6cUMA0GCSqG
SIb3DQEBCwUAA4IBAQBj7AsFLpQe64aQbYuWImnT1kNibaqI9H9isSmyTiTMSmsJ
Wu0499v8LG+4dkWWcywZHy0htGyk8D6LPM29tJvAxr2AXnTfTs4s0+dMM9o7awMf
SdGeRHowIQdrp0V/VwAynpn5Sjx4hdRCmfRTTs2Vfbgk8wRVi24WrS0MzcnOHoMF
nNK9K5NAg3zFqzHu1mrMDPwMUumT2c9nF1RNazIPXvG4LFykpHIcd+iJSCIe4KzZ
mSZLFs7q70GLJvaqw1gEKqq54eaEciPy5BuS3a01j/MkTDkx8a+AIkxWARq8IWW1
kTU2wZWLOz+ME2/WlAwVe6/8jRhnaFUgLujGvEdb
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:14:57 2025 by rpki-client