Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa
File: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (raw, json)
Hash identifier: MN61Y/Ylz9y4hR4L15i6CxFhu266jbpudQN5I3FAXYw=
Subject key identifier: C2:02:18:0B:C2:E8:60:5E:42:09:6E:1A:77:8F:4F:99:FD:20:9C:10
Certificate issuer: /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial: 0B8889544D15563C5CC0792BE04814CEB1565F5B
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa
Signing time: Mon 01 Jul 2024 01:04:37 +0000
ROA not before: Mon 01 Jul 2024 00:59:37 +0000
ROA not after: Mon 30 Jun 2025 01:04:37 +0000
asID: 135448
IP address blocks: 103.117.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:88:89:54:4d:15:56:3c:5c:c0:79:2b:e0:48:14:ce:b1:56:5f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Validity
Not Before: Jul 1 00:59:37 2024 GMT
Not After : Jun 30 01:04:37 2025 GMT
Subject: CN=C202180BC2E8605E42096E1A778F4F99FD209C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:8c:94:09:50:43:0a:cf:9c:40:37:df:6e:
33:4f:7a:fc:51:c0:78:4a:da:4c:a0:85:97:f4:c6:
bd:5c:b0:81:b3:e8:9b:6d:f6:dd:49:33:a7:d4:18:
98:83:cc:57:98:33:1a:9a:a1:0d:54:5c:6d:7b:4c:
69:e3:09:af:f4:30:4a:e4:65:25:36:82:55:e8:f7:
5a:14:52:44:64:0a:62:b4:af:93:e3:03:ea:26:ab:
5e:7c:7a:86:85:21:6e:9b:1d:79:5c:34:a8:fd:ef:
22:22:0b:29:5a:02:d8:15:8b:59:f3:68:af:40:70:
2f:df:6e:85:83:55:02:e1:d2:64:28:0a:e2:e9:dc:
2a:86:56:47:c3:4d:77:4e:d5:c2:4b:08:55:b0:83:
fd:0f:3a:30:b5:18:c6:d0:16:e9:9d:97:0e:54:b3:
db:27:0a:03:c7:89:c8:c8:3b:f6:65:b8:22:23:5a:
ae:5b:f0:31:bf:8e:f6:a2:67:8f:e2:1c:bb:17:e0:
c0:a0:42:38:52:f5:27:2d:6e:4c:c8:89:c1:9c:16:
66:6e:54:43:6e:f4:a2:66:59:bf:80:3f:c7:79:de:
74:e6:be:08:ae:74:4c:91:26:3e:fb:84:f8:b3:fe:
03:f3:15:b8:4a:d6:36:f6:69:5a:44:75:b5:24:20:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:02:18:0B:C2:E8:60:5E:42:09:6E:1A:77:8F:4F:99:FD:20:9C:10
X509v3 Authority Key Identifier:
keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.117.82.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:54:c7:36:99:e5:a8:e5:8d:ec:07:a7:a5:d2:63:5d:46:42:
f9:a0:76:c7:e6:c8:3f:63:b3:8a:91:5c:c4:c9:ee:2b:9e:f3:
0e:68:21:1b:83:ee:96:9c:db:d3:e1:b4:0a:96:12:cd:0a:9b:
83:4c:04:4b:b2:eb:76:12:3d:e5:b3:2f:3b:f4:33:3c:0b:81:
0b:94:bd:73:13:37:a2:74:ab:8a:15:0f:bc:cf:9c:14:6a:ef:
2e:73:3f:51:c8:0a:28:d2:07:cb:9f:1e:fe:75:08:7c:37:50:
d2:97:85:e8:d3:71:15:d2:a5:ff:ad:7a:2a:84:5a:1e:6e:02:
3f:23:7e:5f:03:63:b5:75:76:8d:50:64:9d:3f:3e:0b:4c:19:
5f:6a:b3:0d:7c:ec:eb:ab:d1:70:de:73:4d:48:ed:71:ae:2f:
21:2c:ff:87:61:93:6d:50:c8:db:2c:0d:2a:23:ed:eb:58:cd:
a2:c2:80:a4:1f:e1:f4:26:94:39:37:5c:d9:b4:0c:3c:6f:04:
32:a8:be:ba:a3:40:e7:f5:ed:e5:bd:25:23:bf:81:54:a3:45:
5e:f8:16:17:1b:1a:33:26:77:60:a6:4d:a9:a0:82:c1:7a:d1:
ec:d8:0c:d8:6f:9e:bc:3f:e3:de:42:d8:f3:f6:11:dd:c2:e2:
f5:fb:bd:6f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUC4iJVE0VVjxcwHkr4EgUzrFWX1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFG
Mjg4MTg4OTAeFw0yNDA3MDEwMDU5MzdaFw0yNTA2MzAwMTA0MzdaMDMxMTAvBgNV
BAMTKEMyMDIxODBCQzJFODYwNUU0MjA5NkUxQTc3OEY0Rjk5RkQyMDlDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6oyUCVBDCs+cQDffbjNPevxR
wHhK2kyghZf0xr1csIGz6Jtt9t1JM6fUGJiDzFeYMxqaoQ1UXG17TGnjCa/0MErk
ZSU2glXo91oUUkRkCmK0r5PjA+omq158eoaFIW6bHXlcNKj97yIiCylaAtgVi1nz
aK9AcC/fboWDVQLh0mQoCuLp3CqGVkfDTXdO1cJLCFWwg/0POjC1GMbQFumdlw5U
s9snCgPHicjIO/ZluCIjWq5b8DG/jvaiZ4/iHLsX4MCgQjhS9SctbkzIicGcFmZu
VENu9KJmWb+AP8d53nTmvgiudEyRJj77hPiz/gPzFbhK1jb2aVpEdbUkIMuLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUwgIYC8LoYF5CCW4ad49Pmf0gnBAwHwYDVR0j
BBgwFoAUAzFdDpZqhbh46pBYuM8D6vKIGIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NTlhY2I5Ny02ZTg3LTRlMzEtYTU2OS1hMjY2MGRmNGYyYjgvMC8wMzMxNUQwRTk2
NkE4NUI4NzhFQTkwNThCOENGMDNFQUYyODgxODg5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFGMjg4
MTg4OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1OWFjYjk3LTZlODctNGUzMS1h
NTY5LWEyNjYwZGY0ZjJiOC8wLzMxMzAzMzJlMzEzMTM3MmUzODMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ3VSMA0GCSqG
SIb3DQEBCwUAA4IBAQC3VMc2meWo5Y3sB6el0mNdRkL5oHbH5sg/Y7OKkVzEye4r
nvMOaCEbg+6WnNvT4bQKlhLNCpuDTARLsut2Ej3lsy879DM8C4ELlL1zEzeidKuK
FQ+8z5wUau8ucz9RyAoo0gfLnx7+dQh8N1DSl4Xo03EV0qX/rXoqhFoebgI/I35f
A2O1dXaNUGSdPz4LTBlfarMNfOzrq9Fw3nNNSO1xri8hLP+HYZNtUMjbLA0qI+3r
WM2iwoCkH+H0JpQ5N1zZtAw8bwQyqL66o0Dn9e3lvSUjv4FUo0Ve+BYXGxozJndg
pk2poILBetHs2AzYb568P+PeQtjz9hHdwuL1+71v
-----END CERTIFICATE-----
Generated at Fri May 2 11:33:00 2025 by rpki-client