Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3234203d3e203338333230.roa
File: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier: UZJGRzZKkVB/K4lD1yRKScQ+jSrTmsieVQyYpXH1XWo=
Subject key identifier: 3F:73:B2:E8:0F:01:0B:37:D3:03:E4:3E:82:B0:80:A2:C3:BE:77:8D
Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
Certificate serial: 79DC4FBD0E019980A5570C8A42349B71D61DBDD7
Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3234203d3e203338333230.roa
Signing time: Mon 27 May 2024 09:02:07 +0000
ROA not before: Mon 27 May 2024 08:57:07 +0000
ROA not after: Mon 26 May 2025 09:02:07 +0000
asID: 38320
IP address blocks: 103.169.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:dc:4f:bd:0e:01:99:80:a5:57:0c:8a:42:34:9b:71:d6:1d:bd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
Validity
Not Before: May 27 08:57:07 2024 GMT
Not After : May 26 09:02:07 2025 GMT
Subject: CN=3F73B2E80F010B37D303E43E82B080A2C3BE778D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:95:eb:4a:52:50:b3:50:e8:77:c6:62:b9:
83:7a:9d:ac:84:91:02:df:c3:f4:e7:40:e3:8d:a2:
78:95:88:2f:f6:21:24:f4:35:8a:c4:c7:68:5c:24:
6c:ec:cd:01:e2:db:0d:0a:34:e7:44:cd:1f:bf:2f:
84:3e:b9:43:7f:4c:18:aa:45:81:ac:19:db:4d:18:
1b:7a:f3:77:d1:65:dc:70:65:75:e2:ae:bd:d9:cc:
31:be:f6:54:7a:79:51:50:7e:25:38:61:e4:b9:b1:
91:74:e9:fc:90:f8:e0:8f:61:d0:da:eb:3f:fa:a8:
40:51:74:d9:3d:a6:c1:56:5f:b7:0e:36:a6:e5:62:
9f:a0:50:08:bb:93:c8:df:e9:ce:af:b6:90:8c:b9:
ba:e2:9b:21:14:13:64:d5:54:aa:b8:bd:3e:c9:86:
57:0e:ca:20:bf:7c:a0:ce:3e:ae:5a:86:55:b2:a2:
c3:92:ed:3f:4a:62:53:d4:1d:bf:53:13:c8:46:5f:
2c:5e:c7:cd:c9:6a:80:c0:b4:ea:a8:f1:2c:a8:13:
75:0b:41:d9:52:0f:04:9d:51:56:19:cf:10:84:f6:
73:95:86:2c:ab:1c:18:09:95:00:5f:65:9c:25:cb:
50:34:8e:ce:7b:49:99:c4:a6:db:00:27:17:c5:7a:
b3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:B2:E8:0F:01:0B:37:D3:03:E4:3E:82:B0:80:A2:C3:BE:77:8D
X509v3 Authority Key Identifier:
keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.72.0/23
Signature Algorithm: sha256WithRSAEncryption
39:e0:0f:3b:78:58:4f:ba:cf:51:4b:20:18:58:3a:7f:33:70:
b3:8e:47:74:d6:c0:1c:bb:94:3d:a1:f2:4f:a8:e8:b7:d7:87:
15:5a:0f:98:ad:d7:29:ed:30:0e:86:94:55:d0:28:ac:de:0e:
24:55:b6:65:18:ed:c1:39:89:d7:69:c6:92:b9:b0:27:c2:f0:
71:1f:5e:4d:ca:15:b2:b7:13:74:2b:e9:24:5c:6c:d9:ad:a5:
8d:b2:65:c5:a5:4b:f9:8a:40:4a:05:c0:79:9f:4c:af:7f:2a:
bd:14:d6:7f:42:24:5a:b5:90:79:ae:9a:0e:29:66:5a:e5:1a:
66:b2:62:52:9a:db:c8:7e:bc:8a:32:cd:ad:58:ff:d9:8b:f0:
1e:25:b5:7e:70:5a:ea:3b:9d:d0:bd:88:04:63:3b:cf:5a:b6:
d9:36:ae:59:cd:af:2d:1f:3d:20:6b:6d:41:24:d4:91:46:ac:
59:af:8b:85:f5:a2:fb:7c:44:30:9c:eb:d3:91:d5:2d:00:a9:
17:47:47:82:98:a0:72:c7:4b:1e:64:67:d2:ca:a0:8b:c0:e2:
8c:d9:17:1a:37:21:d1:40:c6:23:0b:93:78:05:d9:21:07:10:
9e:2b:0e:b5:4f:1c:bd:54:98:88:f0:d8:75:ff:be:c8:a3:5b:
2b:bb:fa:86
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUedxPvQ4BmYClVwyKQjSbcdYdvdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz
QzU3RDM2NjAeFw0yNDA1MjcwODU3MDdaFw0yNTA1MjYwOTAyMDdaMDMxMTAvBgNV
BAMTKDNGNzNCMkU4MEYwMTBCMzdEMzAzRTQzRTgyQjA4MEEyQzNCRTc3OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhZXrSlJQs1Dod8ZiuYN6nayE
kQLfw/TnQOONoniViC/2IST0NYrEx2hcJGzszQHi2w0KNOdEzR+/L4Q+uUN/TBiq
RYGsGdtNGBt683fRZdxwZXXirr3ZzDG+9lR6eVFQfiU4YeS5sZF06fyQ+OCPYdDa
6z/6qEBRdNk9psFWX7cONqblYp+gUAi7k8jf6c6vtpCMubrimyEUE2TVVKq4vT7J
hlcOyiC/fKDOPq5ahlWyosOS7T9KYlPUHb9TE8hGXyxex83JaoDAtOqo8SyoE3UL
QdlSDwSdUVYZzxCE9nOVhiyrHBgJlQBfZZwly1A0js57SZnEptsAJxfFerNRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUP3Oy6A8BCzfTA+Q+grCAosO+d40wHwYDVR0j
BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC
MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3
RDM2Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0MWEwMmU2LTIxNzEtNDdjOS04
NmM5LWQ1ZDgwZjQ1ODgzNi8wLzMxMzAzMzJlMzEzNjM5MmUzNzMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWepSDANBgkqhkiG
9w0BAQsFAAOCAQEAOeAPO3hYT7rPUUsgGFg6fzNws45HdNbAHLuUPaHyT6jot9eH
FVoPmK3XKe0wDoaUVdAorN4OJFW2ZRjtwTmJ12nGkrmwJ8LwcR9eTcoVsrcTdCvp
JFxs2a2ljbJlxaVL+YpASgXAeZ9Mr38qvRTWf0IkWrWQea6aDilmWuUaZrJiUprb
yH68ijLNrVj/2YvwHiW1fnBa6jud0L2IBGM7z1q22TauWc2vLR89IGttQSTUkUas
Wa+LhfWi+3xEMJzr05HVLQCpF0dHgpigcsdLHmRn0sqgi8DijNkXGjch0UDGIwuT
eAXZIQcQnisOtU8cvVSYiPDYdf++yKNbK7v6hg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:05 2025 by rpki-client