Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa
File: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (raw, json)
Hash identifier: +Inku8JbbUNqeg+Ljrd5Bs7t4gp+eduAPT8HbuOG6qQ=
Subject key identifier: AB:94:BF:88:09:BD:90:5B:6D:A9:89:4A:A8:47:1D:6A:38:E0:4F:3A
Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF
Certificate serial: 0F2EE0110422A384F0005B11DC93447DCE53A4AB
Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa
Signing time: Wed 15 May 2024 11:00:01 +0000
ROA not before: Wed 15 May 2024 10:55:01 +0000
ROA not after: Wed 14 May 2025 11:00:01 +0000
asID: 150968
IP address blocks: 103.123.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2e:e0:11:04:22:a3:84:f0:00:5b:11:dc:93:44:7d:ce:53:a4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF
Validity
Not Before: May 15 10:55:01 2024 GMT
Not After : May 14 11:00:01 2025 GMT
Subject: CN=AB94BF8809BD905B6DA9894AA8471D6A38E04F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:d0:d5:3f:32:aa:eb:47:47:9c:50:98:b3:
74:4d:bd:aa:e4:7e:bc:f9:e6:25:d8:46:f5:fa:61:
94:ba:9f:ff:11:ed:bf:cf:a7:d6:96:ee:e0:4e:c1:
9d:60:e4:2d:13:91:ce:59:2d:d1:b5:ce:24:50:95:
64:ca:d6:5c:2c:86:86:66:e4:2f:34:02:ef:4d:0c:
53:ac:50:c9:04:5f:4d:b9:c1:50:60:0f:14:27:2c:
c2:f9:cf:04:89:1d:9e:fc:55:37:61:3a:48:1c:6f:
92:4b:46:fe:ea:24:2b:b8:4b:df:3c:49:75:3b:a3:
f9:11:a5:5d:5b:20:cf:91:cd:0a:8e:2b:6c:fd:2e:
e1:9e:7d:02:c6:3b:25:6c:07:e7:12:67:2f:cc:9a:
c5:68:94:4b:c4:3b:13:4a:af:a5:e4:d7:9f:3a:ef:
ed:06:ca:26:f0:9e:e5:3c:88:dc:94:35:5a:a7:1b:
a3:8a:69:3c:ba:48:2a:2c:df:53:04:43:fb:98:fd:
ad:00:02:b7:4b:5b:3a:39:87:c9:16:b3:1d:12:e5:
6a:6c:68:b8:3d:af:6a:dc:4a:88:46:df:aa:86:cc:
9e:df:ad:05:69:78:d9:cb:cb:ab:a8:45:62:56:10:
83:76:3f:2c:25:e0:c3:99:f8:26:05:e5:79:9e:74:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:94:BF:88:09:BD:90:5B:6D:A9:89:4A:A8:47:1D:6A:38:E0:4F:3A
X509v3 Authority Key Identifier:
keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.174.0/23
Signature Algorithm: sha256WithRSAEncryption
67:fc:0d:06:ab:d0:32:6c:28:ed:a5:3e:00:ea:cb:46:31:8c:
a6:7c:be:de:3f:d8:8a:21:3f:0e:91:42:0b:96:e1:b8:42:3e:
cc:2d:dc:dc:11:fb:8f:8c:76:18:5e:ba:7d:14:f7:b9:1f:64:
e0:05:a0:1c:e6:dc:2e:b9:a9:c0:46:32:ab:79:36:4c:16:fe:
76:10:bc:3c:a8:7d:a9:17:06:a1:cc:2a:04:af:7e:77:64:d4:
9a:56:21:eb:ad:8d:4e:bd:f7:86:14:94:6b:86:1c:2f:5b:16:
31:fc:13:83:e0:3c:5e:59:4f:b1:e9:1e:8f:c9:7b:ca:e6:8b:
c4:ef:64:18:9a:dd:f5:f4:ac:ab:f7:93:97:31:68:ba:89:eb:
1c:1b:2b:30:c7:0d:20:a2:af:75:2b:86:d0:cd:1a:45:b1:05:
88:63:70:dc:f3:96:ec:cb:9f:12:da:0e:86:b0:12:a2:37:82:
d6:26:e3:e5:c9:fa:75:31:b4:7e:96:0c:21:a5:63:61:e1:1e:
69:19:ee:19:38:9e:2f:af:39:2d:27:61:6a:f5:ea:e7:1f:47:
4d:8c:58:ea:23:f4:43:9e:e8:20:f7:d2:59:f8:a1:b7:1f:e6:
61:a7:c3:7f:5f:43:18:fc:69:22:f4:3e:da:be:4f:8a:39:7d:
34:23:78:d6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUDy7gEQQio4TwAFsR3JNEfc5TpKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw
MTEzQkRFRjAeFw0yNDA1MTUxMDU1MDFaFw0yNTA1MTQxMTAwMDFaMDMxMTAvBgNV
BAMTKEFCOTRCRjg4MDlCRDkwNUI2REE5ODk0QUE4NDcxRDZBMzhFMDRGM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CNDVPzKq60dHnFCYs3RNvark
frz55iXYRvX6YZS6n/8R7b/Pp9aW7uBOwZ1g5C0Tkc5ZLdG1ziRQlWTK1lwshoZm
5C80Au9NDFOsUMkEX025wVBgDxQnLML5zwSJHZ78VTdhOkgcb5JLRv7qJCu4S988
SXU7o/kRpV1bIM+RzQqOK2z9LuGefQLGOyVsB+cSZy/MmsVolEvEOxNKr6Xk1586
7+0GyibwnuU8iNyUNVqnG6OKaTy6SCos31MEQ/uY/a0AArdLWzo5h8kWsx0S5Wps
aLg9r2rcSohG36qGzJ7frQVpeNnLy6uoRWJWEIN2Pywl4MOZ+CYF5XmedLshAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUq5S/iAm9kFttqYlKqEcdajjgTzowHwYDVR0j
BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF
NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz
QkRFRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZWRiMjhmLWYzZjktNDE5OS04
NWEzLWM5YmY5YTdhN2RmOC8wLzMxMzAzMzJlMzEzMjMzMmUzMTM3MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzAzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFne64wDQYJ
KoZIhvcNAQELBQADggEBAGf8DQar0DJsKO2lPgDqy0YxjKZ8vt4/2IohPw6RQguW
4bhCPswt3NwR+4+Mdhheun0U97kfZOAFoBzm3C65qcBGMqt5NkwW/nYQvDyofakX
BqHMKgSvfndk1JpWIeutjU6994YUlGuGHC9bFjH8E4PgPF5ZT7HpHo/Je8rmi8Tv
ZBia3fX0rKv3k5cxaLqJ6xwbKzDHDSCir3UrhtDNGkWxBYhjcNzzluzLnxLaDoaw
EqI3gtYm4+XJ+nUxtH6WDCGlY2HhHmkZ7hk4ni+vOS0nYWr16ucfR02MWOoj9EOe
6CD30ln4obcf5mGnw39fQxj8aSL0Ptq+T4o5fTQjeNY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:47 2025 by rpki-client