Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa
File: 3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: zZakuOmqTaPYvlnDGqieXdb5+PUOtUVcUy3BMfF3gIo=
Subject key identifier: 55:DC:F1:9D:8D:8F:2C:A6:EF:3C:BD:6F:FD:36:F1:7E:47:A6:06:10
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 3AE14433AF1FBFA8C90DF240AB5E82F8BEC23A59
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa
Signing time: Wed 20 Nov 2024 09:00:03 +0000
ROA not before: Wed 20 Nov 2024 08:55:03 +0000
ROA not after: Wed 19 Nov 2025 09:00:03 +0000
asID: 58487
IP address blocks: 103.253.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e1:44:33:af:1f:bf:a8:c9:0d:f2:40:ab:5e:82:f8:be:c2:3a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Nov 20 08:55:03 2024 GMT
Not After : Nov 19 09:00:03 2025 GMT
Subject: CN=55DCF19D8D8F2CA6EF3CBD6FFD36F17E47A60610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:8d:33:04:bb:c2:4d:41:86:03:02:69:39:
86:10:5b:58:91:6f:65:1d:cd:0c:c6:14:92:a6:a6:
ad:dc:d4:da:d2:f0:98:4b:9b:65:04:c4:e3:d0:b5:
80:64:05:c8:92:c0:d3:bc:6d:ae:90:f3:d1:f3:39:
e5:8f:fe:d0:55:e8:16:c9:24:25:c8:fb:8f:60:16:
34:80:28:4b:97:04:d4:07:32:c3:64:32:9e:cd:a8:
51:53:ca:67:87:49:50:9c:c3:bd:97:cb:35:15:11:
f7:4c:cc:0e:32:86:88:8a:d9:b0:1a:0d:57:9b:26:
f8:d6:3d:8e:e8:42:0b:b4:d7:43:f3:06:db:cf:7b:
73:71:13:52:e2:ee:79:79:8f:48:e2:54:31:5d:af:
61:74:57:4e:56:3e:24:61:22:a2:d2:f8:1c:8e:4c:
d0:df:24:0e:65:fa:8f:92:55:8d:f3:2c:44:38:b6:
4d:e4:63:99:a3:82:13:cb:f1:5d:91:21:58:47:8a:
50:62:26:ea:b0:9b:06:59:43:67:3d:ec:4b:f1:d5:
16:d9:08:80:3c:9a:78:a7:e4:91:bc:e6:5c:dc:63:
d8:70:6b:25:12:cc:a5:62:5f:b6:0e:2b:6e:1f:dd:
b3:bf:ec:00:5e:3c:63:94:f4:5b:11:b1:73:98:85:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DC:F1:9D:8D:8F:2C:A6:EF:3C:BD:6F:FD:36:F1:7E:47:A6:06:10
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.253.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:77:ba:b6:a9:34:b7:ab:61:ce:86:90:af:3a:36:38:da:cd:
f5:73:51:49:62:cb:15:31:f6:6b:cd:a9:a5:86:1a:88:7d:5e:
a3:37:8e:b9:2a:c9:51:bd:44:9b:cf:f8:7b:85:a6:52:db:cc:
9a:e3:47:ae:9a:09:78:89:2f:d9:73:4c:00:ad:23:df:48:6a:
53:12:03:00:0c:19:53:2d:83:66:bc:2e:0f:36:d7:40:5b:7c:
8f:11:67:ca:12:01:78:ff:8e:33:be:24:f0:4f:73:00:ac:c2:
b7:5c:58:4a:cc:73:fb:19:72:88:a9:6e:55:b2:2b:3e:98:3f:
33:53:fe:ca:61:86:cf:b5:8e:c5:13:a8:bb:fc:38:69:db:88:
bc:8d:f9:03:eb:11:c0:42:eb:e5:18:7a:17:40:84:16:6c:ab:
e3:d6:84:d9:d8:1a:7c:09:e5:8c:89:46:f6:d2:33:22:96:0e:
4d:3b:c9:30:57:08:aa:68:bb:cb:f3:40:c6:99:33:9d:d6:5f:
2f:ec:2d:d6:3c:2b:f1:20:4a:43:85:0c:18:89:e9:bc:22:70:
43:4a:50:e3:39:3f:f6:93:75:9d:c8:6c:13:16:46:2d:17:4e:
13:1a:39:20:c9:30:e6:44:3b:ea:df:3b:80:76:6a:92:a7:66:
71:e8:55:b5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOuFEM68fv6jJDfJAq16C+L7COlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5
MkFBQkU2RTAeFw0yNDExMjAwODU1MDNaFw0yNTExMTkwOTAwMDNaMDMxMTAvBgNV
BAMTKDU1RENGMTlEOEQ4RjJDQTZFRjNDQkQ2RkZEMzZGMTdFNDdBNjA2MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7Y0zBLvCTUGGAwJpOYYQW1iR
b2UdzQzGFJKmpq3c1NrS8JhLm2UExOPQtYBkBciSwNO8ba6Q89HzOeWP/tBV6BbJ
JCXI+49gFjSAKEuXBNQHMsNkMp7NqFFTymeHSVCcw72XyzUVEfdMzA4yhoiK2bAa
DVebJvjWPY7oQgu010PzBtvPe3NxE1Li7nl5j0jiVDFdr2F0V05WPiRhIqLS+ByO
TNDfJA5l+o+SVY3zLEQ4tk3kY5mjghPL8V2RIVhHilBiJuqwmwZZQ2c97Evx1RbZ
CIA8mnin5JG85lzcY9hwayUSzKViX7YOK24f3bO/7ABePGOU9FsRsXOYhZ6FAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVdzxnY2PLKbvPL1v/TbxfkemBhAwHwYDVR0j
BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx
NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB
QkU2RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05
N2ZkLWY2MWFiMTdkZWVlZC8wLzMxMzAzMzJlMzIzNTMzMmUzMjMxMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/3WMA0GCSqG
SIb3DQEBCwUAA4IBAQCld7q2qTS3q2HOhpCvOjY42s31c1FJYssVMfZrzamlhhqI
fV6jN465KslRvUSbz/h7haZS28ya40eumgl4iS/Zc0wArSPfSGpTEgMADBlTLYNm
vC4PNtdAW3yPEWfKEgF4/44zviTwT3MArMK3XFhKzHP7GXKIqW5Vsis+mD8zU/7K
YYbPtY7FE6i7/Dhp24i8jfkD6xHAQuvlGHoXQIQWbKvj1oTZ2Bp8CeWMiUb20jMi
lg5NO8kwVwiqaLvL80DGmTOd1l8v7C3WPCvxIEpDhQwYiem8InBDSlDjOT/2k3Wd
yGwTFkYtF04TGjkgyTDmRDvq3zuAdmqSp2Zx6FW1
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:02 2025 by rpki-client