Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa
File: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (raw, json)
Hash identifier: Gieaps/sVWGO4EVoaPnllxhgw2OpKbh8FOYq+URWEY4=
Subject key identifier: FD:0A:CA:8C:1A:B4:11:3D:2D:3A:DA:5C:8F:D6:F9:24:67:65:D8:1B
Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
Certificate serial: 4778BE9046D7B5C639B64A1CA1871EBDF72C9A4C
Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa
Signing time: Fri 26 Apr 2024 10:02:06 +0000
ROA not before: Fri 26 Apr 2024 09:57:06 +0000
ROA not after: Fri 25 Apr 2025 10:02:06 +0000
asID: 141903
IP address blocks: 103.164.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:78:be:90:46:d7:b5:c6:39:b6:4a:1c:a1:87:1e:bd:f7:2c:9a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
Validity
Not Before: Apr 26 09:57:06 2024 GMT
Not After : Apr 25 10:02:06 2025 GMT
Subject: CN=FD0ACA8C1AB4113D2D3ADA5C8FD6F9246765D81B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:fb:72:34:b4:c0:6d:7f:35:ad:f7:04:e9:
a0:f6:36:36:d6:d9:1c:94:b8:95:4f:9c:35:61:00:
5b:ed:ab:a8:d3:ae:e0:23:8e:b1:c9:96:9b:b9:fd:
f3:2f:27:a8:d1:11:97:5e:a4:0e:b9:cf:64:ff:ef:
72:a6:74:6a:e9:05:1d:54:e9:c1:ab:a2:41:81:cf:
e0:64:62:95:ff:2c:b5:06:3b:9d:90:fe:ab:b4:e6:
b8:b1:11:63:bc:b6:ce:1f:3a:58:44:d8:37:db:4e:
49:95:5c:fb:6c:34:b8:4f:04:2b:77:8c:6c:6f:54:
fd:73:2d:ef:0d:e0:7d:b6:51:ea:b5:34:c2:c9:af:
71:0c:ce:97:a0:25:5d:12:fc:67:94:8f:f1:ad:49:
95:73:ba:38:ef:08:41:c1:bb:20:80:5a:ce:b0:63:
36:db:02:9f:b4:67:0c:37:d1:54:f5:c0:22:94:55:
92:f9:e8:0e:ea:48:e5:f4:06:aa:59:1f:92:77:29:
42:2f:39:d1:f5:6a:12:0a:93:2e:57:ab:9f:f3:f5:
0f:ba:f1:70:5e:b2:f9:2a:fa:2c:98:a7:42:21:3e:
db:1c:39:67:95:1c:96:da:ff:cc:01:52:a7:7c:b0:
c0:8b:57:53:fd:d5:bc:ff:c6:39:8d:12:a3:2e:2a:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:CA:8C:1A:B4:11:3D:2D:3A:DA:5C:8F:D6:F9:24:67:65:D8:1B
X509v3 Authority Key Identifier:
keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.57.0/24
Signature Algorithm: sha256WithRSAEncryption
64:be:ca:1e:a8:7c:66:54:5f:1c:83:31:7b:91:30:ea:5f:36:
2d:89:5d:dc:cd:c7:b1:64:e6:86:ef:13:63:a6:51:37:90:41:
a3:47:cd:87:b6:88:7a:2d:18:79:c4:d2:77:54:13:07:da:bb:
5d:77:9a:90:24:42:e3:c9:94:ec:ef:32:1b:7e:24:4f:46:cd:
d7:88:e3:ed:2c:ce:39:b0:c0:f5:d3:75:da:68:d7:6a:51:ba:
74:35:32:1e:dd:53:94:f3:07:24:2a:5a:02:9b:fe:ed:5c:46:
c3:65:6b:78:05:bd:a4:cc:2a:27:e0:a4:07:cb:8c:e6:18:f4:
45:76:ea:77:4d:f6:e9:a0:53:6f:8a:ff:ad:6e:44:ff:07:27:
67:ee:49:4f:77:94:5b:a1:1b:aa:7a:68:c4:29:32:2e:c0:e2:
5e:ed:26:90:6e:0b:17:ed:6a:ef:61:9f:13:e4:48:ab:af:b1:
5e:f4:f7:a2:ec:a9:83:9e:43:b6:04:5c:4a:a4:37:90:c5:31:
4c:34:9a:45:54:53:bf:e4:b8:3b:d8:b4:ed:f3:2a:45:ad:6b:
11:8d:2b:02:15:5f:ec:e3:e4:86:e4:5b:a8:c2:13:da:72:60:
b7:bb:ca:43:2c:7e:c2:48:53:81:9a:e3:e4:15:1e:f6:49:85:
59:5e:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:14 2025 by rpki-client