
Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35392e302f32342d3234203d3e203137393935.roa
File: 3130332e3135382e35392e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier: pr2MBZq6g7ft4f9khoEPd8GyxWW5p8Qaxvgx0CiJp9c=
Subject key identifier: D7:0A:D2:3B:35:68:3E:84:38:21:E6:71:D8:1A:88:B1:78:9D:1A:6A
Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
Certificate serial: 401637E88F83B456788689F293A32BEE9D9A63AC
Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35392e302f32342d3234203d3e203137393935.roa
Signing time: Thu 09 May 2024 07:00:00 +0000
ROA not before: Thu 09 May 2024 06:55:00 +0000
ROA not after: Thu 08 May 2025 07:00:00 +0000
asID: 17995
IP address blocks: 103.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:16:37:e8:8f:83:b4:56:78:86:89:f2:93:a3:2b:ee:9d:9a:63:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
Validity
Not Before: May 9 06:55:00 2024 GMT
Not After : May 8 07:00:00 2025 GMT
Subject: CN=D70AD23B35683E843821E671D81A88B1789D1A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:a0:0d:86:6b:ec:20:d2:fa:d0:b6:30:25:
17:6e:24:d2:a9:ee:20:7c:b9:43:ca:0d:7a:94:41:
63:f6:3a:f5:50:7b:38:0b:27:c2:54:c2:9b:f6:74:
ce:79:db:78:ae:d1:d1:cb:cd:b1:d2:a4:08:40:03:
88:37:c4:eb:9b:c4:0a:9c:07:bc:06:a0:50:e4:d4:
85:1d:d6:6b:3f:a8:cc:6f:1b:05:72:14:07:34:a4:
4e:c9:99:d3:63:f4:02:a5:15:32:ef:2a:92:3f:ed:
0f:ac:f1:33:67:9d:80:33:c1:78:36:95:bd:57:30:
c1:6f:ca:60:c4:3c:cd:f1:d7:5e:5f:01:e4:ee:0d:
e8:1e:f1:9d:4d:38:0e:23:dc:d0:b4:5a:8c:d7:41:
3b:91:3b:29:78:65:ce:17:a6:94:11:a1:83:4c:fe:
3c:ec:ca:0a:cc:24:d6:60:db:4e:71:91:f5:e9:cd:
79:da:e3:e8:43:0d:e7:bd:03:7a:be:75:5b:19:d4:
78:84:51:94:1e:ba:f0:fb:92:57:69:36:63:e8:47:
58:01:4e:ca:0d:f9:27:11:b5:5c:6a:3d:c7:64:fa:
a7:83:6f:8a:cf:ec:0c:5a:b5:53:3f:7e:51:78:b7:
c7:9e:ac:48:06:21:18:bb:b2:7a:2d:76:da:22:c5:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0A:D2:3B:35:68:3E:84:38:21:E6:71:D8:1A:88:B1:78:9D:1A:6A
X509v3 Authority Key Identifier:
keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35392e302f32342d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:c0:0a:66:69:74:9a:04:58:6f:8b:70:58:39:94:c3:e5:ed:
ff:c7:4a:ce:aa:f7:6c:4c:aa:f2:0c:25:98:8a:2c:f3:99:dc:
65:9f:4e:b6:36:5b:c2:e1:fc:36:e2:52:65:6e:da:03:f6:f1:
b7:f1:67:8b:39:ae:30:55:2b:5d:46:1c:3e:39:bc:3e:b2:60:
7c:7f:a7:4c:dc:6c:20:2b:82:87:62:ee:23:15:e7:bf:48:f3:
d8:09:d7:c3:4c:c0:e8:07:39:25:24:80:93:80:49:48:00:ff:
eb:9c:39:c1:ac:04:1b:f0:ac:c4:a9:7f:6c:79:36:82:04:f2:
c5:1f:70:15:d2:91:70:fe:b5:35:22:cd:e4:19:29:89:3d:c8:
66:fb:7c:c8:1a:23:c2:24:2a:61:7f:cb:5c:16:c5:25:8d:52:
34:96:5c:c9:13:55:13:32:28:3c:3f:f8:d0:39:79:57:7d:b5:
b6:61:be:53:42:cf:f4:a4:77:8c:65:b3:f0:ff:e7:6a:f3:66:
ba:51:f0:8a:cd:2e:b8:77:d5:50:c0:69:2e:dc:d4:b4:aa:9b:
c3:c2:17:b7:9d:6c:99:3a:54:19:cf:8a:dd:5d:5c:01:6d:3a:
27:22:b7:30:17:d0:17:06:b6:2c:7d:09:9f:4f:85:32:36:b0:
79:78:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:12:36 2025 by rpki-client