Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa
File: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (raw, json)
Hash identifier: BCXvxmyioKQvXTQ7T8iVRvqkwhqhpqQP5I9ID9+agWk=
Subject key identifier: FD:75:D4:1D:69:96:BE:33:9E:CB:89:DF:44:13:69:0A:8A:38:49:F8
Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF
Certificate serial: 5299E63967D5EABD4DE982C9BA2306F6CDE50B07
Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa
Signing time: Fri 11 Oct 2024 10:00:00 +0000
ROA not before: Fri 11 Oct 2024 09:55:00 +0000
ROA not after: Fri 10 Oct 2025 10:00:00 +0000
asID: 149395
IP address blocks: 103.181.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:99:e6:39:67:d5:ea:bd:4d:e9:82:c9:ba:23:06:f6:cd:e5:0b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF
Validity
Not Before: Oct 11 09:55:00 2024 GMT
Not After : Oct 10 10:00:00 2025 GMT
Subject: CN=FD75D41D6996BE339ECB89DF4413690A8A3849F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:05:79:fe:71:28:1f:7f:21:c1:e6:26:8a:
05:d4:cd:93:e0:03:e8:9f:50:ef:5f:48:fb:04:74:
34:cd:6e:a5:22:3d:e1:bf:62:fe:f9:b8:ec:17:1d:
b6:20:26:6c:0b:71:09:75:43:e4:20:2e:11:05:0d:
16:77:89:19:13:ed:62:1c:5f:7d:bd:77:cc:a7:39:
b2:e3:b9:c4:bd:1c:f3:85:a4:a1:0c:9b:d1:7e:9e:
c6:d7:1b:60:4d:51:7d:cb:5a:76:8d:14:4f:84:1f:
e7:d0:4c:3e:5d:c2:30:c5:78:2d:6c:e6:0d:5b:a0:
62:3b:00:f2:58:bc:e8:91:b0:50:87:eb:01:68:ed:
b0:a6:0d:72:3c:22:d0:d1:a4:52:2f:1f:9c:06:12:
21:f7:a2:2f:91:bd:34:dd:6c:50:a5:5b:0b:29:35:
3c:f6:dd:b1:4e:16:4e:76:ef:7b:5d:54:52:86:ab:
2b:43:29:35:ae:94:f9:27:d4:94:ff:e4:b7:d5:a3:
80:e2:e0:a5:4a:da:4f:19:93:85:72:fb:2c:41:95:
a0:fe:9c:76:9d:98:a6:ad:a5:44:66:04:cf:b1:68:
75:90:d2:37:34:6a:ae:63:01:d3:c9:a7:79:45:a2:
8b:1e:c8:5c:56:11:11:1b:8b:f0:52:52:c3:a0:3d:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:75:D4:1D:69:96:BE:33:9E:CB:89:DF:44:13:69:0A:8A:38:49:F8
X509v3 Authority Key Identifier:
keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.247.0/24
Signature Algorithm: sha256WithRSAEncryption
03:61:41:bd:bc:0e:49:4d:0c:bf:20:9a:45:3f:2b:04:2d:26:
0b:e1:8d:84:5c:78:62:40:33:b2:dd:7b:17:3a:1e:a8:10:78:
23:8b:71:62:66:98:c3:86:62:da:09:3a:10:14:66:97:d7:ac:
19:fb:51:24:08:55:e0:c1:92:3f:56:fe:92:af:29:5d:91:1f:
a1:b2:fd:f6:59:9b:ce:fb:6a:a2:4c:58:6e:22:7f:ff:06:14:
91:08:ba:5d:d9:cd:ae:cc:da:08:03:a2:22:9c:e8:d3:a6:31:
bb:17:4e:0d:92:07:ab:86:1c:e9:2f:ce:09:77:49:f8:5a:08:
6b:aa:7e:d0:aa:eb:0b:e5:06:8d:8e:8f:c6:c8:07:7c:bf:72:
16:4b:81:62:3d:91:b7:b4:2b:fc:ad:5a:37:b7:e1:07:23:1e:
fd:44:9f:16:a5:73:fa:1c:e6:35:8a:a8:0f:25:76:c5:c0:fb:
b0:87:15:eb:24:f2:ba:78:8b:82:d5:c0:c0:70:90:32:5c:c4:
bd:0f:54:72:cb:e5:03:0c:18:9d:57:92:85:e7:8c:68:39:ca:
79:f7:4f:37:e3:25:bf:51:ba:b3:99:f3:c2:e8:eb:85:3a:29:
b6:5b:79:70:a4:c9:36:f1:27:b3:6e:5d:1d:bb:9d:fb:fa:1c:
79:7d:cc:2a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUUpnmOWfV6r1N6YLJuiMG9s3lCwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE
NkY3M0ZBRjAeFw0yNDEwMTEwOTU1MDBaFw0yNTEwMTAxMDAwMDBaMDMxMTAvBgNV
BAMTKEZENzVENDFENjk5NkJFMzM5RUNCODlERjQ0MTM2OTBBOEEzODQ5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswAV5/nEoH38hweYmigXUzZPg
A+ifUO9fSPsEdDTNbqUiPeG/Yv75uOwXHbYgJmwLcQl1Q+QgLhEFDRZ3iRkT7WIc
X329d8ynObLjucS9HPOFpKEMm9F+nsbXG2BNUX3LWnaNFE+EH+fQTD5dwjDFeC1s
5g1boGI7APJYvOiRsFCH6wFo7bCmDXI8ItDRpFIvH5wGEiH3oi+RvTTdbFClWwsp
NTz23bFOFk5273tdVFKGqytDKTWulPkn1JT/5LfVo4Di4KVK2k8Zk4Vy+yxBlaD+
nHadmKatpURmBM+xaHWQ0jc0aq5jAdPJp3lFooseyFxWEREbi/BSUsOgPSplAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU/XXUHWmWvjOey4nfRBNpCoo4SfgwHwYDVR0j
BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE
MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3
M0ZBRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0MWUwOGVmLTNhZTYtNGI5MC1i
NDc3LTBlOTE0MGQwNDM4MC8wLzMxMzAzMzJlMzEzODMxMmUzMjM0MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntfcwDQYJ
KoZIhvcNAQELBQADggEBAANhQb28DklNDL8gmkU/KwQtJgvhjYRceGJAM7Ldexc6
HqgQeCOLcWJmmMOGYtoJOhAUZpfXrBn7USQIVeDBkj9W/pKvKV2RH6Gy/fZZm877
aqJMWG4if/8GFJEIul3Zza7M2ggDoiKc6NOmMbsXTg2SB6uGHOkvzgl3SfhaCGuq
ftCq6wvlBo2Oj8bIB3y/chZLgWI9kbe0K/ytWje34QcjHv1Enxalc/oc5jWKqA8l
dsXA+7CHFesk8rp4i4LVwMBwkDJcxL0PVHLL5QMMGJ1XkoXnjGg5ynn3TzfjJb9R
urOZ88Lo64U6KbZbeXCkyTbxJ7NuXR27nfv6HHl9zCo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:30 2025 by rpki-client