Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa
File: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (raw, json)
Hash identifier: azDSVX9i8HZjqEfBIl+w+5YuBBlGa6YC2bdRufGVGvU=
Subject key identifier: 70:01:02:F0:67:52:B3:51:A0:75:B9:64:86:C5:B9:17:3C:8B:7F:71
Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial: 79C756D2DB384C011B7C22737D0612FCB10052FB
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa
Signing time: Tue 16 Apr 2024 07:00:02 +0000
ROA not before: Tue 16 Apr 2024 06:55:02 +0000
ROA not after: Tue 15 Apr 2025 07:00:02 +0000
asID: 141907
IP address blocks: 103.163.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c7:56:d2:db:38:4c:01:1b:7c:22:73:7d:06:12:fc:b1:00:52:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Validity
Not Before: Apr 16 06:55:02 2024 GMT
Not After : Apr 15 07:00:02 2025 GMT
Subject: CN=700102F06752B351A075B96486C5B9173C8B7F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:57:6d:a4:af:98:6c:b9:da:db:00:65:7f:
9f:f2:09:36:5f:a1:b6:28:6e:d7:00:63:95:67:28:
74:2d:e0:ed:2a:d2:0f:40:d2:d9:8b:d6:e0:31:20:
0e:91:b4:21:b8:17:71:5e:67:90:6c:d5:a0:36:03:
1a:82:18:cf:b9:17:7a:ca:36:51:4a:3d:36:04:12:
c8:3f:44:9e:04:c1:a5:07:00:5c:ff:52:19:86:18:
2f:4e:fe:84:c7:f8:9c:6e:ec:c7:66:a8:19:5d:f2:
00:5f:43:f8:a9:8e:c2:33:f0:ab:22:d0:d3:a3:db:
77:97:50:85:38:43:8c:b1:25:f3:08:d4:29:87:54:
8e:8c:0d:f5:e9:3b:9d:5b:5a:c7:b4:81:46:19:31:
18:38:6e:ea:f7:23:15:6c:14:3f:d4:44:dd:3d:b2:
21:d3:e6:32:2b:8e:88:3b:ef:aa:79:89:49:95:23:
be:e3:85:0c:1f:2b:ad:91:14:be:f5:53:88:23:b6:
ac:94:36:b7:f6:2a:21:08:68:67:76:89:ec:1c:6e:
18:64:bc:0c:45:de:25:a0:da:76:2e:cc:d5:2e:b6:
c7:20:6b:ca:e7:dc:4b:e6:b2:ca:d5:94:ff:27:a0:
f6:8e:bd:78:6c:f6:c8:12:d4:f1:bb:4c:6e:d0:51:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:01:02:F0:67:52:B3:51:A0:75:B9:64:86:C5:B9:17:3C:8B:7F:71
X509v3 Authority Key Identifier:
keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e4:e0:29:8d:c5:e3:40:cf:2a:27:d0:f7:ca:2e:51:e3:fa:
25:4f:52:31:23:d9:56:ec:de:5c:f9:46:1d:1f:7e:4f:43:5e:
41:b1:e1:00:71:38:70:12:3e:f5:d0:fa:f9:09:12:ee:c4:5a:
61:b7:61:01:70:9b:d9:88:40:cf:63:62:30:6a:3a:8c:ba:25:
46:ba:f6:ea:c8:e7:97:06:89:d0:3e:1d:74:b6:95:cb:32:1f:
90:4c:ce:c4:8e:29:21:df:e5:52:a7:18:4f:fc:00:6b:62:59:
3e:34:01:ab:43:19:6d:42:a1:e5:e3:e6:b0:fb:f2:e9:5f:56:
ad:4b:4d:86:e7:5d:73:79:36:68:de:0e:9f:ce:d9:3f:9e:68:
95:11:98:1d:8c:0f:02:af:4f:f8:a3:cd:02:10:32:03:ca:a6:
a1:b3:04:cb:e2:de:2f:96:be:9f:81:0b:cb:65:cb:f6:6b:99:
5f:81:a5:66:47:df:db:51:9c:7b:b6:45:3a:d0:f0:3f:48:2e:
0f:97:ba:83:16:31:c1:a6:f1:e9:f5:ce:49:3c:5a:28:26:34:
6c:d7:8f:c7:69:1a:44:ec:88:5d:ef:e1:c4:41:59:ae:17:bc:
dd:36:42:50:a8:82:62:47:50:8f:a5:a2:23:f2:bf:3e:b1:57:
30:a1:dd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:09:24 2025 by rpki-client