Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa
File: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (raw, json)
Hash identifier: KW5knR4ALt6hLV7qJyhXL5J0Aia4lk+P8+shKebFztw=
Subject key identifier: C3:D7:1D:72:09:EA:7A:8D:51:71:C1:87:A3:8C:6D:75:3E:81:74:59
Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Certificate serial: 2362EF47EDFE30C0BAF015C0C3C753573D42A927
Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa
Signing time: Tue 17 Dec 2024 16:00:00 +0000
ROA not before: Tue 17 Dec 2024 15:55:00 +0000
ROA not after: Tue 16 Dec 2025 16:00:00 +0000
asID: 141613
IP address blocks: 103.161.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:62:ef:47:ed:fe:30:c0:ba:f0:15:c0:c3:c7:53:57:3d:42:a9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Validity
Not Before: Dec 17 15:55:00 2024 GMT
Not After : Dec 16 16:00:00 2025 GMT
Subject: CN=C3D71D7209EA7A8D5171C187A38C6D753E817459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:57:12:b9:38:be:96:ef:46:1a:3d:a3:e8:
cf:66:fe:9f:5e:ab:c9:ea:a0:46:02:49:72:c9:7b:
43:5f:14:93:e7:a3:9b:1b:2d:16:0d:c4:1a:17:60:
c9:83:79:8a:1a:1d:da:fa:1c:30:fc:a6:3e:77:f7:
e0:29:ca:46:37:63:26:73:0d:9c:68:a9:7e:4d:10:
e4:d2:07:05:80:22:de:f5:7e:60:94:15:08:29:6c:
78:ff:e7:d4:ea:94:1b:2d:15:62:bc:cb:7d:61:18:
eb:ae:2a:51:b4:3b:9c:00:8c:f3:b0:7f:f0:e7:94:
db:ae:a6:15:fc:11:40:17:c4:be:0d:f1:0b:30:55:
1b:b1:25:42:17:c4:96:eb:92:5a:82:7e:d6:15:b8:
bb:a4:22:b3:4a:60:44:b3:7e:da:be:82:b2:d1:b4:
74:d5:dd:1d:a7:e0:3e:4f:88:52:1e:d1:a1:41:8b:
e8:68:a1:ca:fa:c8:c8:57:a8:b1:68:17:a8:86:e8:
51:e3:3c:8c:57:9b:22:58:02:d3:41:d7:86:6a:1f:
54:dd:f9:19:08:61:af:bb:30:77:ed:4f:1b:41:3e:
8a:77:f2:a8:40:4d:88:cf:29:ce:a5:e3:45:02:31:
b3:dd:15:2c:93:08:7c:77:c5:53:45:5f:1e:15:75:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:1D:72:09:EA:7A:8D:51:71:C1:87:A3:8C:6D:75:3E:81:74:59
X509v3 Authority Key Identifier:
keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.130.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:b9:70:fa:23:a5:f8:30:2a:6d:92:73:77:d6:25:71:5f:03:
e2:8e:05:6a:8f:ab:d8:1c:ba:d4:ad:b5:3e:58:b6:26:4d:cf:
58:29:1a:62:74:b3:cf:42:ae:98:ed:3c:b9:91:47:74:5d:60:
0a:d4:4f:84:50:dd:cf:45:09:05:5c:76:e9:18:6e:2a:95:97:
fc:99:11:59:37:e2:30:77:9d:cb:e4:86:f7:d9:67:5b:8a:0f:
2a:a0:20:82:7b:1d:ad:04:9f:5f:f8:e7:bf:fc:36:eb:7e:07:
2f:ea:64:9b:56:bc:dd:ec:e2:63:ae:b7:53:dc:56:c8:97:c0:
a4:fe:d9:40:20:29:a8:52:82:4d:fe:98:55:51:3b:a1:ca:85:
1a:38:0d:a7:ce:72:03:26:79:54:64:b8:76:12:c4:d6:ad:dd:
ec:35:28:b1:9a:be:b7:2b:63:3e:82:c2:64:7d:ce:e2:f8:55:
8f:3a:84:af:d7:6e:25:a6:77:48:0d:16:69:d5:67:14:28:22:
fe:a8:45:93:5f:02:77:c6:6f:c3:5d:9c:a2:5c:e2:01:7e:54:
91:08:b1:88:23:a6:f0:dc:2a:ec:90:32:22:1f:de:da:d5:c8:
71:a2:af:da:51:42:e6:d3:ae:27:a9:98:65:5c:12:70:cc:a1:
13:39:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:22 2025 by rpki-client