Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa
File: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (raw, json)
Hash identifier: KeyqYwWRulk+OFOsVfZqlpRSGJ0ZS+rCEYgeptsrcsk=
Subject key identifier: AC:55:0A:89:A9:B8:44:CF:56:C8:3F:F2:4A:02:09:F3:58:21:A2:5A
Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial: 1DEC4A45E44E365EBD2D88F5E81ECCA7CC29B4FB
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa
Signing time: Sat 30 Mar 2024 04:00:37 +0000
ROA not before: Sat 30 Mar 2024 03:55:37 +0000
ROA not after: Sat 29 Mar 2025 04:00:37 +0000
asID: 135462
IP address blocks: 103.70.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ec:4a:45:e4:4e:36:5e:bd:2d:88:f5:e8:1e:cc:a7:cc:29:b4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Validity
Not Before: Mar 30 03:55:37 2024 GMT
Not After : Mar 29 04:00:37 2025 GMT
Subject: CN=AC550A89A9B844CF56C83FF24A0209F35821A25A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:83:91:ba:24:83:bd:3c:18:52:2d:e6:22:
93:61:dd:58:07:bd:15:b6:a8:84:a9:36:df:aa:d3:
44:92:30:f0:a2:17:4b:e7:91:6d:50:31:fb:73:b9:
5a:61:57:5a:a9:80:e3:6d:52:8d:1e:34:62:c5:6d:
be:db:40:6c:d2:07:79:fd:79:b8:bd:e4:aa:b7:13:
1c:3d:6c:7c:18:6e:98:8b:63:d1:2f:b4:39:c7:2e:
4b:ea:c3:e0:0e:70:52:16:d9:94:e1:f8:2f:21:c2:
74:0c:a3:e9:03:6e:46:c9:90:50:e3:59:64:27:d0:
45:48:e9:46:e4:9c:63:b3:34:51:d9:e2:20:24:d1:
78:57:c9:af:59:4a:dd:16:d8:ea:8d:e2:2a:6c:d0:
59:f8:cc:d5:4a:ae:5e:e7:d4:1a:64:ee:1a:19:d5:
f1:cb:54:8d:68:ec:7d:de:1a:c9:dd:74:9a:2b:7f:
d9:af:e0:c1:75:19:f5:f7:b5:6e:f2:5e:72:59:3e:
ca:1a:3d:15:c0:bb:30:5c:4f:ae:c2:a2:1b:94:7a:
3f:f4:5e:5e:9a:50:3f:4e:c0:3a:47:d6:48:66:3f:
28:fe:f1:be:ae:fb:7d:f4:c3:06:5d:d1:56:13:f1:
8a:82:56:69:a8:fc:30:17:dd:a5:b8:49:51:a0:01:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:55:0A:89:A9:B8:44:CF:56:C8:3F:F2:4A:02:09:F3:58:21:A2:5A
X509v3 Authority Key Identifier:
keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.70.16.0/24
Signature Algorithm: sha256WithRSAEncryption
15:46:96:04:ee:00:71:74:c2:c5:73:95:0f:53:b0:9d:64:1b:
7c:0c:e7:94:e5:7b:37:42:55:aa:0e:27:1b:bc:18:ad:75:2e:
0d:db:60:93:d6:ee:83:3f:03:16:8b:05:fe:3b:59:e0:06:4e:
21:c7:8e:cd:05:f1:4b:5f:5d:83:29:ad:71:46:60:02:93:bb:
b8:3a:5e:16:42:4f:17:ab:27:15:5f:9e:27:04:89:fa:62:9a:
12:81:0d:d3:ca:8c:b0:01:03:f3:a1:33:0c:6d:8f:18:72:3a:
f9:ee:8f:34:2a:08:72:5d:80:de:f4:4b:a2:f7:50:4f:24:ec:
65:5c:d8:4d:6b:4c:07:7c:58:2d:f9:c7:4b:06:6f:8d:14:ab:
5b:22:46:e3:5d:aa:53:c2:de:e3:f3:a9:9f:8b:03:ff:d0:1c:
97:af:2a:ec:5c:73:a6:28:76:b0:66:35:9b:9b:d3:6f:66:cc:
5b:c8:2c:b9:67:24:4f:7d:4e:0d:19:da:6f:b9:af:e7:32:9e:
93:43:42:3c:42:ca:67:b1:17:f4:50:f9:80:f4:d6:59:ef:b0:
26:3e:22:b6:83:c5:64:78:ff:06:44:8f:36:a7:f8:33:54:01:
7d:db:49:04:ad:3e:dc:55:c7:89:08:d7:d9:10:eb:8b:40:8f:
7b:0d:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:12 2025 by rpki-client