Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
File: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (raw, json)
Hash identifier: tkzZuf7JfbezRTv15414IroAVNAguQHh0TGGYRvOMs4=
Subject key identifier: F4:A2:BA:32:D2:9E:A8:BE:59:E0:B6:BB:14:DB:47:F7:0C:C8:41:CF
Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Certificate serial: 25C4B5DB7509C4273CB6ACA98422AAEB27D54E2D
Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
Signing time: Wed 17 Apr 2024 09:02:27 +0000
ROA not before: Wed 17 Apr 2024 08:57:27 +0000
ROA not after: Wed 16 Apr 2025 09:02:27 +0000
asID: 135455
IP address blocks: 103.68.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c4:b5:db:75:09:c4:27:3c:b6:ac:a9:84:22:aa:eb:27:d5:4e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Validity
Not Before: Apr 17 08:57:27 2024 GMT
Not After : Apr 16 09:02:27 2025 GMT
Subject: CN=F4A2BA32D29EA8BE59E0B6BB14DB47F70CC841CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:4a:62:6b:6a:bc:eb:7d:4c:47:1b:6c:51:
55:81:aa:08:6f:ac:03:d9:f1:c7:b3:78:22:b1:e0:
40:8d:57:36:25:39:cd:e9:06:5d:2b:d0:5f:99:fb:
bf:e2:88:20:ea:96:e1:c1:83:2c:c4:4e:1b:d3:b1:
54:d1:d7:e5:1b:ae:88:83:87:1b:7a:cd:a3:ac:d6:
1b:ca:40:d9:d4:67:54:40:77:59:30:af:89:a5:cc:
d8:11:af:aa:36:12:33:bc:24:6b:12:b2:93:c9:db:
88:72:fd:57:af:03:92:4d:89:b0:e0:ea:bc:f8:50:
75:84:fa:73:9d:4f:cf:b3:43:bd:53:ce:06:07:bb:
94:83:d3:a3:e5:73:de:ef:5b:7e:20:e1:90:8f:23:
e9:d0:98:cb:0a:8f:f5:d3:10:bf:e5:34:91:96:fa:
66:ca:0a:57:5e:d1:b7:3d:c6:55:6f:70:bf:ad:b6:
99:31:e7:1c:13:7d:74:a8:c7:21:7f:47:55:24:cd:
50:1a:7a:4f:b2:4b:ab:e9:ae:dd:a4:42:0b:e1:ad:
25:d5:97:3b:d0:a3:45:2b:ef:4e:a0:87:49:6b:17:
68:73:52:0a:dd:7f:5d:75:ca:5c:09:8d:8b:04:b9:
bc:19:29:21:13:a8:f2:5a:c0:0a:93:38:5b:6f:51:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:BA:32:D2:9E:A8:BE:59:E0:B6:BB:14:DB:47:F7:0C:C8:41:CF
X509v3 Authority Key Identifier:
keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.136.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e5:21:29:92:14:f9:ff:dd:ef:66:5a:73:5d:4b:7f:81:03:
3a:97:8a:5b:27:b8:73:64:a1:48:8b:68:ec:45:f2:cc:10:5f:
46:9b:e8:ae:fc:9e:23:c2:9a:66:6d:2c:31:07:a8:bc:11:d5:
9c:98:9b:1d:1c:71:11:68:8a:6e:09:47:11:43:63:34:5d:7f:
4d:62:ad:ec:54:fe:f6:31:1b:9e:45:7f:4e:3e:ae:fb:bb:4a:
90:2b:74:35:51:6e:42:c1:9c:a1:f3:1e:ba:c1:c0:24:f0:b3:
02:d5:f2:1f:20:16:58:24:66:7a:87:b1:20:ae:12:f9:d5:c0:
10:da:dc:43:8f:94:24:fc:6a:1b:59:9a:0d:e1:d0:52:d8:70:
42:64:6e:6a:fb:d4:84:10:64:cc:11:d9:34:90:70:bf:76:97:
f0:98:2a:b5:47:7a:6b:a3:8c:ed:c5:71:65:46:bf:f1:bf:27:
52:58:e5:a7:09:54:8b:37:47:44:c2:00:3d:84:28:bb:94:f8:
e2:74:c0:f0:27:fd:36:e7:a7:da:79:0f:70:d8:5d:73:18:99:
e5:ec:fe:ea:7b:50:5e:55:df:30:95:dd:e7:b3:29:97:5b:a6:
5d:84:5a:8c:8e:c2:69:ac:75:a1:44:c5:ae:c8:93:25:6a:48:
9d:a2:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:57:51 2025 by rpki-client