Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37372e302f32342d3234203d3e203233363739.roa
File: 3130332e3131342e37372e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: +LTLBKhpdKjtRWpiyc9TvyWBocA4NHvIy7eE974Udlg=
Subject key identifier: 18:81:85:32:78:DD:7A:CD:DC:E3:DE:7B:2D:D9:73:83:FE:B4:7B:C1
Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Certificate serial: 73A3E974EB91771B2635D437BAED1E9D3B74DCDA
Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37372e302f32342d3234203d3e203233363739.roa
Signing time: Sat 24 Aug 2024 11:00:02 +0000
ROA not before: Sat 24 Aug 2024 10:55:02 +0000
ROA not after: Sat 23 Aug 2025 11:00:02 +0000
asID: 23679
IP address blocks: 103.114.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a3:e9:74:eb:91:77:1b:26:35:d4:37:ba:ed:1e:9d:3b:74:dc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Validity
Not Before: Aug 24 10:55:02 2024 GMT
Not After : Aug 23 11:00:02 2025 GMT
Subject: CN=1881853278DD7ACDDCE3DE7B2DD97383FEB47BC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:d0:42:b8:42:63:2d:a9:bd:c7:b0:22:63:
b3:39:9c:ac:8d:e7:72:e9:b3:57:ff:f1:27:02:61:
8a:04:ba:ad:63:c2:42:03:7f:3a:1e:dd:56:bc:44:
99:63:18:99:54:ae:b1:1f:68:c4:9a:eb:23:41:de:
c9:ad:15:5a:67:d3:91:47:cd:d6:52:b3:05:b6:9d:
96:4f:0b:ef:64:a0:8b:25:90:30:1b:37:2f:e0:86:
9e:40:60:26:1c:25:9f:ef:3a:62:42:42:8a:d5:b9:
e5:ef:52:06:db:99:f6:84:7c:5d:e1:73:0c:ac:c8:
de:4a:23:5d:27:f2:84:2a:ce:0d:c0:c9:45:d3:b9:
e0:4d:8d:0c:45:67:a7:12:88:be:28:df:b0:32:42:
12:25:b2:cb:a4:20:56:71:2c:e2:94:35:b5:fe:9b:
51:b1:18:48:32:73:77:35:6d:f2:a8:28:9d:a5:65:
64:3e:79:ab:4d:8f:fa:ed:a6:9e:a0:23:5d:82:35:
6f:5b:bf:e2:a0:25:4b:57:31:3c:51:42:ae:4d:29:
bf:32:e9:f2:fb:6a:1d:c8:a2:15:17:29:17:1c:13:
06:11:4a:d9:45:64:67:72:ec:e3:04:c2:0b:01:75:
9e:7b:a4:d2:35:7f:ce:f0:d0:c9:66:0f:d7:7f:0d:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:81:85:32:78:DD:7A:CD:DC:E3:DE:7B:2D:D9:73:83:FE:B4:7B:C1
X509v3 Authority Key Identifier:
keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37372e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.77.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fd:71:82:7d:10:ca:2d:45:c6:42:be:cb:40:c0:db:05:b3:
c4:ff:7d:ff:61:78:5c:b8:70:5a:d5:ab:af:3f:9e:80:bb:37:
e6:78:25:dd:29:b9:d5:b6:b9:08:3f:48:97:28:e3:f3:bb:a7:
f2:a3:3d:8e:09:de:1a:db:a6:ad:79:6d:22:00:f8:40:47:ce:
84:68:fb:1a:ef:ea:9d:7f:d1:6f:30:59:49:f4:a6:af:86:63:
2b:03:e6:cc:cd:5d:25:66:a7:38:92:60:1b:3d:d5:5e:94:7f:
11:15:34:fe:3a:b3:02:4b:65:2c:6f:56:92:47:97:42:38:ca:
86:51:04:60:58:d0:e1:99:3e:b5:86:51:ed:f7:04:54:bb:0d:
7a:d9:7a:52:47:15:d8:25:47:f0:9f:7e:f0:5e:de:c9:a3:3b:
c1:86:66:ae:9e:61:fd:c8:ef:5e:01:9e:92:b1:41:1b:08:12:
2b:52:f6:c9:16:22:1e:b4:41:78:a1:a9:0d:53:d0:c7:e1:45:
fe:64:a2:a7:01:02:4c:7d:0a:46:8e:58:e6:3a:59:89:36:b0:
bb:96:69:ad:53:47:d7:8a:af:92:3b:2a:fb:56:2f:dd:fa:b1:
64:cc:fd:7e:4d:3d:e2:f8:1d:07:2c:f9:7a:c5:fd:89:a2:b5:
57:45:53:60
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUc6PpdOuRdxsmNdQ3uu0enTt03NowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3
RkNDODA0NTAeFw0yNDA4MjQxMDU1MDJaFw0yNTA4MjMxMTAwMDJaMDMxMTAvBgNV
BAMTKDE4ODE4NTMyNzhERDdBQ0REQ0UzREU3QjJERDk3MzgzRkVCNDdCQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BdBCuEJjLam9x7AiY7M5nKyN
53Lps1f/8ScCYYoEuq1jwkIDfzoe3Va8RJljGJlUrrEfaMSa6yNB3smtFVpn05FH
zdZSswW2nZZPC+9koIslkDAbNy/ghp5AYCYcJZ/vOmJCQorVueXvUgbbmfaEfF3h
cwysyN5KI10n8oQqzg3AyUXTueBNjQxFZ6cSiL4o37AyQhIlssukIFZxLOKUNbX+
m1GxGEgyc3c1bfKoKJ2lZWQ+eatNj/rtpp6gI12CNW9bv+KgJUtXMTxRQq5NKb8y
6fL7ah3IohUXKRccEwYRStlFZGdy7OMEwgsBdZ57pNI1f87w0MlmD9d/Dbr3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGIGFMnjdes3c4957Ldlzg/60e8EwHwYDVR0j
BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC
Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND
ODA0NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NTQ3N2NlLTA3MTctNDdjMC04
NzY2LThiOWJlYzBjMDg2Yy8wLzMxMzAzMzJlMzEzMTM0MmUzNzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdyTTANBgkqhkiG
9w0BAQsFAAOCAQEAL/1xgn0Qyi1FxkK+y0DA2wWzxP99/2F4XLhwWtWrrz+egLs3
5ngl3Sm51ba5CD9Ilyjj87un8qM9jgneGtumrXltIgD4QEfOhGj7Gu/qnX/RbzBZ
SfSmr4ZjKwPmzM1dJWanOJJgGz3VXpR/ERU0/jqzAktlLG9WkkeXQjjKhlEEYFjQ
4Zk+tYZR7fcEVLsNetl6UkcV2CVH8J9+8F7eyaM7wYZmrp5h/cjvXgGekrFBGwgS
K1L2yRYiHrRBeKGpDVPQx+FF/mSipwECTH0KRo5Y5jpZiTawu5ZprVNH14qvkjsq
+1Yv3fqxZMz9fk094vgdByz5esX9iaK1V0VTYA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:02:57 2025 by rpki-client