Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa
File: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (raw, json)
Hash identifier: KA/5v7DelWiutm8SlPwZ2SMMTs5j6QW8s+VC/O92rJE=
Subject key identifier: 19:01:10:09:4B:E9:79:48:FC:8A:A1:70:79:61:40:BD:62:E7:B6:28
Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8
Certificate serial: 3105A67D1E978EDF4C64AD0F58BEEF41C86AA4D0
Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa
Signing time: Thu 28 Mar 2024 08:00:00 +0000
ROA not before: Thu 28 Mar 2024 07:55:00 +0000
ROA not after: Thu 27 Mar 2025 08:00:00 +0000
asID: 133361
IP address blocks: 103.37.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:05:a6:7d:1e:97:8e:df:4c:64:ad:0f:58:be:ef:41:c8:6a:a4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8
Validity
Not Before: Mar 28 07:55:00 2024 GMT
Not After : Mar 27 08:00:00 2025 GMT
Subject: CN=190110094BE97948FC8AA170796140BD62E7B628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:8b:a4:e2:c2:fc:d0:0b:45:3d:8c:c0:a7:
7b:40:7c:b7:73:fc:1b:b9:a0:4d:d0:e4:59:b9:3e:
66:85:31:b1:f9:72:c9:29:84:69:b3:cd:85:d9:bd:
dd:dd:4a:a0:5a:8c:15:d5:36:1d:dd:13:91:43:cc:
7d:e5:3b:a7:ad:fc:41:72:9c:a5:65:9c:ec:a2:d4:
bd:48:f1:1f:d9:c9:78:f1:9c:28:7f:97:f4:f4:d4:
39:c8:a3:e1:8a:ed:60:39:bc:15:4c:b4:7e:35:a6:
8a:cd:3d:d6:e7:ea:5e:16:03:6f:67:f8:e0:16:76:
83:0d:07:07:85:1f:a5:74:4d:61:66:19:75:84:d8:
97:2a:b9:80:e6:57:5c:3e:92:92:05:50:dd:4d:89:
cd:68:7f:40:5f:15:75:4f:a2:cb:16:0a:94:6f:ec:
d3:35:a2:35:fd:51:45:80:ce:cd:46:e5:cf:42:da:
7f:71:b5:e6:a1:74:bc:f7:82:86:5a:3e:fc:39:8a:
83:de:fc:49:ef:3e:94:69:9f:a4:bb:23:0e:ad:00:
24:ae:18:16:ea:3f:6a:d9:5a:18:5d:0a:8c:77:bf:
00:88:54:ca:fc:ea:77:1c:c1:d4:e8:ea:e0:40:2b:
2f:ec:27:5a:5f:30:e4:a6:85:68:3b:c2:02:ce:c6:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:01:10:09:4B:E9:79:48:FC:8A:A1:70:79:61:40:BD:62:E7:B6:28
X509v3 Authority Key Identifier:
keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.37.229.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bf:1c:06:fb:9c:15:7b:19:82:94:37:c6:14:c3:c6:34:c1:
5a:6e:9a:be:67:8f:8d:ea:e6:70:4d:bc:44:2a:00:8b:ce:45:
b0:27:cd:73:c9:f1:b9:da:11:13:d2:2a:6c:42:a1:b2:2e:71:
ce:a0:32:35:c9:7b:eb:cb:6c:0a:82:52:c0:19:72:0c:39:9c:
ba:32:b8:fe:50:f0:96:87:f9:80:73:13:3a:f8:47:f2:61:5c:
ce:5c:0c:8f:c1:76:fa:3a:59:4f:e2:46:29:8a:e8:ff:78:19:
1c:b3:49:d5:65:1e:10:57:25:46:8a:9b:0c:da:82:4d:53:4e:
f5:9e:f1:e8:69:96:3e:dc:8d:25:e1:6c:66:8f:e0:32:a8:82:
49:0e:4a:f4:6d:fc:a4:c7:2a:80:83:11:62:b9:36:49:fe:5b:
4a:2b:92:0a:3a:e1:07:59:69:7e:b5:05:41:e2:cf:10:83:35:
e9:cf:8c:cc:ea:87:72:af:2e:f6:03:da:d4:d2:fe:de:43:51:
c8:20:42:36:69:10:77:3f:0f:a2:bd:fd:95:1d:e8:14:8e:cf:
fa:55:35:1c:a7:82:7c:e3:b8:d6:e4:d3:96:2c:4f:8f:d5:f4:
18:93:69:c5:d9:5d:d8:03:73:40:33:e6:7e:3c:4e:48:dc:bb:
2f:da:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:53 2025 by rpki-client