Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3234203d3e20313431313037.roa
File: 3130332e3134332e3137302e302f32332d3234203d3e20313431313037.roa (raw, json)
Hash identifier: XoikOPxOsmeZc/GQgU6kJOUCuncwYNz24meYk9eksxU=
Subject key identifier: 35:D2:E3:68:86:B7:45:CE:02:66:C9:A6:6A:E7:18:3A:20:78:DD:5E
Certificate issuer: /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Certificate serial: 3D6A7D2BAAADF9123677F6F1D627AF34DCF180B3
Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3234203d3e20313431313037.roa
Signing time: Sun 10 Nov 2024 12:47:25 +0000
ROA not before: Sun 10 Nov 2024 12:42:25 +0000
ROA not after: Sun 09 Nov 2025 12:47:25 +0000
asID: 141107
IP address blocks: 103.143.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:6a:7d:2b:aa:ad:f9:12:36:77:f6:f1:d6:27:af:34:dc:f1:80:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Validity
Not Before: Nov 10 12:42:25 2024 GMT
Not After : Nov 9 12:47:25 2025 GMT
Subject: CN=35D2E36886B745CE0266C9A66AE7183A2078DD5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:3c:ee:f5:25:42:6e:0c:31:ec:ca:83:04:
52:87:be:2e:55:f2:e6:d4:21:ae:45:f8:36:fd:8a:
25:25:9a:db:8f:34:24:44:a0:e6:1d:22:86:73:00:
75:3c:08:9e:ce:90:07:2c:58:f1:e6:47:c0:19:57:
c7:10:33:71:08:61:6d:c4:85:ef:4c:d4:0f:13:eb:
6e:b4:3f:3b:1f:f7:7c:31:43:dc:1c:8a:30:fd:55:
8d:07:dc:6b:88:c3:08:98:5f:26:a9:cd:ae:30:91:
ad:93:30:a4:f5:28:e7:e2:53:6d:a1:f6:93:9a:60:
ee:d2:4b:ef:b8:db:23:86:53:25:4e:67:7b:7d:06:
3f:34:64:2c:66:0d:de:47:89:89:62:53:a0:82:aa:
51:51:36:13:c6:58:1e:cd:27:83:32:74:be:fe:e9:
0c:70:6f:e5:04:fa:af:2f:a8:0d:48:0f:d3:b4:dc:
19:23:f5:c5:f8:fe:5a:66:ec:50:21:4a:7d:d9:59:
38:17:b6:fb:86:df:b4:cb:f8:4f:8f:86:90:e5:fa:
c2:7f:e1:b6:e0:6c:9f:78:88:6d:54:32:98:55:29:
52:26:41:40:ae:1f:45:86:a7:bd:ed:55:fe:fa:08:
3c:66:31:98:6f:01:d4:93:b0:6f:4a:d6:58:6f:9f:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D2:E3:68:86:B7:45:CE:02:66:C9:A6:6A:E7:18:3A:20:78:DD:5E
X509v3 Authority Key Identifier:
keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3234203d3e20313431313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.170.0/23
Signature Algorithm: sha256WithRSAEncryption
77:aa:f6:40:c1:f8:30:e5:aa:54:97:ff:d4:5a:4f:0a:65:ce:
76:9c:52:e9:3c:0d:a3:74:34:a5:26:95:3b:e1:ee:5f:dc:24:
7e:2d:f2:68:25:68:60:dd:0b:77:7b:c0:e7:70:d9:3b:54:35:
68:12:1d:7a:3f:10:7e:bb:f1:aa:63:a8:27:2f:66:36:e0:5e:
06:d6:cd:ed:75:6d:b0:da:3e:c2:ab:65:1e:ac:7a:99:39:07:
93:69:0e:f8:58:ce:ff:f5:6c:d8:36:1d:75:29:c4:33:22:52:
91:b8:75:a9:68:2f:7d:3f:ec:3c:c5:ae:78:83:c1:ff:0f:b3:
70:20:65:99:5c:ef:d2:7e:fd:26:ea:57:6d:be:ee:71:a3:4f:
57:14:dd:7d:29:0c:21:03:5b:e3:13:80:cb:d7:df:11:12:59:
cc:ce:31:d7:a4:ac:87:b5:d8:93:61:30:57:6a:05:24:d1:fa:
06:7d:f5:50:a0:0e:61:c6:ee:7d:c1:08:7c:90:9c:ca:19:35:
13:fb:ec:38:f5:08:82:91:0c:72:ac:e3:3c:0e:aa:97:00:c0:
91:ef:60:42:01:16:25:85:88:b8:7a:81:a9:f6:4f:d9:4b:d6:
36:a4:82:bf:68:cf:43:af:dd:42:3b:eb:13:c0:ef:6c:47:5c:
df:21:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:59 2025 by rpki-client