Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa
File: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (raw, json)
Hash identifier: jkJd+M5rwtfeJj5Wy3BROoY6ivNRSiwWeiLPr6W2/x8=
Subject key identifier: EC:D7:B2:4D:AD:D8:55:7A:A4:40:EC:C7:21:56:70:E9:C4:D4:5D:9D
Certificate issuer: /CN=D454E26475969CECE78A97B9152AFC76DB922AA3
Certificate serial: 49AC9348416687332918BA9CDE204E83262797DD
Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa
Signing time: Fri 17 Jan 2025 17:53:23 +0000
ROA not before: Fri 17 Jan 2025 17:48:23 +0000
ROA not after: Fri 16 Jan 2026 17:53:23 +0000
asID: 141962
IP address blocks: 103.164.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ac:93:48:41:66:87:33:29:18:ba:9c:de:20:4e:83:26:27:97:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3
Validity
Not Before: Jan 17 17:48:23 2025 GMT
Not After : Jan 16 17:53:23 2026 GMT
Subject: CN=ECD7B24DADD8557AA440ECC7215670E9C4D45D9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:26:72:c6:b2:ab:7c:d2:18:d9:87:3c:2f:82:
2e:1b:ca:51:0d:2f:f9:bd:2a:75:8e:37:8a:a5:de:
1f:43:03:b7:a9:c5:93:0f:2b:3f:bd:84:d2:88:48:
15:b0:97:b3:7e:f0:ac:c2:9a:f8:84:99:8d:cd:4f:
6a:88:90:9d:47:1e:79:91:58:56:be:a2:97:b0:8e:
fe:47:73:8c:2f:8f:53:87:e8:be:89:d3:a4:29:d1:
50:d8:85:96:76:48:8c:8e:ab:69:4b:0d:7c:be:2a:
93:59:53:db:11:49:83:de:ac:f6:1f:3e:1c:90:af:
6d:70:58:c3:f2:9b:43:b6:68:7e:05:45:9b:59:1c:
d3:66:a7:74:2c:ea:1f:a0:e9:51:ed:b7:14:28:7f:
13:14:c2:0b:2e:f5:31:05:34:dd:fe:8f:c6:e4:1e:
a9:bf:ef:2b:79:38:8e:7a:a4:c7:67:e1:bf:f0:b7:
f3:1c:76:00:6f:1f:2d:ae:29:6d:46:e6:1c:34:ee:
64:2e:d1:d6:28:d3:3b:de:59:4b:21:88:5c:b7:44:
64:c4:d5:fc:6a:d1:23:88:b3:7f:82:82:4c:09:43:
e3:cf:f6:78:fd:1b:07:f1:9b:0b:f1:e0:8f:4e:dd:
a9:a9:d9:ae:9f:af:1d:25:13:07:04:c0:72:b2:61:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D7:B2:4D:AD:D8:55:7A:A4:40:EC:C7:21:56:70:E9:C4:D4:5D:9D
X509v3 Authority Key Identifier:
keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.61.0/24
Signature Algorithm: sha256WithRSAEncryption
93:2a:57:70:0d:62:82:81:13:94:78:86:72:f6:fd:2a:cd:92:
b8:0f:95:ce:2a:77:07:36:07:cc:90:f1:4a:4e:f9:c2:5a:2f:
ce:6a:16:b5:19:5d:11:53:5a:c7:9c:d4:8d:32:77:be:1a:11:
ef:d8:f8:a8:42:27:cf:f1:fe:91:75:1c:98:39:07:25:7a:99:
3d:d5:d8:93:a9:1f:b9:e4:d6:a5:32:8d:0e:c1:d1:1d:11:a8:
58:30:b4:a8:b2:44:ff:e0:8e:4b:a8:12:a8:65:c2:8a:f4:1f:
85:a8:c9:0e:c9:8d:89:ee:3c:ee:86:7f:2d:0c:45:ea:ce:d1:
8c:7a:a6:2b:e8:d5:d8:af:c1:e4:b8:fe:c1:ac:3f:44:ce:7f:
1a:7d:61:d7:43:46:41:fe:4e:a8:c8:91:7a:8e:4a:a5:33:1e:
ed:fb:2f:23:0f:a6:1d:0f:a1:50:81:75:d8:b8:30:c3:7f:6b:
df:cf:de:e4:11:31:80:e0:00:f4:73:b0:f4:55:4a:3f:89:fc:
75:55:29:01:38:77:66:b1:e7:f5:a8:42:96:d9:13:fe:c1:87:
10:94:8e:c8:1f:11:e2:ec:87:5f:f3:1f:3d:4a:9e:de:5a:1b:
c8:19:f7:7f:10:8b:5e:b6:da:c4:f4:ec:e6:f7:5a:4e:9d:42:
d3:a0:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:37 2025 by rpki-client