Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa
File: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (raw, json)
Hash identifier: WWdZOAOuhcF0EudE1vG2xPCC/Y1nTtXizwc34RRp27g=
Subject key identifier: AF:57:FD:72:EC:BE:B8:69:E5:42:D2:D5:32:28:39:90:13:F6:98:84
Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62
Certificate serial: 639808A5D1B9306CE52DF681EEABEC849E3C6C98
Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa
Signing time: Mon 10 Jun 2024 05:34:53 +0000
ROA not before: Mon 10 Jun 2024 05:29:53 +0000
ROA not after: Mon 09 Jun 2025 05:34:53 +0000
asID: 150521
IP address blocks: 103.75.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:98:08:a5:d1:b9:30:6c:e5:2d:f6:81:ee:ab:ec:84:9e:3c:6c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62
Validity
Not Before: Jun 10 05:29:53 2024 GMT
Not After : Jun 9 05:34:53 2025 GMT
Subject: CN=AF57FD72ECBEB869E542D2D53228399013F69884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1f:37:b5:90:5d:37:44:d6:f8:46:79:74:07:
c4:69:37:bd:41:10:29:86:6d:52:6e:c2:78:63:c4:
60:72:29:46:ee:13:42:33:4e:27:d4:17:64:9a:e7:
1f:14:f1:87:98:9e:f0:64:d1:36:57:53:5b:9e:16:
aa:97:0a:25:11:7f:82:ba:5f:65:17:80:51:e9:5e:
f9:00:a0:d9:0e:e6:ef:c8:60:32:33:58:9d:bf:75:
df:26:0c:06:15:0b:f4:f5:28:56:68:d4:0c:e1:ba:
94:03:30:70:50:1c:3c:46:ed:bf:c2:78:7a:83:b3:
43:b0:28:41:94:a1:96:02:46:80:b5:aa:79:bb:d3:
b7:b0:78:7c:5b:dc:dc:a3:51:d0:7b:93:d5:b0:60:
3d:00:34:d4:92:33:49:64:66:1f:fd:c1:f8:2f:fa:
62:e6:4c:80:38:6e:5f:67:e5:61:68:0e:d1:0c:92:
09:f8:b6:e2:d6:ed:9a:7e:21:e4:89:51:b5:f5:c7:
84:bc:02:22:03:30:07:64:44:0a:b9:5c:5d:24:a4:
52:b7:9b:ac:26:4d:de:b9:7f:65:ab:6b:2b:a3:a5:
0a:d1:36:7b:30:5c:c4:fd:ab:dd:f1:ac:5c:f1:d2:
a3:98:f6:ea:5c:b4:2a:4d:11:52:6b:c8:ff:bd:37:
c7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:57:FD:72:EC:BE:B8:69:E5:42:D2:D5:32:28:39:90:13:F6:98:84
X509v3 Authority Key Identifier:
keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/3130332e37352e36362e302f32332d3234203d3e20313530353231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.66.0/23
Signature Algorithm: sha256WithRSAEncryption
45:8c:bd:a6:c7:71:fd:e3:18:d8:20:e2:cd:06:bd:9d:84:23:
3a:b0:76:04:1b:18:71:06:b1:28:d9:ae:86:33:76:d8:0d:b0:
07:e5:d7:dc:c5:d9:a8:1c:0a:75:f5:26:86:4e:95:c5:38:e7:
30:9d:b1:d0:ff:5a:f5:33:62:26:ca:b6:45:fa:7b:d6:55:46:
cc:3f:ed:0a:c0:71:d3:56:c2:3c:69:57:aa:9d:57:db:40:56:
ac:a9:73:e9:93:e4:4f:af:7b:1a:ce:7a:c9:c8:61:1a:88:4b:
d8:83:f2:25:b6:99:3d:4f:e3:d3:56:4e:9b:42:dc:bb:cd:1a:
df:0b:c5:7e:01:26:1f:48:ec:9a:15:94:66:1a:81:0d:6e:da:
2c:40:18:29:f0:44:fe:04:be:ca:3c:80:7f:8c:36:1d:78:87:
77:c6:a2:33:bd:ef:2f:d4:2d:22:f0:8f:eb:0d:a9:40:ff:c2:
d0:2e:1c:bf:54:06:1f:1e:12:e6:34:f9:ce:3c:b9:fc:99:46:
c7:89:b5:ff:12:b1:1e:0f:0b:6f:35:2d:1c:e2:34:12:de:bb:
b6:46:79:52:f3:b3:2b:f3:17:e3:63:c1:b9:65:1b:4b:10:2f:
7a:3e:1d:7c:63:c8:99:74:03:06:80:2f:06:1d:ce:da:ad:20:
f4:5c:8e:b2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUY5gIpdG5MGzlLfaB7qvshJ48bJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB
NkYyMEY2MjAeFw0yNDA2MTAwNTI5NTNaFw0yNTA2MDkwNTM0NTNaMDMxMTAvBgNV
BAMTKEFGNTdGRDcyRUNCRUI4NjlFNTQyRDJENTMyMjgzOTkwMTNGNjk4ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Hze1kF03RNb4Rnl0B8RpN71B
ECmGbVJuwnhjxGByKUbuE0IzTifUF2Sa5x8U8YeYnvBk0TZXU1ueFqqXCiURf4K6
X2UXgFHpXvkAoNkO5u/IYDIzWJ2/dd8mDAYVC/T1KFZo1AzhupQDMHBQHDxG7b/C
eHqDs0OwKEGUoZYCRoC1qnm707eweHxb3NyjUdB7k9WwYD0ANNSSM0lkZh/9wfgv
+mLmTIA4bl9n5WFoDtEMkgn4tuLW7Zp+IeSJUbX1x4S8AiIDMAdkRAq5XF0kpFK3
m6wmTd65f2WrayujpQrRNnswXMT9q93xrFzx0qOY9upctCpNEVJryP+9N8cLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUr1f9cuy+uGnlQtLVMig5kBP2mIQwHwYDVR0j
BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0
NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy
MEY2Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZjc2YzZkLWY4NTAtNGM0OS04
NTRjLTU1ZjM4Mjg0NGM5Ny8wLzMxMzAzMzJlMzczNTJlMzYzNjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdLQjANBgkqhkiG
9w0BAQsFAAOCAQEARYy9psdx/eMY2CDizQa9nYQjOrB2BBsYcQaxKNmuhjN22A2w
B+XX3MXZqBwKdfUmhk6VxTjnMJ2x0P9a9TNiJsq2Rfp71lVGzD/tCsBx01bCPGlX
qp1X20BWrKlz6ZPkT697Gs56ychhGohL2IPyJbaZPU/j01ZOm0Lcu80a3wvFfgEm
H0jsmhWUZhqBDW7aLEAYKfBE/gS+yjyAf4w2HXiHd8aiM73vL9QtIvCP6w2pQP/C
0C4cv1QGHx4S5jT5zjy5/JlGx4m1/xKxHg8LbzUtHOI0Et67tkZ5UvOzK/MX42PB
uWUbSxAvej4dfGPImXQDBoAvBh3O2q0g9FyOsg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:14 2025 by rpki-client