Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa
File: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (raw, json)
Hash identifier: 4jL23HOR2MxYYBMdU8rmaFDSkz/Cs+HRpgVI/SVocUU=
Subject key identifier: 0C:D7:8D:D2:82:A9:D2:BA:8C:E6:A9:9C:45:25:96:0B:1A:37:32:B3
Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
Certificate serial: 798AF5BCB8DF5EA3D436408B7376C502CA6193D0
Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa
Signing time: Wed 18 Dec 2024 09:00:02 +0000
ROA not before: Wed 18 Dec 2024 08:55:02 +0000
ROA not after: Wed 17 Dec 2025 09:00:02 +0000
asID: 58495
IP address blocks: 103.160.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:8a:f5:bc:b8:df:5e:a3:d4:36:40:8b:73:76:c5:02:ca:61:93:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
Validity
Not Before: Dec 18 08:55:02 2024 GMT
Not After : Dec 17 09:00:02 2025 GMT
Subject: CN=0CD78DD282A9D2BA8CE6A99C4525960B1A3732B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:f8:db:79:60:16:d8:40:f4:24:77:03:4d:
4b:a8:db:9a:c3:66:e5:ea:c7:fc:3a:c0:7c:99:51:
2a:87:aa:89:bd:b3:12:ce:5b:a2:ab:b3:a0:05:16:
33:ac:20:3f:81:14:16:f9:b0:43:dc:24:44:ee:fe:
97:4d:b9:9b:f1:69:e8:1c:81:14:bd:de:10:ef:20:
d5:51:7d:ac:87:07:0f:c0:17:ef:9a:60:69:61:ee:
45:35:d2:97:e0:b7:28:2e:b6:2b:9c:e5:f4:48:c2:
50:9c:6d:aa:c7:b8:d3:b3:6e:7b:2c:ab:77:f0:15:
9e:04:5c:51:aa:cc:50:0c:be:b9:79:70:8c:89:a3:
60:75:bf:ce:34:d3:a2:85:e4:4e:83:d2:38:1c:1a:
21:1d:45:68:9a:f4:2a:fd:d8:69:86:a7:54:24:b9:
54:74:0f:6c:e9:9a:ef:f5:ef:29:b4:07:6d:48:71:
65:7d:19:17:a3:62:57:06:a2:1a:c2:45:f2:87:45:
9c:8c:73:59:b5:6b:c9:ec:21:4b:10:83:b3:f3:c4:
65:3a:cc:35:5c:29:04:63:c0:91:2a:a5:a1:95:d5:
5b:73:aa:8f:9b:05:64:39:28:cf:46:a4:fa:05:bc:
f6:67:e5:f1:ca:64:bb:d9:72:bf:84:56:e6:89:44:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D7:8D:D2:82:A9:D2:BA:8C:E6:A9:9C:45:25:96:0B:1A:37:32:B3
X509v3 Authority Key Identifier:
keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f4:ed:33:e2:f0:6e:9d:b7:72:c5:8b:60:84:f6:e8:30:ca:
42:c5:4f:db:08:fd:54:42:a5:0a:e0:36:d1:46:e0:f5:d1:de:
59:d4:22:5c:62:18:7f:df:96:55:f7:34:d2:ab:83:f6:a4:c4:
9a:91:36:92:36:ec:3d:ff:e8:67:80:78:94:81:6a:c2:16:ff:
be:7e:a7:27:95:1d:e9:c6:99:a3:ac:db:6d:2e:22:52:6c:eb:
08:aa:d8:dd:3f:42:7f:4a:d4:08:d1:f7:bb:2a:f8:91:f2:2d:
f4:6a:b3:86:cc:b8:60:b1:49:95:cf:94:37:ec:36:34:15:bc:
85:f6:a9:df:eb:67:72:1a:74:55:06:b2:49:e9:40:6d:2b:89:
f7:d3:5a:11:c9:3a:dd:3d:b4:df:87:99:3c:bc:2b:5e:df:4e:
92:9f:78:21:6e:e7:41:5c:79:01:35:50:46:a2:3f:06:f9:7e:
34:fa:96:b5:e2:38:e9:91:ca:2d:47:22:6f:01:97:9d:a6:88:
7e:d7:f9:51:3b:b2:81:6e:54:3e:5d:d1:cc:5a:06:49:dc:00:
4d:cd:b0:dc:d5:ff:12:43:e3:63:f6:47:73:cd:d7:0b:61:49:
86:b7:eb:a5:02:c1:9d:d6:35:ee:28:23:74:c7:cd:1d:a1:22:
39:c6:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:57:54 2025 by rpki-client