Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
File: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (raw, json)
Hash identifier: EzfUcVppF7kV0tBYky+ji9HzTpbBoE7AvZdEKau3gSw=
Subject key identifier: 99:00:0D:8B:D8:77:EF:B7:FA:43:8C:6F:78:20:1C:F0:88:AD:23:61
Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial: 6E71639A8BF15BFD7BDEBD4504EA97D7295DCDD3
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
Signing time: Tue 07 May 2024 05:00:01 +0000
ROA not before: Tue 07 May 2024 04:55:01 +0000
ROA not after: Tue 06 May 2025 05:00:01 +0000
asID: 141910
IP address blocks: 103.164.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:71:63:9a:8b:f1:5b:fd:7b:de:bd:45:04:ea:97:d7:29:5d:cd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Validity
Not Before: May 7 04:55:01 2024 GMT
Not After : May 6 05:00:01 2025 GMT
Subject: CN=99000D8BD877EFB7FA438C6F78201CF088AD2361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d8:4c:10:3d:98:dc:9d:26:a6:19:c5:6d:02:
92:9b:da:e6:d8:fd:0a:ec:3b:d4:08:1f:b6:b8:54:
f2:87:f3:ad:03:a0:71:48:7b:5a:a5:f8:47:e7:97:
48:ac:27:5f:1a:26:61:d1:f4:1b:86:31:a8:38:ea:
3b:63:a0:38:28:3c:a7:19:23:68:9c:f9:9a:97:af:
f8:f7:9d:07:d7:22:5c:a7:b9:94:e1:18:ed:3a:db:
28:8c:67:84:31:ee:e8:9c:a7:b6:5a:d7:fc:90:84:
6b:bc:87:ff:99:15:f3:07:0b:a0:49:4e:fb:b3:b2:
65:f9:68:95:48:00:6a:ed:e1:85:bb:c4:85:51:a3:
ad:78:2a:db:50:82:b4:49:97:16:8c:1b:f3:fc:19:
76:0a:3b:7c:2a:f0:cd:21:c2:fa:fe:4d:6c:f6:36:
85:b7:ad:0f:14:84:08:24:a5:33:f7:0a:2a:9d:a2:
09:01:ff:8c:24:00:41:df:33:79:70:32:ae:3b:89:
46:d4:c9:e6:ec:28:d6:3a:d1:a1:44:bd:87:57:7d:
06:d5:e6:4f:db:50:64:b8:b6:65:8e:b9:ce:a5:37:
34:ba:7c:90:68:98:ba:5f:59:ef:68:d0:fc:2f:09:
6b:ad:f2:9a:e1:de:f3:ca:60:55:df:37:d6:85:e1:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:0D:8B:D8:77:EF:B7:FA:43:8C:6F:78:20:1C:F0:88:AD:23:61
X509v3 Authority Key Identifier:
keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:10:3d:fd:13:3b:11:6a:e3:7d:44:04:f0:42:22:0e:3f:7c:
52:64:b0:0b:21:5e:e0:40:42:14:1a:98:75:d9:9b:d7:12:7f:
e7:c6:33:2c:a1:1d:7e:11:77:8c:e5:38:c4:a2:20:8c:4a:31:
56:8a:0c:4c:71:68:99:ad:05:50:7f:04:18:fe:e2:38:40:72:
23:11:eb:77:48:e8:70:43:7c:9b:31:fb:fa:c3:5e:ee:e7:6b:
cf:f7:a8:0a:2d:4e:55:67:7c:cd:41:89:3d:53:5e:4b:dc:7e:
a7:09:26:22:cc:6d:10:f7:a5:d3:7c:ee:27:b6:0f:2c:1a:ce:
68:f3:bf:05:fd:f8:93:fc:bb:53:4d:16:37:d6:24:2b:3e:20:
f4:0e:48:b2:5e:aa:b6:14:98:74:78:80:3d:63:97:ca:9a:69:
12:19:db:98:ad:4a:88:92:a6:0f:9c:16:ca:7d:63:31:83:60:
f3:ea:44:bf:ea:22:2d:7a:e2:12:b7:92:48:d1:99:11:2c:91:
92:78:ee:7d:a3:27:4e:0b:a2:5d:9c:d2:5d:fb:88:fd:f1:1d:
bc:ac:49:28:d8:22:1e:c5:2c:c7:ed:10:35:6c:6b:2d:0b:e9:
d2:10:2f:fa:c6:6f:4a:51:65:18:5e:12:e1:fc:2b:dc:13:bb:
23:a6:f2:b6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbnFjmovxW/173r1FBOqX1yldzdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0
RjFDMUQ1RjAeFw0yNDA1MDcwNDU1MDFaFw0yNTA1MDYwNTAwMDFaMDMxMTAvBgNV
BAMTKDk5MDAwRDhCRDg3N0VGQjdGQTQzOEM2Rjc4MjAxQ0YwODhBRDIzNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD32EwQPZjcnSamGcVtApKb2ubY
/QrsO9QIH7a4VPKH860DoHFIe1ql+Efnl0isJ18aJmHR9BuGMag46jtjoDgoPKcZ
I2ic+ZqXr/j3nQfXIlynuZThGO062yiMZ4Qx7uicp7Za1/yQhGu8h/+ZFfMHC6BJ
TvuzsmX5aJVIAGrt4YW7xIVRo614KttQgrRJlxaMG/P8GXYKO3wq8M0hwvr+TWz2
NoW3rQ8UhAgkpTP3CiqdogkB/4wkAEHfM3lwMq47iUbUyebsKNY60aFEvYdXfQbV
5k/bUGS4tmWOuc6lNzS6fJBomLpfWe9o0PwvCWut8prh3vPKYFXfN9aF4S1lAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUmQANi9h377f6Q4xveCAc8IitI2EwHwYDVR0j
BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG
OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD
MUQ1Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q1MDFjZGY5LTUyZTEtNGM5OC05
YWIzLWFmYjcwZmFjMzc3Yy8wLzMxMzAzMzJlMzEzNjM0MmUzNTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6Q7MA0GCSqG
SIb3DQEBCwUAA4IBAQALED39EzsRauN9RATwQiIOP3xSZLALIV7gQEIUGph12ZvX
En/nxjMsoR1+EXeM5TjEoiCMSjFWigxMcWiZrQVQfwQY/uI4QHIjEet3SOhwQ3yb
Mfv6w17u52vP96gKLU5VZ3zNQYk9U15L3H6nCSYizG0Q96XTfO4ntg8sGs5o878F
/fiT/LtTTRY31iQrPiD0DkiyXqq2FJh0eIA9Y5fKmmkSGduYrUqIkqYPnBbKfWMx
g2Dz6kS/6iIteuISt5JI0ZkRLJGSeO59oydOC6JdnNJd+4j98R28rEko2CIexSzH
7RA1bGstC+nSEC/6xm9KUWUYXhLh/CvcE7sjpvK2
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:59 2025 by rpki-client