Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa
File: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (raw, json)
Hash identifier: S9T4Njr1S5t2cL0qzbEw2qPQzlgOAecG0HGE00Slwz4=
Subject key identifier: 19:D6:73:7B:94:93:BD:D1:C0:8C:B9:89:61:9B:FC:8E:86:2C:7E:55
Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial: 70EA1291D3451EA4BC4DB96E5DE15C52C3444EEF
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa
Signing time: Thu 08 Aug 2024 15:00:00 +0000
ROA not before: Thu 08 Aug 2024 14:55:00 +0000
ROA not after: Thu 07 Aug 2025 15:00:00 +0000
asID: 136878
IP address blocks: 103.105.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ea:12:91:d3:45:1e:a4:bc:4d:b9:6e:5d:e1:5c:52:c3:44:4e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Validity
Not Before: Aug 8 14:55:00 2024 GMT
Not After : Aug 7 15:00:00 2025 GMT
Subject: CN=19D6737B9493BDD1C08CB989619BFC8E862C7E55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:43:63:7e:42:80:ac:dd:21:c8:da:00:2f:
16:7b:9e:4d:bb:34:7e:08:6b:0c:a3:94:ba:5b:a5:
b5:79:28:2d:5c:1d:6a:bb:27:c5:9e:30:cf:65:07:
d0:c7:d1:d9:c2:aa:52:5b:31:1a:60:0d:e8:59:50:
9e:05:cf:f1:b6:6a:45:7a:0b:be:6a:a3:85:99:fe:
a0:9d:b9:5e:4e:db:fa:02:9d:e2:0e:45:d9:cb:60:
aa:90:bf:d9:ad:1e:c4:5f:b7:3a:b5:61:93:86:30:
55:7f:e4:b0:ae:f6:b1:44:7f:89:d6:2c:38:7c:d5:
f1:1e:8d:bf:61:6f:14:cf:e8:3e:dc:97:8b:dd:a1:
29:bf:4f:49:af:91:c8:b4:01:c9:5c:f4:f2:de:ac:
2f:eb:62:a7:c2:03:da:9b:95:87:89:9c:d8:e9:77:
8f:06:4c:79:65:47:10:48:81:f0:36:9d:38:fe:7d:
af:17:a2:d6:91:92:2c:65:07:3c:2f:11:de:e2:03:
f9:9a:ec:a0:17:67:de:6c:ca:3d:37:35:ab:d1:f3:
4a:88:66:23:c7:4a:86:88:ed:af:66:f8:10:7a:46:
52:ac:24:fa:9d:cc:68:94:55:92:3a:6a:6c:42:0a:
63:69:0f:e6:c0:af:be:35:39:a5:20:59:a7:fb:58:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:73:7B:94:93:BD:D1:C0:8C:B9:89:61:9B:FC:8E:86:2C:7E:55
X509v3 Authority Key Identifier:
keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:41:c6:58:ce:1c:05:53:c4:81:d6:4e:a8:7b:c2:86:95:23:
be:ac:73:d6:77:d5:33:a0:81:50:e8:01:36:14:25:38:af:eb:
22:52:6c:6f:c1:04:0e:ab:78:f3:97:1e:49:3a:15:97:84:87:
0b:83:1e:90:64:94:60:a5:1b:76:b2:1b:26:be:51:04:69:94:
be:4b:76:0f:a3:a0:c3:2f:65:e6:13:71:7f:d8:6a:01:c5:3f:
7f:f2:04:77:34:56:74:49:4b:ec:72:d7:8d:89:47:94:be:6e:
72:77:1e:13:5d:d4:11:ac:c4:56:b9:e7:ac:50:0d:fd:c0:6c:
d6:db:86:1b:f9:b8:69:16:2d:fc:c6:e1:5c:b0:7f:0d:ca:2c:
59:d9:dc:91:f0:1b:97:33:83:89:cf:96:b4:68:e1:09:b5:44:
8a:ad:5e:13:80:ad:a1:af:b0:91:9d:61:49:d7:fd:20:c0:e5:
d7:49:e1:2b:66:fc:05:14:47:05:e8:8e:6f:43:32:35:7d:83:
55:97:64:75:d9:43:fc:14:c6:0a:c0:e3:04:dd:26:1c:89:f6:
b6:a8:ff:7d:c6:b2:1e:7d:f5:e9:dc:5d:6a:a8:a0:ec:11:54:
7a:87:6f:56:0c:27:32:e7:ca:3a:67:1f:ba:18:d7:6a:84:b5:
e0:a6:23:52
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUcOoSkdNFHqS8TbluXeFcUsNETu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0
NzQyNDRCMTAeFw0yNDA4MDgxNDU1MDBaFw0yNTA4MDcxNTAwMDBaMDMxMTAvBgNV
BAMTKDE5RDY3MzdCOTQ5M0JERDFDMDhDQjk4OTYxOUJGQzhFODYyQzdFNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rUNjfkKArN0hyNoALxZ7nk27
NH4IawyjlLpbpbV5KC1cHWq7J8WeMM9lB9DH0dnCqlJbMRpgDehZUJ4Fz/G2akV6
C75qo4WZ/qCduV5O2/oCneIORdnLYKqQv9mtHsRftzq1YZOGMFV/5LCu9rFEf4nW
LDh81fEejb9hbxTP6D7cl4vdoSm/T0mvkci0Aclc9PLerC/rYqfCA9qblYeJnNjp
d48GTHllRxBIgfA2nTj+fa8XotaRkixlBzwvEd7iA/ma7KAXZ95syj03NavR80qI
ZiPHSoaI7a9m+BB6RlKsJPqdzGiUVZI6amxCCmNpD+bAr741OaUgWaf7WKGnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUGdZze5STvdHAjLmJYZv8joYsflUwHwYDVR0j
BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG
RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy
NDRCMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MjRmYTlhLWU1ZjMtNDI2NS05
ZTFkLTg0ZTQ1MzU5NjFkMC8wLzMxMzAzMzJlMzEzMDM1MmUzMTM5MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnacIwDQYJ
KoZIhvcNAQELBQADggEBAItBxljOHAVTxIHWTqh7woaVI76sc9Z31TOggVDoATYU
JTiv6yJSbG/BBA6rePOXHkk6FZeEhwuDHpBklGClG3ayGya+UQRplL5Ldg+joMMv
ZeYTcX/YagHFP3/yBHc0VnRJS+xy142JR5S+bnJ3HhNd1BGsxFa556xQDf3AbNbb
hhv5uGkWLfzG4Vywfw3KLFnZ3JHwG5czg4nPlrRo4Qm1RIqtXhOAraGvsJGdYUnX
/SDA5ddJ4Stm/AUURwXojm9DMjV9g1WXZHXZQ/wUxgrA4wTdJhyJ9rao/33Gsh59
9encXWqooOwRVHqHb1YMJzLnyjpnH7oY12qEteCmI1I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:28 2025 by rpki-client