Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa
File: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier: 6CpN8aBw/RZzk7vZX82p71fUs1ZsrBjhdxlC+CO80+A=
Subject key identifier: 17:F7:C1:0A:DC:B4:A0:B6:C3:D8:FD:F5:78:CA:CB:03:4B:17:49:81
Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0
Certificate serial: 37FF8D0ED80ECDA687C8DBB6751C76F977BBADB1
Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa
Signing time: Fri 02 Aug 2024 08:00:01 +0000
ROA not before: Fri 02 Aug 2024 07:55:01 +0000
ROA not after: Fri 01 Aug 2025 08:00:01 +0000
asID: 17995
IP address blocks: 103.162.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ff:8d:0e:d8:0e:cd:a6:87:c8:db:b6:75:1c:76:f9:77:bb:ad:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0
Validity
Not Before: Aug 2 07:55:01 2024 GMT
Not After : Aug 1 08:00:01 2025 GMT
Subject: CN=17F7C10ADCB4A0B6C3D8FDF578CACB034B174981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:7f:b7:97:ce:4b:1d:65:e6:36:3b:85:93:
9d:38:81:83:64:f9:94:29:56:eb:73:ac:08:35:7d:
08:19:fa:75:a8:1c:7f:2f:76:c5:03:57:e4:08:13:
bd:80:72:3e:c0:c1:3a:b0:83:b9:cd:03:db:54:a0:
9f:55:ee:7a:41:bf:09:57:6f:c4:97:b9:5b:6b:e9:
dd:a3:27:5c:bd:42:00:22:1c:64:3a:87:e1:0c:49:
7f:25:80:3c:92:ac:f9:80:f6:89:d5:1d:0e:5e:34:
db:ef:a2:81:57:4b:7e:47:38:da:94:eb:85:56:8b:
92:5f:05:b1:fc:fd:9f:1e:b0:4c:b0:d3:df:24:5a:
81:83:cf:48:5b:5f:22:8f:92:60:9e:24:45:24:6a:
c5:9e:fd:92:a7:62:df:66:2c:ce:bb:c5:b1:af:3f:
3d:83:b5:2e:7d:64:2d:8f:19:04:12:16:17:d6:ca:
88:fa:61:b2:8a:8d:2d:e4:43:fa:eb:7a:48:1c:30:
e6:90:f0:49:d8:21:94:1f:d7:10:d7:13:01:5c:64:
13:5c:c0:7a:64:00:f4:95:55:e4:4d:dd:9d:21:33:
2b:0b:d2:aa:d5:bd:c6:2c:b9:b3:82:41:2e:28:ef:
b0:ac:e2:87:c5:c3:a9:93:6f:f2:25:3e:4a:9e:9a:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:C1:0A:DC:B4:A0:B6:C3:D8:FD:F5:78:CA:CB:03:4B:17:49:81
X509v3 Authority Key Identifier:
keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.146.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:4e:6e:4d:48:31:c1:56:29:ba:7f:29:d7:13:0f:87:28:64:
b2:0d:00:8b:af:17:4c:99:10:5f:77:45:ac:b0:02:c5:58:1f:
0c:eb:05:08:84:5f:16:17:23:b5:63:45:09:18:af:ea:34:3f:
bc:1a:64:a7:4e:25:7b:5b:58:0c:af:5a:fe:7b:06:21:b9:6f:
0a:cb:fc:bf:71:f1:e4:8b:89:66:6f:fc:a1:25:c0:c1:94:5a:
5d:2b:21:ce:95:c8:d4:a1:25:73:33:83:47:5b:ce:6f:fd:48:
3f:88:83:6e:fd:25:49:77:35:c2:c8:86:0a:94:54:a2:f1:71:
71:f4:ab:b1:de:9d:62:0f:0b:98:4e:0d:97:1a:d3:ed:2f:b7:
a6:82:b8:ad:d5:7d:e5:bc:b5:8d:ea:cf:d6:66:28:ab:6e:12:
12:d5:df:3c:89:0c:ca:a1:3b:17:e4:f5:ef:cf:3e:0d:2a:32:
a5:b1:88:34:63:35:15:9a:fd:34:a6:4f:08:2e:6c:f2:70:df:
7a:03:fa:e0:6d:47:56:99:87:6f:47:60:86:b4:d8:c0:9c:c8:
70:e9:69:d8:59:77:12:87:80:eb:14:4a:e2:54:80:14:58:99:
69:9c:78:d1:f6:15:1b:01:ab:5f:d0:a5:1a:64:8b:9d:93:b2:
31:e3:fd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:57:54 2025 by rpki-client