Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa
File: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier: l/5HgKnT7J8DLMc5KXCSqh4O/akFH+dhFOMVMx/cS/M=
Subject key identifier: 75:5B:E5:3A:CE:A7:E1:64:B1:B8:74:7F:18:37:BF:1F:8F:61:EF:80
Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Certificate serial: 51E44A8E5BB959614883EF5E7C991AE4E2AB13A6
Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa
Signing time: Sun 18 Aug 2024 10:00:56 +0000
ROA not before: Sun 18 Aug 2024 09:55:56 +0000
ROA not after: Sun 17 Aug 2025 10:00:56 +0000
asID: 17995
IP address blocks: 103.139.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e4:4a:8e:5b:b9:59:61:48:83:ef:5e:7c:99:1a:e4:e2:ab:13:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Validity
Not Before: Aug 18 09:55:56 2024 GMT
Not After : Aug 17 10:00:56 2025 GMT
Subject: CN=755BE53ACEA7E164B1B8747F1837BF1F8F61EF80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:b1:52:39:9b:36:e5:9b:07:75:b5:e7:d1:
d9:88:6f:74:6b:9b:ec:7e:d0:3a:c0:e2:12:1c:02:
9e:e2:07:f8:b7:a3:6c:92:7f:82:57:3e:9f:c5:06:
0b:f9:fc:89:c8:e9:5c:bb:36:f3:14:05:ab:95:96:
77:a3:1f:96:09:db:cd:e7:23:dc:5a:c5:0f:b5:58:
a2:cb:96:ae:e2:33:0c:d4:bd:5d:58:cd:fd:19:bc:
87:8a:29:e5:74:af:92:ea:66:83:8c:c5:a4:08:0a:
05:3f:12:d1:49:b4:8c:8a:30:c8:9a:29:a9:bd:7e:
b7:17:96:86:84:92:99:08:28:f3:81:ec:55:44:d2:
cf:06:04:7a:89:db:6b:33:d9:17:f9:11:23:4d:ad:
8c:41:b5:b6:48:2a:16:ef:64:35:a8:79:73:d9:24:
d7:cc:2c:23:25:a2:96:ed:54:f8:c7:ed:38:5b:8f:
d8:1d:eb:dd:ad:62:20:c0:d0:0a:ce:63:4a:2d:e5:
10:2f:e1:4e:ad:c6:22:ec:70:5c:f0:31:c3:19:2b:
bc:ce:4f:98:ca:99:ed:0c:17:ce:aa:aa:f9:4f:9e:
0d:33:70:d3:dc:bb:fe:e1:eb:ac:ae:0d:f7:be:cd:
30:e1:a7:72:9e:ce:50:72:b7:c5:1d:ed:8d:ac:21:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5B:E5:3A:CE:A7:E1:64:B1:B8:74:7F:18:37:BF:1F:8F:61:EF:80
X509v3 Authority Key Identifier:
keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:38:56:3b:c3:ec:0b:a5:d8:8b:cf:c5:ce:1b:06:05:e5:9a:
73:bc:ac:8f:a8:07:69:ae:61:28:0a:fc:65:d4:dd:d1:bc:14:
39:6c:2e:2a:2e:e7:15:c1:66:39:61:bd:66:ae:0a:51:40:a8:
51:43:13:a7:eb:36:8d:25:76:cc:a5:bc:e4:15:8b:b3:e2:bc:
c6:df:1a:cd:65:ab:44:ab:b6:4b:13:c2:eb:fc:fc:6d:f9:c9:
3d:c1:0d:57:5f:8b:c2:09:f5:78:2a:53:43:2c:d5:b0:21:b7:
69:84:52:4f:1f:d7:2d:f2:a8:99:4d:94:c0:fe:e8:6a:4b:c5:
f4:d1:8e:19:a8:2f:b2:f7:fa:bb:aa:81:f8:48:8b:b5:35:f0:
12:28:52:b2:bc:c7:2a:5b:c8:2f:92:9d:39:b7:60:47:d8:8f:
1f:b2:da:ed:27:ad:9d:62:70:a6:8c:3f:a6:b9:21:79:95:76:
28:11:95:12:05:e4:e3:41:16:67:d1:1c:55:da:0f:6f:19:b0:
10:75:ae:b3:9d:99:17:90:6b:96:99:2c:4b:c9:67:43:9d:32:
08:18:a8:b8:92:f9:cd:8f:4e:f3:36:e2:e4:27:6d:9f:cc:68:
50:29:3f:c3:0e:52:79:5b:a3:71:6f:24:20:a0:94:20:56:0d:
f5:89:f7:89
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUeRKjlu5WWFIg+9efJka5OKrE6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB
MEE3Mjc5OTAeFw0yNDA4MTgwOTU1NTZaFw0yNTA4MTcxMDAwNTZaMDMxMTAvBgNV
BAMTKDc1NUJFNTNBQ0VBN0UxNjRCMUI4NzQ3RjE4MzdCRjFGOEY2MUVGODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxzbFSOZs25ZsHdbXn0dmIb3Rr
m+x+0DrA4hIcAp7iB/i3o2ySf4JXPp/FBgv5/InI6Vy7NvMUBauVlnejH5YJ283n
I9xaxQ+1WKLLlq7iMwzUvV1Yzf0ZvIeKKeV0r5LqZoOMxaQICgU/EtFJtIyKMMia
Kam9frcXloaEkpkIKPOB7FVE0s8GBHqJ22sz2Rf5ESNNrYxBtbZIKhbvZDWoeXPZ
JNfMLCMlopbtVPjH7Thbj9gd692tYiDA0ArOY0ot5RAv4U6txiLscFzwMcMZK7zO
T5jKme0MF86qqvlPng0zcNPcu/7h66yuDfe+zTDhp3KezlByt8Ud7Y2sIQdjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUdVvlOs6n4WSxuHR/GDe/H49h74AwHwYDVR0j
BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC
RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3
Mjc5OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyMzA3MzkwLTZlZjMtNDQ3Ni1h
NmFhLWQwYzU3ODNlMWYzNy8wLzMxMzAzMzJlMzEzMzM5MmUzNDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeLLzANBgkqhkiG
9w0BAQsFAAOCAQEAbzhWO8PsC6XYi8/FzhsGBeWac7ysj6gHaa5hKAr8ZdTd0bwU
OWwuKi7nFcFmOWG9Zq4KUUCoUUMTp+s2jSV2zKW85BWLs+K8xt8azWWrRKu2SxPC
6/z8bfnJPcENV1+Lwgn1eCpTQyzVsCG3aYRSTx/XLfKomU2UwP7oakvF9NGOGagv
svf6u6qB+EiLtTXwEihSsrzHKlvIL5KdObdgR9iPH7La7SetnWJwpow/prkheZV2
KBGVEgXk40EWZ9EcVdoPbxmwEHWus52ZF5BrlpksS8lnQ50yCBiouJL5zY9O8zbi
5Cdtn8xoUCk/ww5SeVujcW8kIKCUIFYN9Yn3iQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:17 2025 by rpki-client