Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/3130332e36372e38342e302f32332d3234203d3e20313532303034.roa
File: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (raw, json)
Hash identifier: N/5ZvVZ0rYgeXmpV1zrbx8ChyoSwszYN8MPi6zIhM8E=
Subject key identifier: AE:FF:19:7C:FE:17:7E:87:BB:D9:3A:D8:61:E8:01:84:08:E4:C6:DC
Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771
Certificate serial: 5028A7984ED86A41069F310A24196D1F1E452AAB
Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/3130332e36372e38342e302f32332d3234203d3e20313532303034.roa
Signing time: Fri 03 May 2024 01:45:07 +0000
ROA not before: Fri 03 May 2024 01:40:07 +0000
ROA not after: Fri 02 May 2025 01:45:07 +0000
asID: 152004
IP address blocks: 103.67.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:28:a7:98:4e:d8:6a:41:06:9f:31:0a:24:19:6d:1f:1e:45:2a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771
Validity
Not Before: May 3 01:40:07 2024 GMT
Not After : May 2 01:45:07 2025 GMT
Subject: CN=AEFF197CFE177E87BBD93AD861E8018408E4C6DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:31:66:09:a8:da:f5:4d:71:81:11:1c:2b:
40:b4:17:3a:82:32:17:f8:9f:ed:75:2b:0c:25:cd:
be:c7:98:2b:68:96:ec:bb:79:e1:35:44:a4:ba:d2:
2b:9b:f4:d2:2d:3a:a5:40:53:75:11:de:b0:01:d6:
95:56:da:4d:a6:33:0e:3c:53:7f:7c:d1:2b:09:0a:
2b:04:c7:a8:51:0f:d3:37:18:2a:15:58:51:83:51:
aa:77:83:a2:11:4b:11:56:f0:7f:13:9d:9a:bb:b0:
55:2d:75:96:db:41:31:92:b7:70:a7:71:c9:6b:8b:
06:8e:50:24:fb:f5:52:3d:98:79:af:c0:1a:17:e3:
8a:12:6a:e2:ad:ea:d8:90:59:14:77:02:8f:c3:8b:
23:2e:d0:84:78:7d:e5:32:6d:3c:72:a9:76:ad:6f:
e8:03:33:d9:e7:cb:ac:7d:2d:4f:70:ed:9b:cc:59:
8e:f9:cc:8b:db:a9:71:d5:ec:18:ae:7d:e8:5f:b3:
d5:bf:82:a4:41:a4:1c:38:cd:ba:cd:c9:d3:3c:9c:
0f:91:f4:7f:27:bc:7e:20:63:eb:33:b3:a4:8f:9c:
c6:07:29:61:ef:b8:0f:74:5a:d3:0f:f9:6f:d2:7e:
86:77:50:52:96:51:dc:8d:84:a3:15:63:72:b9:c5:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FF:19:7C:FE:17:7E:87:BB:D9:3A:D8:61:E8:01:84:08:E4:C6:DC
X509v3 Authority Key Identifier:
keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/3130332e36372e38342e302f32332d3234203d3e20313532303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.67.84.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:72:66:4a:2a:94:1e:3f:1f:6a:d8:ba:e6:95:09:1d:66:7b:
c6:dc:5d:a0:c2:90:a5:6f:44:2d:c7:89:cf:05:d8:ca:05:a2:
62:ca:c9:71:ed:ce:2d:e0:bd:d1:03:5b:73:63:f2:ec:a3:0a:
a6:55:10:6f:0f:e4:24:2e:14:ac:d8:73:00:24:44:05:78:b0:
27:96:f6:87:79:01:e9:3f:ff:25:fd:52:ef:1b:c0:d4:a9:78:
3c:d0:35:ef:fd:1a:ff:00:41:a7:e3:c9:f9:8a:93:80:6e:48:
bb:6a:fe:61:f5:c9:49:98:c3:a8:dc:01:a9:72:8b:35:da:bb:
8b:1b:51:fa:77:01:32:cf:53:ff:d5:85:48:70:70:18:73:e7:
eb:2e:f3:44:7d:df:5a:a9:18:ae:4c:8b:78:76:ce:e9:a8:1a:
60:11:ce:db:41:53:27:74:1b:35:23:24:2e:28:36:b0:b9:18:
e3:0c:e6:a6:ad:dd:ca:e0:82:40:47:d8:e3:ac:49:16:d5:86:
4e:59:43:81:3f:b6:e0:9c:7f:a0:87:a7:1d:4e:b6:a7:b7:1c:
9d:24:29:d5:1c:75:a6:b5:cd:ea:15:5f:85:25:91:33:3b:2b:
17:a6:93:7b:66:95:e6:1f:d3:52:fd:d2:31:11:ef:13:a9:f3:
75:56:16:95
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUCinmE7YakEGnzEKJBltHx5FKqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3
NjRFMDc3MTAeFw0yNDA1MDMwMTQwMDdaFw0yNTA1MDIwMTQ1MDdaMDMxMTAvBgNV
BAMTKEFFRkYxOTdDRkUxNzdFODdCQkQ5M0FEODYxRTgwMTg0MDhFNEM2REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+DFmCaja9U1xgREcK0C0FzqC
Mhf4n+11Kwwlzb7HmCtoluy7eeE1RKS60iub9NItOqVAU3UR3rAB1pVW2k2mMw48
U3980SsJCisEx6hRD9M3GCoVWFGDUap3g6IRSxFW8H8TnZq7sFUtdZbbQTGSt3Cn
cclriwaOUCT79VI9mHmvwBoX44oSauKt6tiQWRR3Ao/DiyMu0IR4feUybTxyqXat
b+gDM9nny6x9LU9w7ZvMWY75zIvbqXHV7Biufehfs9W/gqRBpBw4zbrNydM8nA+R
9H8nvH4gY+szs6SPnMYHKWHvuA90WtMP+W/SfoZ3UFKWUdyNhKMVY3K5xdxJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUrv8ZfP4Xfoe72TrYYegBhAjkxtwwHwYDVR0j
BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5
QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF
MDc3MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFhZDM5NDUwLTQ1ODQtNDg4Mi1i
NWE3LTJjYmMwZTU3NzQ3NC8wLzMxMzAzMzJlMzYzNzJlMzgzNDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdDVDANBgkqhkiG
9w0BAQsFAAOCAQEApXJmSiqUHj8fati65pUJHWZ7xtxdoMKQpW9ELceJzwXYygWi
YsrJce3OLeC90QNbc2Py7KMKplUQbw/kJC4UrNhzACREBXiwJ5b2h3kB6T//Jf1S
7xvA1Kl4PNA17/0a/wBBp+PJ+YqTgG5Iu2r+YfXJSZjDqNwBqXKLNdq7ixtR+ncB
Ms9T/9WFSHBwGHPn6y7zRH3fWqkYrkyLeHbO6agaYBHO20FTJ3QbNSMkLig2sLkY
4wzmpq3dyuCCQEfY46xJFtWGTllDgT+24Jx/oIenHU62p7ccnSQp1Rx1prXN6hVf
hSWRMzsrF6aTe2aV5h/TUv3SMRHvE6nzdVYWlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:28 2025 by rpki-client