Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa
File: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (raw, json)
Hash identifier: alDRN92tlwgNSOsmGcO4bYs5k2yVLt0hg1F97xm610Y=
Subject key identifier: A9:BA:19:19:95:AE:FC:D6:BC:1B:C2:55:4A:43:43:74:56:7C:A9:90
Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17
Certificate serial: 2C21C0A9089D05E53BDE11799AF2D2B026F3DC9B
Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa
Signing time: Sat 28 Sep 2024 21:00:02 +0000
ROA not before: Sat 28 Sep 2024 20:55:02 +0000
ROA not after: Sat 27 Sep 2025 21:00:02 +0000
asID: 139438
IP address blocks: 103.145.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:21:c0:a9:08:9d:05:e5:3b:de:11:79:9a:f2:d2:b0:26:f3:dc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17
Validity
Not Before: Sep 28 20:55:02 2024 GMT
Not After : Sep 27 21:00:02 2025 GMT
Subject: CN=A9BA191995AEFCD6BC1BC2554A434374567CA990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:d5:43:ac:c4:45:57:77:4b:d5:e5:c0:4e:
71:2b:7e:19:f3:df:e5:75:d1:da:e5:c2:13:9e:e6:
b8:29:cb:8f:22:43:ad:70:ac:38:8d:68:fd:fc:9a:
96:9e:a9:e9:b3:3d:59:6f:a8:51:6c:dc:80:b9:ce:
9b:cb:e1:f6:5d:9b:e9:a7:7e:c9:c1:03:d1:93:fc:
9d:5f:0d:45:04:4a:60:91:cc:e9:b6:68:23:df:24:
4b:47:4d:26:2b:bf:d5:e8:7f:b4:4e:da:ca:be:5d:
d4:6d:78:00:19:0f:d8:35:67:d0:de:5b:69:51:ef:
cb:1f:8c:7b:07:b8:cc:24:38:ed:78:5a:06:d6:27:
9b:eb:b3:86:75:87:48:e3:b4:6a:bd:cc:d8:18:86:
4b:21:45:9f:5b:9b:a2:07:13:1c:95:cb:15:5b:73:
cb:bc:fb:a1:e8:eb:94:5a:80:c1:c8:71:d4:1b:4e:
c1:4f:6a:91:34:55:cf:19:2d:9f:52:1e:24:c1:2e:
d9:47:2c:3e:80:3e:33:46:9d:ae:4b:3d:88:0e:b9:
3f:6c:78:8f:6a:93:c4:e1:a7:5d:a4:21:a0:c0:af:
74:8c:5e:99:48:00:9c:b9:65:dd:52:f1:58:c7:b1:
82:a1:19:17:db:ed:f6:d1:ad:2c:62:27:1d:48:54:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:19:19:95:AE:FC:D6:BC:1B:C2:55:4A:43:43:74:56:7C:A9:90
X509v3 Authority Key Identifier:
keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.15.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ba:27:93:d1:ce:dd:64:26:45:f2:ea:00:97:c0:fe:61:e1:
c3:e2:c3:c0:a9:b9:22:bc:f6:e2:14:04:c3:13:74:9b:4b:4c:
ce:ab:81:ef:f3:ba:6f:80:3f:83:a7:85:f1:85:21:61:93:53:
e4:0f:26:95:19:7d:8f:57:d1:a4:c9:5e:53:6f:28:d1:36:77:
ab:b1:a2:9d:3f:cf:17:e3:1a:1e:73:4a:92:e7:d7:3c:d6:df:
bd:b8:15:5a:3d:ed:1a:40:41:c4:12:71:b2:b9:d0:ab:d1:a8:
dd:10:12:d8:3b:83:ac:28:c0:70:a9:4f:67:44:84:99:c8:c7:
cb:66:78:7d:60:a8:c0:1e:15:52:7b:8f:4d:f2:7b:5f:e8:c5:
60:8c:6f:d9:c1:1a:cf:93:d7:2a:81:51:58:f2:c4:56:9a:46:
dc:83:c7:0c:a8:4e:29:e1:f7:0e:f4:0f:34:b1:0c:c9:96:44:
ff:66:18:b4:06:33:a3:49:27:12:54:d7:43:f8:0c:2c:01:60:
7a:b3:26:7f:e9:e9:74:5f:ec:79:b3:01:ea:13:65:fd:b4:d2:
0a:87:e4:ed:ef:11:07:8c:14:f4:b2:fe:bf:47:0d:de:d9:80:
59:59:18:2a:82:bb:25:3c:57:a1:6a:a3:24:7d:a4:5c:83:da:
71:dd:fc:1d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULCHAqQidBeU73hF5mvLSsCbz3JswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy
RUJEMkExNzAeFw0yNDA5MjgyMDU1MDJaFw0yNTA5MjcyMTAwMDJaMDMxMTAvBgNV
BAMTKEE5QkExOTE5OTVBRUZDRDZCQzFCQzI1NTRBNDM0Mzc0NTY3Q0E5OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/dVDrMRFV3dL1eXATnErfhnz
3+V10drlwhOe5rgpy48iQ61wrDiNaP38mpaeqemzPVlvqFFs3IC5zpvL4fZdm+mn
fsnBA9GT/J1fDUUESmCRzOm2aCPfJEtHTSYrv9Xof7RO2sq+XdRteAAZD9g1Z9De
W2lR78sfjHsHuMwkOO14WgbWJ5vrs4Z1h0jjtGq9zNgYhkshRZ9bm6IHExyVyxVb
c8u8+6Ho65RagMHIcdQbTsFPapE0Vc8ZLZ9SHiTBLtlHLD6APjNGna5LPYgOuT9s
eI9qk8Thp12kIaDAr3SMXplIAJy5Zd1S8VjHsYKhGRfb7fbRrSxiJx1IVC5jAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqboZGZWu/Na8G8JVSkNDdFZ8qZAwHwYDVR0j
BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG
RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE
MkExNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMDQyMzNmLWJiMmMtNDdkNy05
MDFjLWUzYzgyZjhkNDIzYy8wLzMxMzAzMzJlMzEzNDM1MmUzMTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5EPMA0GCSqG
SIb3DQEBCwUAA4IBAQBXuieT0c7dZCZF8uoAl8D+YeHD4sPAqbkivPbiFATDE3Sb
S0zOq4Hv87pvgD+Dp4XxhSFhk1PkDyaVGX2PV9GkyV5TbyjRNnersaKdP88X4xoe
c0qS59c81t+9uBVaPe0aQEHEEnGyudCr0ajdEBLYO4OsKMBwqU9nRISZyMfLZnh9
YKjAHhVSe49N8ntf6MVgjG/ZwRrPk9cqgVFY8sRWmkbcg8cMqE4p4fcO9A80sQzJ
lkT/Zhi0BjOjSScSVNdD+AwsAWB6syZ/6el0X+x5swHqE2X9tNIKh+Tt7xEHjBT0
sv6/Rw3e2YBZWRgqgrslPFehaqMkfaRcg9px3fwd
-----END CERTIFICATE-----
Generated at Fri May 2 01:08:22 2025 by rpki-client