Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/3130332e382e35362e302f32322d3234203d3e203435373037.roa
File: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (raw, json)
Hash identifier: e0FCZrIOKWaH0btSP4kAUqXaQNeE2QggQ8Gj6R8jPew=
Subject key identifier: 54:26:B3:16:DD:1F:8D:05:5C:A6:56:CC:8D:2A:CD:36:FD:E2:C3:08
Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
Certificate serial: 59A970330078006B50CC9BEE340607C833ADD5D1
Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/3130332e382e35362e302f32322d3234203d3e203435373037.roa
Signing time: Fri 27 Dec 2024 08:00:01 +0000
ROA not before: Fri 27 Dec 2024 07:55:01 +0000
ROA not after: Fri 26 Dec 2025 08:00:01 +0000
asID: 45707
IP address blocks: 103.8.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a9:70:33:00:78:00:6b:50:cc:9b:ee:34:06:07:c8:33:ad:d5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
Validity
Not Before: Dec 27 07:55:01 2024 GMT
Not After : Dec 26 08:00:01 2025 GMT
Subject: CN=5426B316DD1F8D055CA656CC8D2ACD36FDE2C308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:65:04:b6:e3:9e:63:e0:91:77:99:fa:7f:b7:
5c:5a:ce:7a:a4:ad:ad:d0:f9:a9:e0:f8:77:d8:df:
93:5b:ab:98:b9:93:e8:92:be:2f:cb:4e:47:75:39:
9f:f6:f7:f4:32:48:6e:07:3d:d2:3c:ab:9d:13:6c:
55:49:b9:82:78:49:f4:8d:67:d8:18:a6:97:ee:95:
db:c6:e0:cd:e6:d6:8a:3b:31:38:ce:23:58:28:1f:
3f:99:93:df:d8:bc:e7:58:e2:81:e9:8f:71:ee:32:
a3:5f:45:85:5a:49:81:cf:78:78:6e:10:47:15:82:
4d:c2:23:99:95:34:50:0d:bb:c9:90:9d:dd:e1:7b:
91:7b:0b:41:6e:e3:ef:87:f0:f2:b9:db:bc:46:c9:
b1:c5:68:a7:90:8b:0c:d5:21:df:3f:c7:b4:29:f3:
1f:6f:51:37:b3:df:10:b3:e4:5f:6b:30:d3:6f:9d:
72:17:0e:e2:c6:df:2b:5c:0f:e1:42:10:92:74:44:
42:b8:10:71:49:2f:71:b2:49:f0:e0:5b:2a:d0:d5:
a8:ec:5b:94:c6:5b:b4:18:be:5b:a4:53:c6:82:6a:
08:51:ce:25:15:8a:0a:ad:1a:ae:94:e0:fb:be:16:
6c:54:ac:bc:eb:8b:07:ef:53:cb:bb:d7:24:af:c5:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:B3:16:DD:1F:8D:05:5C:A6:56:CC:8D:2A:CD:36:FD:E2:C3:08
X509v3 Authority Key Identifier:
keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/3130332e382e35362e302f32322d3234203d3e203435373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.56.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:ab:8f:18:15:ca:31:79:85:90:91:60:1d:ba:4b:a7:f7:e4:
5d:4b:c7:32:68:00:4d:03:e4:d5:ce:b8:a0:1a:58:81:79:94:
3a:19:00:18:ed:b9:2b:1a:df:f8:ac:b6:8b:7e:49:62:58:c2:
37:d9:b9:c0:34:2d:e4:f2:7a:b2:c6:ca:ca:d9:b6:44:d9:e3:
12:2b:7e:03:c9:60:69:c8:ab:15:c1:0e:3c:cc:3b:cc:47:3d:
72:40:25:43:bc:50:d1:ac:50:73:1f:54:0a:13:b2:11:99:8b:
9f:a6:17:72:77:3d:f9:2b:4e:4d:f7:1d:18:86:90:82:2f:ca:
58:7c:67:7c:24:d4:0c:31:6b:63:11:9e:5a:41:69:41:38:a2:
14:bb:b8:2a:d0:fa:f3:73:3d:69:64:e2:9f:6f:4d:e6:d7:f2:
40:ea:06:ef:0a:b9:b0:02:0d:db:61:f0:41:0f:bb:a2:ec:5e:
22:c0:52:e3:97:a1:25:2c:d1:56:b9:d0:d0:19:59:c2:23:65:
6e:02:3a:db:0f:75:d2:56:a3:15:1f:43:09:24:01:a5:f9:8a:
87:69:e0:87:00:83:48:33:06:da:a4:5a:9f:83:ec:41:e7:82:
48:9d:ea:f0:97:9f:b1:47:5d:62:3b:4c:f7:82:7e:2d:be:be:
6b:9d:e2:4d
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUWalwMwB4AGtQzJvuNAYHyDOt1dEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5
QjJBM0NDQjAeFw0yNDEyMjcwNzU1MDFaFw0yNTEyMjYwODAwMDFaMDMxMTAvBgNV
BAMTKDU0MjZCMzE2REQxRjhEMDU1Q0E2NTZDQzhEMkFDRDM2RkRFMkMzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyZQS2455j4JF3mfp/t1xaznqk
ra3Q+ang+HfY35Nbq5i5k+iSvi/LTkd1OZ/29/QySG4HPdI8q50TbFVJuYJ4SfSN
Z9gYppfuldvG4M3m1oo7MTjOI1goHz+Zk9/YvOdY4oHpj3HuMqNfRYVaSYHPeHhu
EEcVgk3CI5mVNFANu8mQnd3he5F7C0Fu4++H8PK527xGybHFaKeQiwzVId8/x7Qp
8x9vUTez3xCz5F9rMNNvnXIXDuLG3ytcD+FCEJJ0REK4EHFJL3GySfDgWyrQ1ajs
W5TGW7QYvlukU8aCaghRziUVigqtGq6U4Pu+FmxUrLzriwfvU8u71ySvxQ7dAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUVCazFt0fjQVcplbMjSrNNv3iwwgwHwYDVR0j
BBgwFoAUdUvASJJDBjKoyWWvTFtxxZsqPMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MGQyYmRlNC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC83NTRCQzA0ODky
NDMwNjMyQThDOTY1QUY0QzVCNzFDNTlCMkEzQ0NCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5QjJB
M0NDQi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw
YmYtZjVkNGQyNzczMzZiLzAvMzEzMDMzMmUzODJlMzUzNjJlMzAyZjMyMzIyZDMy
MzQyMDNkM2UyMDM0MzUzNzMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnCDgwDQYJKoZIhvcNAQEL
BQADggEBANerjxgVyjF5hZCRYB26S6f35F1LxzJoAE0D5NXOuKAaWIF5lDoZABjt
uSsa3/istot+SWJYwjfZucA0LeTyerLGysrZtkTZ4xIrfgPJYGnIqxXBDjzMO8xH
PXJAJUO8UNGsUHMfVAoTshGZi5+mF3J3PfkrTk33HRiGkIIvylh8Z3wk1Awxa2MR
nlpBaUE4ohS7uCrQ+vNzPWlk4p9vTebX8kDqBu8KubACDdth8EEPu6LsXiLAUuOX
oSUs0Va50NAZWcIjZW4COtsPddJWoxUfQwkkAaX5iodp4IcAg0gzBtqkWp+D7EHn
gkid6vCXn7FHXWI7TPeCfi2+vmud4k0=
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:26 2025 by rpki-client