Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31362e302f32342d3234203d3e203137393935.roa
File: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier: EKtGUZIRCpNoGmhtlhOhyqc0zqoMHDxaoCUYH4QDF8w=
Subject key identifier: 26:13:D2:D4:3C:04:EB:38:78:AF:29:D3:CA:37:9A:B4:13:D4:C6:AF
Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
Certificate serial: 564F7BF4BADBDEBBBA54074A273D5D4F1A69F685
Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31362e302f32342d3234203d3e203137393935.roa
Signing time: Tue 23 Apr 2024 05:00:01 +0000
ROA not before: Tue 23 Apr 2024 04:55:01 +0000
ROA not after: Tue 22 Apr 2025 05:00:01 +0000
asID: 17995
IP address blocks: 103.164.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:4f:7b:f4:ba:db:de:bb:ba:54:07:4a:27:3d:5d:4f:1a:69:f6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
Validity
Not Before: Apr 23 04:55:01 2024 GMT
Not After : Apr 22 05:00:01 2025 GMT
Subject: CN=2613D2D43C04EB3878AF29D3CA379AB413D4C6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:ac:a9:06:95:67:1a:5b:71:57:13:f5:a1:
98:77:87:ff:ff:6c:ce:ff:13:19:10:9f:91:4c:17:
f7:22:4e:d8:83:ff:be:63:42:91:b7:39:aa:2c:54:
35:3c:58:e4:23:a9:ba:a0:74:67:0f:49:e6:f6:a4:
27:d1:4d:98:3c:b4:3c:4e:57:65:03:ac:83:63:9b:
43:44:90:53:6a:93:23:83:db:0d:a5:3f:c0:19:e8:
32:b9:ba:7d:b0:72:63:6d:8a:aa:2f:1d:0a:3d:62:
f7:0b:fd:3d:f6:1d:f9:b5:26:e4:3f:15:e3:77:ee:
fb:53:7d:84:41:29:53:33:9b:b7:1a:ce:d4:cb:d1:
f8:85:28:5e:92:15:d7:2e:1a:60:78:2e:f7:29:ab:
bc:6f:5e:24:be:74:9d:0d:5a:3b:bc:34:f6:3b:79:
7a:c3:db:55:cc:70:b0:f0:43:a2:05:59:d9:a9:93:
85:17:8e:c0:0d:4d:83:e1:76:f9:a8:7d:81:65:00:
72:8f:ee:60:11:aa:be:90:9c:36:9a:84:6c:3b:1b:
83:79:99:e0:3e:39:2a:37:7c:1d:4a:f3:d2:d5:41:
ab:37:e4:ed:83:2e:a4:b0:b0:61:c7:dd:a9:8e:e3:
d5:c6:2a:35:5e:ae:15:5a:e9:c4:54:fc:f5:05:43:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:13:D2:D4:3C:04:EB:38:78:AF:29:D3:CA:37:9A:B4:13:D4:C6:AF
X509v3 Authority Key Identifier:
keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31362e302f32342d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.16.0/24
Signature Algorithm: sha256WithRSAEncryption
58:72:ad:d4:d1:15:d9:47:f8:bb:cf:43:28:97:98:40:1c:c4:
f3:12:59:2f:7d:27:da:c5:ee:ec:c5:19:0d:2e:7e:b1:44:03:
02:c6:72:8e:b5:74:18:40:8b:86:70:8b:b7:27:b9:38:9c:4f:
d4:d0:91:6b:6d:fa:e6:25:66:18:f0:c7:27:08:26:7c:e2:9a:
95:dc:c5:27:aa:45:f6:26:b5:85:c8:a2:38:32:d1:50:50:f6:
b3:7f:77:c2:7b:b6:63:d8:26:f9:fe:90:ab:31:41:fb:54:51:
1a:58:7b:d2:9e:ee:19:6b:d8:30:22:90:1d:64:5e:c8:21:f0:
15:c0:4c:47:b7:81:a8:f3:6b:c3:58:9a:3d:33:36:4a:83:08:
54:f1:89:32:d6:f1:27:22:c3:a0:cc:6a:a6:a8:8c:15:c7:ea:
4d:aa:f4:3c:fa:9a:dc:43:58:b1:7a:10:24:0d:02:e6:22:b7:
fb:06:0f:67:03:13:58:91:bd:92:2d:b5:47:8f:94:4e:03:cc:
1a:b4:63:81:1b:a4:aa:b7:35:1c:6a:2b:7d:b8:98:ea:fa:5f:
c9:18:a5:ab:dd:92:10:4f:79:b8:6b:2d:13:4f:11:47:5d:56:
99:44:88:dc:7a:85:cb:bf:3c:86:67:6e:c8:06:74:33:07:43:
71:3b:1c:c7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVk979Lrb3ru6VAdKJz1dTxpp9oUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2
MThEN0QzMDAeFw0yNDA0MjMwNDU1MDFaFw0yNTA0MjIwNTAwMDFaMDMxMTAvBgNV
BAMTKDI2MTNEMkQ0M0MwNEVCMzg3OEFGMjlEM0NBMzc5QUI0MTNENEM2QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILaypBpVnGltxVxP1oZh3h///
bM7/ExkQn5FMF/ciTtiD/75jQpG3OaosVDU8WOQjqbqgdGcPSeb2pCfRTZg8tDxO
V2UDrINjm0NEkFNqkyOD2w2lP8AZ6DK5un2wcmNtiqovHQo9YvcL/T32Hfm1JuQ/
FeN37vtTfYRBKVMzm7caztTL0fiFKF6SFdcuGmB4Lvcpq7xvXiS+dJ0NWju8NPY7
eXrD21XMcLDwQ6IFWdmpk4UXjsANTYPhdvmofYFlAHKP7mARqr6QnDaahGw7G4N5
meA+OSo3fB1K89LVQas35O2DLqSwsGHH3amO49XGKjVerhVa6cRU/PUFQxOPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJhPS1DwE6zh4rynTyjeatBPUxq8wHwYDVR0j
BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF
ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE
N0QzMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2NzdiMDBjLWRjMmMtNDE5Yy1h
MTAwLTUwYjJmYzdiMWJjMS8wLzMxMzAzMzJlMzEzNjM0MmUzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGekEDANBgkqhkiG
9w0BAQsFAAOCAQEAWHKt1NEV2Uf4u89DKJeYQBzE8xJZL30n2sXu7MUZDS5+sUQD
AsZyjrV0GECLhnCLtye5OJxP1NCRa2365iVmGPDHJwgmfOKaldzFJ6pF9ia1hcii
ODLRUFD2s393wnu2Y9gm+f6QqzFB+1RRGlh70p7uGWvYMCKQHWReyCHwFcBMR7eB
qPNrw1iaPTM2SoMIVPGJMtbxJyLDoMxqpqiMFcfqTar0PPqa3ENYsXoQJA0C5iK3
+wYPZwMTWJG9ki21R4+UTgPMGrRjgRukqrc1HGorfbiY6vpfyRilq92SEE95uGst
E08RR11WmUSI3HqFy788hmduyAZ0MwdDcTscxw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:16 2025 by rpki-client