Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa
File: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier: pGDR6rhScn8r5O3Q0Nc/rhXEPBOf1EMfYizva6sFkRQ=
Subject key identifier: 81:3D:B1:58:A1:51:5C:09:91:16:F6:0E:FB:53:9B:90:45:0B:56:56
Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
Certificate serial: 75B908FE6C668F268F7A6CAE65D49C0BF7CCF5BE
Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa
Signing time: Tue 23 Apr 2024 05:00:01 +0000
ROA not before: Tue 23 Apr 2024 04:55:01 +0000
ROA not after: Tue 22 Apr 2025 05:00:01 +0000
asID: 17995
IP address blocks: 103.164.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b9:08:fe:6c:66:8f:26:8f:7a:6c:ae:65:d4:9c:0b:f7:cc:f5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
Validity
Not Before: Apr 23 04:55:01 2024 GMT
Not After : Apr 22 05:00:01 2025 GMT
Subject: CN=813DB158A1515C099116F60EFB539B90450B5656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:ce:0a:d0:16:0b:7e:33:b8:cb:6b:d5:ef:
ec:97:71:95:51:ce:2a:b7:73:67:63:1b:c8:c7:d4:
9e:74:06:dc:93:bd:79:b9:19:3a:5f:89:da:e2:63:
a0:43:78:33:7e:f1:e0:89:5f:ed:e9:97:b0:30:d3:
10:7b:5f:7f:82:ca:1d:56:55:e7:6a:cd:ed:44:13:
6c:50:54:8b:00:f6:b9:56:88:33:bc:10:05:da:93:
6e:da:03:2f:e1:a0:1d:53:0f:96:04:79:4f:07:fa:
92:76:4b:63:87:59:e8:f7:8c:55:3d:6b:57:66:ae:
c5:25:28:b4:bb:98:85:ab:a4:ff:6d:56:84:6b:16:
52:a1:f3:4e:4a:d7:0b:d8:82:50:45:8e:47:37:bd:
d3:b8:bc:40:b9:13:82:e3:05:cf:f2:fa:fb:38:91:
26:ac:83:5a:7f:50:96:33:84:81:15:8b:89:bd:68:
e6:fc:65:1e:a6:ad:69:d4:03:f3:78:c5:35:ac:23:
c2:fb:31:68:1a:5f:4a:1c:60:e5:61:1e:39:48:26:
6e:b9:40:70:e9:b3:d5:04:de:b5:15:51:00:d7:ab:
ef:d8:34:80:5e:3f:11:7a:c3:ee:1a:78:ec:4e:7b:
15:13:83:b3:99:87:38:4f:dc:2b:8f:fc:40:3b:02:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3D:B1:58:A1:51:5C:09:91:16:F6:0E:FB:53:9B:90:45:0B:56:56
X509v3 Authority Key Identifier:
keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.164.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6f:f6:a4:19:ef:4e:5d:86:8a:89:43:80:ad:80:6b:95:b9:
19:3d:51:43:09:f4:08:d7:0c:2a:14:29:4d:bd:0e:cb:80:27:
9d:91:ad:60:37:23:67:4f:81:48:b7:04:c5:86:d2:ed:c4:d5:
e4:f8:8b:69:72:36:bd:6c:ec:ea:8b:b2:46:c5:39:83:97:1a:
a0:b0:84:b5:e8:bd:ad:ed:54:19:27:35:24:a0:a1:93:70:65:
5c:08:8e:92:65:34:89:53:4c:b0:53:6c:ac:a9:f4:9c:51:d9:
6d:a3:f2:ca:d0:26:73:34:80:ed:1f:58:8c:aa:e4:24:f3:65:
4c:ee:b7:87:0c:4d:cc:cc:d8:27:61:51:85:1d:97:77:12:37:
64:27:65:55:86:35:0a:7e:f0:65:ed:41:41:25:e3:af:5e:76:
6e:58:8a:27:5b:07:c3:21:8e:0a:50:f6:82:28:04:4c:de:9f:
fc:c8:31:75:1e:f7:61:53:26:70:2d:1f:2d:f3:b8:2f:b0:d3:
5b:7f:58:74:b7:9e:fe:1e:ea:73:88:b9:08:66:db:35:35:4c:
9a:eb:0f:ba:b4:b6:82:40:3a:e9:0d:46:8a:2f:93:a6:53:0c:
9f:6f:19:fd:17:4c:28:67:de:29:9f:3d:fe:f2:ab:54:5a:1b:
da:12:5e:a7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdbkI/mxmjyaPemyuZdScC/fM9b4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2
MThEN0QzMDAeFw0yNDA0MjMwNDU1MDFaFw0yNTA0MjIwNTAwMDFaMDMxMTAvBgNV
BAMTKDgxM0RCMTU4QTE1MTVDMDk5MTE2RjYwRUZCNTM5QjkwNDUwQjU2NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mM4K0BYLfjO4y2vV7+yXcZVR
ziq3c2djG8jH1J50BtyTvXm5GTpfidriY6BDeDN+8eCJX+3pl7Aw0xB7X3+Cyh1W
Vedqze1EE2xQVIsA9rlWiDO8EAXak27aAy/hoB1TD5YEeU8H+pJ2S2OHWej3jFU9
a1dmrsUlKLS7mIWrpP9tVoRrFlKh805K1wvYglBFjkc3vdO4vEC5E4LjBc/y+vs4
kSasg1p/UJYzhIEVi4m9aOb8ZR6mrWnUA/N4xTWsI8L7MWgaX0ocYOVhHjlIJm65
QHDps9UE3rUVUQDXq+/YNIBePxF6w+4aeOxOexUTg7OZhzhP3CuP/EA7AufzAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUgT2xWKFRXAmRFvYO+1ObkEULVlYwHwYDVR0j
BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF
ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE
N0QzMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2NzdiMDBjLWRjMmMtNDE5Yy1h
MTAwLTUwYjJmYzdiMWJjMS8wLzMxMzAzMzJlMzEzNjM0MmUzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGekETANBgkqhkiG
9w0BAQsFAAOCAQEAfm/2pBnvTl2GiolDgK2Aa5W5GT1RQwn0CNcMKhQpTb0Oy4An
nZGtYDcjZ0+BSLcExYbS7cTV5PiLaXI2vWzs6ouyRsU5g5caoLCEtei9re1UGSc1
JKChk3BlXAiOkmU0iVNMsFNsrKn0nFHZbaPyytAmczSA7R9YjKrkJPNlTO63hwxN
zMzYJ2FRhR2XdxI3ZCdlVYY1Cn7wZe1BQSXjr152bliKJ1sHwyGOClD2gigETN6f
/MgxdR73YVMmcC0fLfO4L7DTW39YdLee/h7qc4i5CGbbNTVMmusPurS2gkA66Q1G
ii+TplMMn28Z/RdMKGfeKZ89/vKrVFob2hJepw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:17 2025 by rpki-client