Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa
File: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier: 3q/CQB6AAqmbKR7BJ9ieGoRqrYEVNBUK4VjLkCeS2sQ=
Subject key identifier: C8:02:78:DA:FC:C8:A3:2F:22:FE:B2:64:54:67:92:5B:7D:82:64:F0
Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Certificate serial: 1E9FEB7A7CFE5772E9FD60F6F30317BCB061FFA0
Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa
Signing time: Tue 25 Jun 2024 11:00:01 +0000
ROA not before: Tue 25 Jun 2024 10:55:01 +0000
ROA not after: Tue 24 Jun 2025 11:00:01 +0000
asID: 38524
IP address blocks: 103.191.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9f:eb:7a:7c:fe:57:72:e9:fd:60:f6:f3:03:17:bc:b0:61:ff:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Validity
Not Before: Jun 25 10:55:01 2024 GMT
Not After : Jun 24 11:00:01 2025 GMT
Subject: CN=C80278DAFCC8A32F22FEB2645467925B7D8264F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:19:81:3e:80:8a:94:79:c3:27:ac:1f:13:
4f:c7:26:8f:03:34:67:b1:be:b9:6f:62:70:e5:f8:
cd:12:7d:39:38:f3:9d:05:28:92:af:76:91:de:e5:
af:97:8a:f6:27:18:a0:34:99:e4:ec:cd:cf:64:59:
d5:66:1a:90:10:6e:29:b5:0c:f2:81:7d:a6:f8:85:
48:13:4e:dd:e7:89:c5:69:b3:de:71:1a:ef:43:ea:
f0:1c:1f:6a:74:cf:ee:d0:3c:51:45:ea:bd:d2:4a:
0b:b6:90:30:23:86:e5:c5:49:14:38:10:cd:77:30:
89:ad:c0:de:04:2a:5a:ca:b3:cf:2f:de:29:77:d4:
bd:22:27:51:38:39:06:72:ae:be:c6:03:d5:a3:b7:
4a:31:b8:9a:c0:32:84:a3:96:cb:26:8e:4e:76:30:
5d:97:8d:fb:31:db:db:cd:0d:a8:9d:44:18:f5:1e:
d2:e4:af:82:c2:7c:f7:82:da:2c:36:2f:f3:02:22:
19:12:34:98:dc:68:63:4c:dc:e0:7c:09:18:64:1f:
16:6c:3a:09:b7:03:08:15:60:78:89:23:c8:85:95:
15:55:40:e1:8e:79:1d:5d:36:65:51:a5:5c:71:f3:
67:54:e1:12:94:4e:f0:e1:d7:55:f0:65:86:f3:57:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:02:78:DA:FC:C8:A3:2F:22:FE:B2:64:54:67:92:5B:7D:82:64:F0
X509v3 Authority Key Identifier:
keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.153.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1f:4f:56:10:31:30:08:c0:4e:65:23:a0:cb:60:3a:c6:b1:
a2:c2:b8:39:a7:f7:26:8d:d1:f3:41:ff:73:c8:a5:de:e8:6c:
e1:39:24:0b:54:a0:56:d6:27:49:13:48:02:4f:11:85:01:44:
09:70:ea:d3:77:9f:07:09:f9:76:d1:12:c7:5c:8d:17:42:51:
2a:4d:4a:27:59:44:7b:be:88:9c:7b:08:b6:d3:fb:47:b6:3b:
b3:ac:42:58:fd:a4:32:d7:ed:b2:3c:57:d8:bd:ba:67:11:f9:
ed:67:ac:98:91:a2:6c:dc:48:24:76:48:10:1f:69:7b:f7:bd:
40:42:1f:fd:e8:ed:a3:e3:99:01:d7:52:8e:db:22:8c:11:27:
0f:c2:56:61:bb:ae:89:64:07:eb:ff:43:b6:ff:34:94:d0:eb:
05:5f:8b:f6:e5:53:90:77:ef:44:0b:4a:95:14:fc:55:ec:cb:
fb:af:bb:b5:4e:35:f7:70:9d:a4:2c:02:23:fe:05:d0:bc:85:
32:02:01:89:f7:a6:fc:ea:4d:e6:87:35:67:23:3d:0e:77:65:
ce:e7:b1:0e:68:cc:89:e4:a0:9e:29:be:76:d9:73:c6:0e:86:
a6:e2:60:5f:58:6a:b7:2e:63:51:79:2f:2c:72:13:29:1e:5b:
7b:fb:15:e9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHp/renz+V3Lp/WD28wMXvLBh/6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0
MzFGMEY0NzAeFw0yNDA2MjUxMDU1MDFaFw0yNTA2MjQxMTAwMDFaMDMxMTAvBgNV
BAMTKEM4MDI3OERBRkNDOEEzMkYyMkZFQjI2NDU0Njc5MjVCN0Q4MjY0RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uBmBPoCKlHnDJ6wfE0/HJo8D
NGexvrlvYnDl+M0SfTk4850FKJKvdpHe5a+XivYnGKA0meTszc9kWdVmGpAQbim1
DPKBfab4hUgTTt3nicVps95xGu9D6vAcH2p0z+7QPFFF6r3SSgu2kDAjhuXFSRQ4
EM13MImtwN4EKlrKs88v3il31L0iJ1E4OQZyrr7GA9Wjt0oxuJrAMoSjlssmjk52
MF2Xjfsx29vNDaidRBj1HtLkr4LCfPeC2iw2L/MCIhkSNJjcaGNM3OB8CRhkHxZs
Ogm3AwgVYHiJI8iFlRVVQOGOeR1dNmVRpVxx82dU4RKUTvDh11XwZYbzV5N/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUyAJ42vzIoy8i/rJkVGeSW32CZPAwHwYDVR0j
BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB
NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG
MEY0Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2YTZjYTEyLWIyODctNGFjNy04
N2I4LTZjZDczMzUzZTY3Zi8wLzMxMzAzMzJlMzEzOTMxMmUzMTM1MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7+ZMA0GCSqG
SIb3DQEBCwUAA4IBAQCYH09WEDEwCMBOZSOgy2A6xrGiwrg5p/cmjdHzQf9zyKXe
6GzhOSQLVKBW1idJE0gCTxGFAUQJcOrTd58HCfl20RLHXI0XQlEqTUonWUR7voic
ewi20/tHtjuzrEJY/aQy1+2yPFfYvbpnEfntZ6yYkaJs3EgkdkgQH2l7971AQh/9
6O2j45kB11KO2yKMEScPwlZhu66JZAfr/0O2/zSU0OsFX4v25VOQd+9EC0qVFPxV
7Mv7r7u1TjX3cJ2kLAIj/gXQvIUyAgGJ96b86k3mhzVnIz0Od2XO57EOaMyJ5KCe
Kb522XPGDoam4mBfWGq3LmNReS8schMpHlt7+xXp
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:34 2025 by rpki-client