Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35392e302f32342d3234203d3e203538343734.roa
File: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (raw, json)
Hash identifier: RxoBR7IgqwvZQhHoUeS2THnUjeeOMC/Li/OZd4zalVk=
Subject key identifier: E4:A8:70:30:4B:78:5F:31:54:6B:88:ED:22:8F:40:BB:33:2F:28:38
Certificate issuer: /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial: 1BB14C56E1652E06DFFFE32F714756270BF4290F
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35392e302f32342d3234203d3e203538343734.roa
Signing time: Sun 25 Aug 2024 06:00:02 +0000
ROA not before: Sun 25 Aug 2024 05:55:02 +0000
ROA not after: Sun 24 Aug 2025 06:00:02 +0000
asID: 58474
IP address blocks: 103.28.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b1:4c:56:e1:65:2e:06:df:ff:e3:2f:71:47:56:27:0b:f4:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Validity
Not Before: Aug 25 05:55:02 2024 GMT
Not After : Aug 24 06:00:02 2025 GMT
Subject: CN=E4A870304B785F31546B88ED228F40BB332F2838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:10:86:0c:05:e0:ac:be:3e:b4:11:84:9d:7e:
6f:55:40:81:ff:d1:50:f6:d0:95:b5:eb:9e:bc:83:
a5:79:a2:56:56:0f:ff:ed:af:8d:8f:3f:1e:17:21:
38:df:44:68:e1:6f:e7:e6:4d:ca:87:57:63:10:f1:
7e:e8:b7:08:bb:01:0d:72:66:77:15:65:aa:55:10:
64:dd:bb:65:cb:18:cd:dc:e3:ec:24:36:bb:b8:06:
30:0c:0e:31:a6:83:42:e3:22:1a:37:64:7a:0d:f6:
a6:d1:4d:d3:6e:91:b1:ce:3d:8b:7c:ab:50:7d:3e:
78:8e:30:64:d8:c0:6d:43:a5:bf:da:e4:9c:d7:ce:
62:17:9b:76:8c:a1:34:80:e6:9e:5d:75:fe:ac:ce:
cb:f5:c1:39:13:15:cb:d7:39:f2:c6:dc:a3:c1:e6:
10:40:62:14:8b:c9:43:2e:2a:26:c7:03:6e:84:3c:
47:b5:8c:49:29:6a:7c:1a:79:3d:1f:98:12:66:66:
3d:bd:67:13:58:36:cd:22:45:88:6a:55:e9:c2:91:
93:d1:86:85:3c:86:9f:3d:08:ce:7e:d2:98:c5:37:
e0:c8:77:78:04:0e:bc:55:ea:e1:e1:33:3d:40:68:
af:a2:a4:e0:23:e6:92:a4:ba:af:d7:b6:a0:0f:56:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A8:70:30:4B:78:5F:31:54:6B:88:ED:22:8F:40:BB:33:2F:28:38
X509v3 Authority Key Identifier:
keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35392e302f32342d3234203d3e203538343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.28.59.0/24
Signature Algorithm: sha256WithRSAEncryption
61:24:f2:b5:9a:4b:8e:d6:7b:ae:b3:15:02:69:8b:10:44:39:
40:09:6a:99:24:c2:8c:db:aa:43:57:07:06:db:7a:2b:cf:1d:
5d:4e:45:21:49:3a:4b:a2:b1:51:6a:89:dc:9c:9c:f5:2d:12:
29:c5:a4:f4:c4:24:59:7c:2f:2d:86:57:50:24:79:72:38:eb:
e3:a3:b6:1e:d1:04:09:6c:19:56:1e:62:b5:38:76:ff:fb:4f:
ae:7d:4f:fd:51:9a:79:7a:13:54:a1:c5:92:5a:6e:33:14:bd:
7c:79:f6:59:eb:d4:c5:80:52:69:9b:41:c8:ee:ad:51:fd:a7:
56:68:0b:b2:49:de:c6:e6:41:8b:a7:1a:33:ea:f1:46:d6:81:
31:e8:20:d8:39:75:5b:aa:63:c3:53:47:71:90:73:67:6a:ac:
e1:bc:80:42:12:11:79:64:84:5b:b6:c6:91:48:15:74:ee:f9:
b9:20:ee:d5:1d:e4:50:da:96:27:63:13:88:5b:fa:34:6d:13:
2c:b6:d3:c7:00:57:e0:97:b2:32:37:58:54:9f:8d:d2:01:72:
af:34:9b:9e:48:62:0d:6e:70:52:cc:61:7d:48:f1:5f:18:e0:
fd:85:6d:af:bc:48:30:8b:1f:c6:a0:81:3f:01:e3:a6:ba:8b:
d0:73:df:72
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUG7FMVuFlLgbf/+MvcUdWJwv0KQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQz
REEyRjA5ODAeFw0yNDA4MjUwNTU1MDJaFw0yNTA4MjQwNjAwMDJaMDMxMTAvBgNV
BAMTKEU0QTg3MDMwNEI3ODVGMzE1NDZCODhFRDIyOEY0MEJCMzMyRjI4MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+EIYMBeCsvj60EYSdfm9VQIH/
0VD20JW16568g6V5olZWD//tr42PPx4XITjfRGjhb+fmTcqHV2MQ8X7otwi7AQ1y
ZncVZapVEGTdu2XLGM3c4+wkNru4BjAMDjGmg0LjIho3ZHoN9qbRTdNukbHOPYt8
q1B9PniOMGTYwG1Dpb/a5JzXzmIXm3aMoTSA5p5ddf6szsv1wTkTFcvXOfLG3KPB
5hBAYhSLyUMuKibHA26EPEe1jEkpanwaeT0fmBJmZj29ZxNYNs0iRYhqVenCkZPR
hoU8hp89CM5+0pjFN+DId3gEDrxV6uHhMz1AaK+ipOAj5pKkuq/XtqAPVtk1AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU5KhwMEt4XzFUa4jtIo9AuzMvKDgwHwYDVR0j
BBgwFoAUlfxgcqSmkKYaC18Us2iCtD2i8JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzA1MTc3YS1hNTAwLTQ5OTYtYjNmZi03MGMxNDRlZGZlY2UvMC85NUZDNjA3MkE0
QTY5MEE2MUEwQjVGMTRCMzY4ODJCNDNEQTJGMDk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQzREEy
RjA5OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMDUxNzdhLWE1MDAtNDk5Ni1i
M2ZmLTcwYzE0NGVkZmVjZS8wLzMxMzAzMzJlMzIzODJlMzUzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzNDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnHDswDQYJKoZIhvcN
AQELBQADggEBAGEk8rWaS47We66zFQJpixBEOUAJapkkwozbqkNXBwbbeivPHV1O
RSFJOkuisVFqidycnPUtEinFpPTEJFl8Ly2GV1AkeXI46+Ojth7RBAlsGVYeYrU4
dv/7T659T/1Rmnl6E1ShxZJabjMUvXx59lnr1MWAUmmbQcjurVH9p1ZoC7JJ3sbm
QYunGjPq8UbWgTHoINg5dVuqY8NTR3GQc2dqrOG8gEISEXlkhFu2xpFIFXTu+bkg
7tUd5FDalidjE4hb+jRtEyy208cAV+CXsjI3WFSfjdIBcq80m55IYg1ucFLMYX1I
8V8Y4P2Fba+8SDCLH8aggT8B46a6i9Bz33I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:40 2025 by rpki-client