Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313431363231.roa
File: 3130332e3135352e36342e302f32332d3233203d3e20313431363231.roa (raw, json)
Hash identifier: oF1/1MfULmQc4zLp6783+3VgzDJ6JQ9P6+cY5iICAlI=
Subject key identifier: 3B:1D:04:82:D1:B0:55:54:C8:AC:42:E1:25:C7:77:BB:BE:75:23:1E
Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial: 16115E6D86987A9B8CB6B6E67F57CF730DDA6514
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313431363231.roa
Signing time: Thu 20 Jun 2024 03:00:02 +0000
ROA not before: Thu 20 Jun 2024 02:55:02 +0000
ROA not after: Thu 19 Jun 2025 03:00:02 +0000
asID: 141621
IP address blocks: 103.155.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:11:5e:6d:86:98:7a:9b:8c:b6:b6:e6:7f:57:cf:73:0d:da:65:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
Validity
Not Before: Jun 20 02:55:02 2024 GMT
Not After : Jun 19 03:00:02 2025 GMT
Subject: CN=3B1D0482D1B05554C8AC42E125C777BBBE75231E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:a5:44:3e:23:76:b8:54:4d:6f:ba:b4:fe:
53:23:e8:fc:36:a6:64:0a:1a:4d:67:86:a5:ae:a8:
f4:56:99:48:7b:5f:0d:e9:05:29:32:87:7d:ac:33:
09:7e:4a:53:05:41:a1:03:55:13:3e:ba:71:d1:fc:
95:b3:98:a4:4c:13:c9:96:17:8c:cf:ff:ac:92:b9:
2e:b9:52:0d:d0:9a:86:49:78:cf:87:cd:10:a3:4b:
b0:13:2e:c4:e2:9c:5a:49:ed:2d:ba:be:05:81:f5:
f3:10:0b:4b:13:47:3f:34:f1:1d:e4:a6:38:6d:3d:
aa:01:93:54:d6:36:f4:7f:fd:8c:8a:e9:bd:49:92:
71:ce:0f:a7:72:5a:64:d6:9f:6b:6f:6b:d8:e0:05:
90:f0:f6:d2:af:8a:77:8a:cb:48:48:3b:86:0a:f0:
54:fc:c6:94:be:d7:87:25:66:1f:cc:8a:da:4f:af:
11:ae:a3:27:e0:a1:17:2d:d6:e1:8d:bf:f5:03:da:
f1:70:4b:db:39:b2:ec:79:12:e7:c6:37:54:79:09:
11:68:43:5f:21:2c:58:a0:e5:f5:f6:bb:aa:f6:0f:
e2:c4:67:44:1f:ed:67:d5:93:b4:08:e0:16:2d:d2:
07:ec:5f:07:f9:fc:0b:29:0b:28:2e:95:2d:15:8a:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1D:04:82:D1:B0:55:54:C8:AC:42:E1:25:C7:77:BB:BE:75:23:1E
X509v3 Authority Key Identifier:
keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313431363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.64.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:ce:c3:9c:e1:6a:69:4f:da:b6:4c:e3:cf:12:9e:b8:56:ff:
4f:73:44:3c:b3:17:10:6c:8b:57:f8:23:98:19:b3:d7:ad:c4:
f5:1d:a5:ac:ee:9d:f7:17:9a:b4:98:d0:25:74:65:99:9c:03:
b0:3a:e7:af:76:02:92:dc:71:c7:8d:9e:4d:ff:45:8f:45:35:
6f:0b:e7:2e:b1:0c:cf:24:cc:df:94:7f:68:ee:ee:c0:3b:28:
1c:9b:64:ac:dd:e8:0b:9b:e1:7f:4f:54:92:77:ec:86:5c:72:
0a:4a:05:fb:96:0a:c6:09:ef:0c:b6:2e:7f:c8:de:b1:bb:98:
a9:75:28:fa:fd:49:9e:35:7a:0c:e9:a5:6b:ad:8e:f8:10:06:
f4:17:d0:bf:d2:c7:7c:cb:7d:d4:1c:0f:db:92:ad:f5:a0:4d:
9f:8c:e9:27:ce:a5:0f:d5:b6:01:eb:9f:45:1e:d9:da:9b:66:
54:34:34:0c:2f:b8:22:29:ab:72:51:84:a0:cf:ad:b6:04:22:
3d:84:08:8e:3f:78:61:94:e3:6c:d4:80:9a:b3:91:0b:1c:fe:
7b:21:4f:d9:c9:c8:54:52:14:2a:e8:ce:fa:c1:e3:ec:b9:b7:
68:3a:9f:04:a7:85:40:8a:f3:0f:93:3e:52:a7:10:60:6c:50:
1f:a4:e6:72
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFhFebYaYepuMtrbmf1fPcw3aZRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew
OTBGNDU1MDAeFw0yNDA2MjAwMjU1MDJaFw0yNTA2MTkwMzAwMDJaMDMxMTAvBgNV
BAMTKDNCMUQwNDgyRDFCMDU1NTRDOEFDNDJFMTI1Qzc3N0JCQkU3NTIzMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQaVEPiN2uFRNb7q0/lMj6Pw2
pmQKGk1nhqWuqPRWmUh7Xw3pBSkyh32sMwl+SlMFQaEDVRM+unHR/JWzmKRME8mW
F4zP/6ySuS65Ug3QmoZJeM+HzRCjS7ATLsTinFpJ7S26vgWB9fMQC0sTRz808R3k
pjhtPaoBk1TWNvR//YyK6b1JknHOD6dyWmTWn2tva9jgBZDw9tKvineKy0hIO4YK
8FT8xpS+14clZh/MitpPrxGuoyfgoRct1uGNv/UD2vFwS9s5sux5EufGN1R5CRFo
Q18hLFig5fX2u6r2D+LEZ0Qf7WfVk7QI4BYt0gfsXwf5/AspCygulS0VijPDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOx0EgtGwVVTIrELhJcd3u751Ix4wHwYDVR0j
BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz
RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG
NDU1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NjRhYmZiLTE5NjItNDRhOS04
Mzc2LWNiZmIxZWZjZGFiYS8wLzMxMzAzMzJlMzEzNTM1MmUzNjM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDMxMzYzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5tAMA0GCSqG
SIb3DQEBCwUAA4IBAQCjzsOc4WppT9q2TOPPEp64Vv9Pc0Q8sxcQbItX+COYGbPX
rcT1HaWs7p33F5q0mNAldGWZnAOwOuevdgKS3HHHjZ5N/0WPRTVvC+cusQzPJMzf
lH9o7u7AOygcm2Ss3egLm+F/T1SSd+yGXHIKSgX7lgrGCe8Mti5/yN6xu5ipdSj6
/UmeNXoM6aVrrY74EAb0F9C/0sd8y33UHA/bkq31oE2fjOknzqUP1bYB659FHtna
m2ZUNDQML7giKatyUYSgz622BCI9hAiOP3hhlONs1ICas5ELHP57IU/ZychUUhQq
6M76wePsubdoOp8Ep4VAivMPkz5SpxBgbFAfpOZy
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:48 2025 by rpki-client