Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/3130332e33392e37342e302f32332d3234203d3e20313530323732.roa
File: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (raw, json)
Hash identifier: /jbCkGD1i8NyhuUnKVEmZYj4vCqIPPKrbQpk5MF5I1o=
Subject key identifier: 51:70:1E:6A:BB:67:B9:A9:C1:80:E9:E2:E9:61:48:AF:21:1D:C1:7A
Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E
Certificate serial: 5939EFF25280A1B62E31ADAD6A9852008B3D410C
Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/3130332e33392e37342e302f32332d3234203d3e20313530323732.roa
Signing time: Wed 23 Oct 2024 05:00:04 +0000
ROA not before: Wed 23 Oct 2024 04:55:04 +0000
ROA not after: Wed 22 Oct 2025 05:00:04 +0000
asID: 150272
IP address blocks: 103.39.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:39:ef:f2:52:80:a1:b6:2e:31:ad:ad:6a:98:52:00:8b:3d:41:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E
Validity
Not Before: Oct 23 04:55:04 2024 GMT
Not After : Oct 22 05:00:04 2025 GMT
Subject: CN=51701E6ABB67B9A9C180E9E2E96148AF211DC17A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:16:ba:e0:c0:bf:f2:d7:5c:66:d2:ee:97:
c9:70:90:23:c9:11:23:fa:8c:cb:72:47:a5:d1:d3:
16:57:b2:9f:21:5e:06:3e:b4:ff:ac:4c:3c:4f:f8:
07:3f:19:7d:93:55:9f:b5:c7:2e:7c:d8:7e:d8:c7:
83:0c:70:8d:ef:35:aa:f7:b5:b6:fc:5b:9f:38:28:
f2:0a:15:cb:33:57:d2:81:aa:28:57:1b:e8:15:32:
bf:75:2c:3b:66:cc:f4:05:11:f3:18:35:ce:d5:b5:
69:f6:b2:d2:0b:aa:e1:15:e4:aa:25:94:0c:f8:56:
1a:0e:1c:f2:66:0e:22:30:44:02:9b:ed:a5:96:19:
87:40:42:b7:89:b4:01:df:12:1e:33:dd:83:cb:4f:
c7:36:ea:73:3c:11:50:ec:eb:5c:50:a3:b3:c1:a8:
da:aa:71:e4:b0:d0:de:3a:6c:06:e8:a6:10:5a:ed:
bd:76:2a:1a:74:f8:85:fe:9e:a8:f2:2e:cc:f0:0f:
c6:46:ee:5f:7b:ea:47:89:ad:12:9b:ea:f9:c1:88:
17:b4:d9:ce:28:40:0c:53:7c:ff:f2:d9:a3:6e:72:
89:ce:83:66:aa:cf:85:c9:48:17:be:20:b4:e6:04:
76:1c:ec:da:3f:10:dd:0c:d5:e5:cc:a6:c7:bc:85:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:1E:6A:BB:67:B9:A9:C1:80:E9:E2:E9:61:48:AF:21:1D:C1:7A
X509v3 Authority Key Identifier:
keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/3130332e33392e37342e302f32332d3234203d3e20313530323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.74.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:40:99:7e:8f:e6:ac:1f:f1:53:32:51:55:9e:01:6d:25:10:
d7:68:a2:07:47:b8:69:45:e3:63:e3:58:c5:64:b2:9b:8f:15:
ca:db:6f:5b:28:19:30:73:a8:2b:3b:82:da:f1:8a:09:1d:62:
b3:7e:bf:b9:31:82:d1:b9:d7:7a:22:9f:75:c2:70:db:59:1c:
fb:49:1c:dc:00:4d:e1:de:44:ba:fb:88:6c:4d:af:13:da:34:
de:83:f2:46:ec:1f:c7:97:d0:48:04:dd:20:4b:d8:4b:68:ea:
88:b9:86:48:59:6b:52:66:de:bc:9a:ef:37:3b:95:47:a4:2b:
40:ec:26:88:cd:dc:8a:af:29:c5:ae:1f:1a:f3:68:c8:ac:8b:
79:0b:87:aa:d5:56:dc:7b:f8:85:b9:7b:c3:1c:c1:e4:e4:cf:
79:21:17:95:2d:86:05:13:11:bc:59:ba:a2:3b:11:78:a4:22:
21:a2:a1:75:b1:02:2b:96:10:a2:6c:ce:ff:95:74:1b:8c:5d:
4c:6c:14:fb:30:f9:79:13:9a:c6:e5:38:7e:e8:0c:ef:e9:f9:
b3:80:c3:58:5b:88:07:10:99:50:2b:25:17:41:e9:cc:de:f7:
bb:72:ab:5d:f4:4b:d4:9f:f7:a7:4f:23:77:b8:7a:6e:c8:9d:
40:64:79:e0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWTnv8lKAobYuMa2taphSAIs9QQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG
OTU0NzA4RTAeFw0yNDEwMjMwNDU1MDRaFw0yNTEwMjIwNTAwMDRaMDMxMTAvBgNV
BAMTKDUxNzAxRTZBQkI2N0I5QTlDMTgwRTlFMkU5NjE0OEFGMjExREMxN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdsxa64MC/8tdcZtLul8lwkCPJ
ESP6jMtyR6XR0xZXsp8hXgY+tP+sTDxP+Ac/GX2TVZ+1xy582H7Yx4MMcI3vNar3
tbb8W584KPIKFcszV9KBqihXG+gVMr91LDtmzPQFEfMYNc7VtWn2stILquEV5Kol
lAz4VhoOHPJmDiIwRAKb7aWWGYdAQreJtAHfEh4z3YPLT8c26nM8EVDs61xQo7PB
qNqqceSw0N46bAbophBa7b12Khp0+IX+nqjyLszwD8ZG7l976keJrRKb6vnBiBe0
2c4oQAxTfP/y2aNuconOg2aqz4XJSBe+ILTmBHYc7No/EN0M1eXMpse8haaNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUUXAeartnuanBgOni6WFIryEdwXowHwYDVR0j
BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD
OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0
NzA4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlMTlhYmM4LTg1MDctNDFlZC04
Mjg5LTdlM2FjN2IyNDkzNS8wLzMxMzAzMzJlMzMzOTJlMzczNDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcnSjANBgkqhkiG
9w0BAQsFAAOCAQEAakCZfo/mrB/xUzJRVZ4BbSUQ12iiB0e4aUXjY+NYxWSym48V
yttvWygZMHOoKzuC2vGKCR1is36/uTGC0bnXeiKfdcJw21kc+0kc3ABN4d5EuvuI
bE2vE9o03oPyRuwfx5fQSATdIEvYS2jqiLmGSFlrUmbevJrvNzuVR6QrQOwmiM3c
iq8pxa4fGvNoyKyLeQuHqtVW3Hv4hbl7wxzB5OTPeSEXlS2GBRMRvFm6ojsReKQi
IaKhdbECK5YQomzO/5V0G4xdTGwU+zD5eROaxuU4fugM7+n5s4DDWFuIBxCZUCsl
F0HpzN73u3KrXfRL1J/3p08jd7h6bsidQGR54A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:17 2025 by rpki-client