Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa
File: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (raw, json)
Hash identifier: vaCug1qVwQYV4Eir0Vlivt2Eyx887UV2TVWoqX0yQVI=
Subject key identifier: F6:A8:1A:29:2F:17:23:15:2B:8F:28:D0:40:55:41:BA:8E:0B:61:E2
Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137
Certificate serial: 1732C34179425D88556EBAD84A3B48373532D4B6
Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa
Signing time: Mon 01 Jul 2024 01:04:03 +0000
ROA not before: Mon 01 Jul 2024 00:59:03 +0000
ROA not after: Mon 30 Jun 2025 01:04:03 +0000
asID: 138119
IP address blocks: 103.126.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:32:c3:41:79:42:5d:88:55:6e:ba:d8:4a:3b:48:37:35:32:d4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137
Validity
Not Before: Jul 1 00:59:03 2024 GMT
Not After : Jun 30 01:04:03 2025 GMT
Subject: CN=F6A81A292F1723152B8F28D0405541BA8E0B61E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:27:6d:6d:bc:41:a1:1e:d0:e8:d2:ce:7e:
1c:fd:5e:af:58:79:1d:ec:1b:15:73:31:02:60:67:
1e:5d:50:a7:6d:97:f1:4a:37:cc:05:8f:25:c0:d9:
a0:9d:a7:09:c6:60:cd:f0:29:95:74:12:ed:2f:76:
8c:c4:00:85:24:0c:a7:ee:b1:40:69:d2:8c:3d:c2:
9d:1e:54:6b:c0:4d:91:22:f5:f0:b2:8f:df:a6:c3:
ce:e1:11:06:41:f0:aa:6a:13:0a:f6:9b:b0:2e:58:
d4:eb:ff:15:50:c0:d1:f1:e9:e5:9f:db:d0:94:80:
4f:d0:d4:21:78:3e:67:ff:a7:4b:b9:3a:33:f9:52:
0f:4c:37:87:a9:d9:ef:f8:96:b1:7b:2a:bc:1f:d5:
ac:79:07:64:86:ff:7f:9f:16:49:9d:6f:29:cd:db:
00:f7:52:26:d6:9a:90:02:af:41:80:b5:5a:5d:3b:
d1:8c:ef:53:cb:22:c4:dc:80:47:dd:9e:05:9b:40:
52:32:c1:e1:a1:86:e7:f2:1d:0b:f8:6a:82:0f:5b:
8e:1c:6d:83:f1:3a:e4:41:b0:4a:3d:90:10:ee:c7:
34:ff:b3:ca:76:d2:c0:70:4c:45:82:7b:a7:72:a8:
e5:fe:de:93:fd:1d:20:5c:9d:d4:61:00:7a:92:31:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A8:1A:29:2F:17:23:15:2B:8F:28:D0:40:55:41:BA:8E:0B:61:E2
X509v3 Authority Key Identifier:
keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:9e:20:09:8f:93:13:35:a0:3f:2c:11:5f:de:93:c4:a1:34:
9e:52:85:27:47:6b:fd:e2:38:e3:03:8f:ed:74:62:c1:18:2c:
bb:f0:c2:31:f8:77:48:3a:92:3d:51:ef:38:1b:21:6d:ac:4d:
ab:23:ae:f6:56:b3:e1:bb:41:25:92:21:e6:42:3a:ad:49:62:
cb:3f:e4:3f:66:63:42:ed:7c:b9:c8:84:a4:88:37:7d:9e:cb:
94:aa:9b:d7:43:00:16:19:fc:62:06:19:bb:eb:3a:71:80:e0:
c9:b0:e9:7f:98:a3:9d:d4:cb:04:26:b6:cb:f0:e6:f7:9e:9e:
b8:b3:77:ad:4f:61:c0:4a:79:95:1a:0a:aa:f8:cb:96:6c:57:
08:ec:aa:17:cc:18:ac:f2:52:ee:78:45:23:b5:82:f1:75:11:
e5:85:7b:08:6e:f1:94:3d:88:d9:c1:b7:86:c5:32:d6:a0:5c:
02:1b:ac:21:34:93:4e:d8:2d:fa:0e:70:71:94:c5:52:8b:78:
61:ef:6c:9b:84:ec:b4:c9:d3:10:70:af:c5:62:8c:60:69:4c:
d9:24:d0:25:60:42:ea:4f:0c:e5:7a:21:aa:dc:02:ed:2b:a0:
c1:82:e7:11:5b:49:3e:46:20:3d:f2:5c:59:a0:13:83:35:b6:
6e:73:97:a5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFzLDQXlCXYhVbrrYSjtINzUy1LYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz
QTIzRDEzNzAeFw0yNDA3MDEwMDU5MDNaFw0yNTA2MzAwMTA0MDNaMDMxMTAvBgNV
BAMTKEY2QTgxQTI5MkYxNzIzMTUyQjhGMjhEMDQwNTU0MUJBOEUwQjYxRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FidtbbxBoR7Q6NLOfhz9Xq9Y
eR3sGxVzMQJgZx5dUKdtl/FKN8wFjyXA2aCdpwnGYM3wKZV0Eu0vdozEAIUkDKfu
sUBp0ow9wp0eVGvATZEi9fCyj9+mw87hEQZB8KpqEwr2m7AuWNTr/xVQwNHx6eWf
29CUgE/Q1CF4Pmf/p0u5OjP5Ug9MN4ep2e/4lrF7Krwf1ax5B2SG/3+fFkmdbynN
2wD3UibWmpACr0GAtVpdO9GM71PLIsTcgEfdngWbQFIyweGhhufyHQv4aoIPW44c
bYPxOuRBsEo9kBDuxzT/s8p20sBwTEWCe6dyqOX+3pP9HSBcndRhAHqSMeLTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU9qgaKS8XIxUrjyjQQFVBuo4LYeIwHwYDVR0j
BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5
OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz
RDEzNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmNmVhMjIxLTc3YjctNDc5MS1h
OGE4LWI1MTY0YjAwZjFjNS8wLzMxMzAzMzJlMzEzMjM2MmUzMjM4MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ34cMA0GCSqG
SIb3DQEBCwUAA4IBAQCfniAJj5MTNaA/LBFf3pPEoTSeUoUnR2v94jjjA4/tdGLB
GCy78MIx+HdIOpI9Ue84GyFtrE2rI672VrPhu0ElkiHmQjqtSWLLP+Q/ZmNC7Xy5
yISkiDd9nsuUqpvXQwAWGfxiBhm76zpxgODJsOl/mKOd1MsEJrbL8Ob3np64s3et
T2HASnmVGgqq+MuWbFcI7KoXzBis8lLueEUjtYLxdRHlhXsIbvGUPYjZwbeGxTLW
oFwCG6whNJNO2C36DnBxlMVSi3hh72ybhOy0ydMQcK/FYoxgaUzZJNAlYELqTwzl
eiGq3ALtK6DBgucRW0k+RiA98lxZoBODNbZuc5el
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:34 2025 by rpki-client