Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa
File: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (raw, json)
Hash identifier: AiL+g1EooKWTtHWBu9kN++0bhh/1b9qWboQYM9JSjI0=
Subject key identifier: D7:3B:31:80:67:34:53:8C:ED:88:50:D5:76:67:E9:BB:86:08:9B:2A
Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
Certificate serial: 549382722E70084A65FB1F359B3BD553A0A1F1AC
Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa
Signing time: Mon 30 Dec 2024 09:02:34 +0000
ROA not before: Mon 30 Dec 2024 08:57:34 +0000
ROA not after: Mon 29 Dec 2025 09:02:34 +0000
asID: 59151
IP address blocks: 103.210.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:93:82:72:2e:70:08:4a:65:fb:1f:35:9b:3b:d5:53:a0:a1:f1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
Validity
Not Before: Dec 30 08:57:34 2024 GMT
Not After : Dec 29 09:02:34 2025 GMT
Subject: CN=D73B31806734538CED8850D57667E9BB86089B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:b1:79:db:d3:3c:b9:66:1e:14:fd:68:8e:
b2:23:9f:7c:80:cd:b2:b1:19:d4:2a:33:ac:55:4b:
e5:d8:b3:e2:a9:83:5b:08:27:7e:fd:16:00:f3:b8:
7e:6f:fd:8b:44:32:5e:c0:a4:31:65:d8:07:b4:7a:
a7:36:8e:59:22:36:65:a7:32:13:d0:d4:1a:1b:03:
5f:70:38:07:5e:53:36:86:04:f1:ab:96:39:46:52:
8e:e0:06:e1:07:50:e0:b6:84:df:e6:61:33:fe:87:
36:98:6c:41:9d:80:4a:c5:59:0f:80:68:94:84:27:
81:63:4c:02:2d:c6:73:89:af:04:6a:cb:d1:99:a6:
a6:d7:77:cd:76:f2:1d:81:d1:38:5b:83:43:38:46:
e0:90:58:da:81:bb:cd:5c:9e:70:50:7d:3d:44:4d:
c3:b9:07:8c:6b:8c:69:3f:7e:e2:4a:f5:43:9c:e4:
3e:af:a0:09:0b:cb:8c:a4:1c:89:b5:0b:79:0b:b9:
12:f7:1e:66:81:a7:1a:48:c8:3e:10:e0:b9:91:06:
1a:27:bf:75:a6:54:ba:c0:16:a3:d4:e2:c6:06:d6:
7b:1a:51:96:e8:34:6b:21:19:93:1c:d1:fc:f1:67:
b6:6e:05:c6:e5:76:c9:c3:92:eb:ee:9d:1f:8e:27:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3B:31:80:67:34:53:8C:ED:88:50:D5:76:67:E9:BB:86:08:9B:2A
X509v3 Authority Key Identifier:
keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:29:11:3a:72:0e:48:7c:05:60:c7:41:5e:87:76:51:a7:e9:
23:1d:81:79:c7:96:94:a2:0e:bc:03:5d:d6:68:0b:44:a6:85:
a5:17:96:8f:b0:7d:cb:aa:7a:de:41:71:9a:25:32:49:27:a1:
30:a3:e2:65:a3:67:d3:e0:8f:58:ed:f6:68:88:ab:6a:82:2a:
f4:d6:8d:1e:c6:73:61:53:71:d3:64:c3:f8:ba:ea:7e:d6:c7:
ba:d0:63:53:a1:44:07:7b:e6:94:bb:5d:c0:b0:70:d9:d6:cd:
55:96:16:ba:b9:dc:24:7f:61:e8:65:4b:a4:30:b0:25:de:7d:
bb:84:ae:6c:c4:17:95:92:5f:70:90:d2:0b:7b:00:ce:84:3d:
b5:ee:df:24:a8:29:82:b4:ec:b1:cd:d2:38:4b:35:c5:b5:2d:
56:ab:fd:fe:39:96:1e:44:fb:a3:8c:6c:9e:77:fe:2d:49:e7:
c0:09:90:1a:bc:b5:b5:ab:b8:4d:14:cf:15:fc:f2:ac:1d:42:
b3:20:8b:a2:c8:c9:62:59:2b:b9:37:74:2a:bd:b5:07:03:ad:
0e:c9:02:85:54:fc:3f:38:e4:f0:b3:b7:57:9b:85:f8:3f:e9:
f6:54:99:e2:e7:e5:3b:43:99:08:8c:b8:30:fe:0b:22:11:df:
42:d1:be:3d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVJOCci5wCEpl+x81mzvVU6Ch8awwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JD
RjY2QjgwMTAeFw0yNDEyMzAwODU3MzRaFw0yNTEyMjkwOTAyMzRaMDMxMTAvBgNV
BAMTKEQ3M0IzMTgwNjczNDUzOENFRDg4NTBENTc2NjdFOUJCODYwODlCMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHlrF529M8uWYeFP1ojrIjn3yA
zbKxGdQqM6xVS+XYs+Kpg1sIJ379FgDzuH5v/YtEMl7ApDFl2Ae0eqc2jlkiNmWn
MhPQ1BobA19wOAdeUzaGBPGrljlGUo7gBuEHUOC2hN/mYTP+hzaYbEGdgErFWQ+A
aJSEJ4FjTAItxnOJrwRqy9GZpqbXd8128h2B0Thbg0M4RuCQWNqBu81cnnBQfT1E
TcO5B4xrjGk/fuJK9UOc5D6voAkLy4ykHIm1C3kLuRL3HmaBpxpIyD4Q4LmRBhon
v3WmVLrAFqPU4sYG1nsaUZboNGshGZMc0fzxZ7ZuBcbldsnDkuvunR+OJzJZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU1zsxgGc0U4ztiFDVdmfpu4YImyowHwYDVR0j
BBgwFoAUa15nfppHEzq183s+LBEZO89muAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ODc2NmQ2Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC82QjVFNjc3RTlB
NDcxMzNBQjVGMzdCM0UyQzExMTkzQkNGNjZCODAxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JDRjY2
QjgwMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NzY2ZDY2LTI5MjMtNGNlMC1h
YTg1LTljNDk4OGNjOGJhMS8wLzMxMzAzMzJlMzIzMTMwMmUzMzM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfSIzANBgkqhkiG
9w0BAQsFAAOCAQEAeikROnIOSHwFYMdBXod2UafpIx2BeceWlKIOvANd1mgLRKaF
pReWj7B9y6p63kFxmiUySSehMKPiZaNn0+CPWO32aIiraoIq9NaNHsZzYVNx02TD
+LrqftbHutBjU6FEB3vmlLtdwLBw2dbNVZYWurncJH9h6GVLpDCwJd59u4SubMQX
lZJfcJDSC3sAzoQ9te7fJKgpgrTssc3SOEs1xbUtVqv9/jmWHkT7o4xsnnf+LUnn
wAmQGry1tau4TRTPFfzyrB1CsyCLosjJYlkruTd0Kr21BwOtDskChVT8Pzjk8LO3
V5uF+D/p9lSZ4uflO0OZCIy4MP4LIhHfQtG+PQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:02:55 2025 by rpki-client