Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa
File: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (raw, json)
Hash identifier: yxChVSnUcBAshSi2tdYxCJl1ssWL26R5uijV6Q3HksQ=
Subject key identifier: 34:DD:B2:EC:68:31:6B:D2:9D:E6:29:5D:FF:7C:E8:38:42:9F:63:30
Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19
Certificate serial: 262AB525E0E6BCAC5FB013AA749B047E6023D4E8
Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa
Signing time: Fri 07 Jun 2024 11:58:14 +0000
ROA not before: Fri 07 Jun 2024 11:53:14 +0000
ROA not after: Fri 06 Jun 2025 11:58:14 +0000
asID: 136828
IP address blocks: 103.98.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:2a:b5:25:e0:e6:bc:ac:5f:b0:13:aa:74:9b:04:7e:60:23:d4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19
Validity
Not Before: Jun 7 11:53:14 2024 GMT
Not After : Jun 6 11:58:14 2025 GMT
Subject: CN=34DDB2EC68316BD29DE6295DFF7CE838429F6330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:f5:a5:66:9f:d7:28:e3:24:3e:ee:9d:7f:
83:98:27:49:c7:b8:a4:e8:f7:8c:cf:18:c3:99:c4:
08:4e:32:e6:eb:12:3d:ab:dd:fb:f4:8e:50:11:eb:
64:5f:5a:79:c1:b0:8c:4e:85:37:c7:77:60:2b:8c:
cf:1c:e0:df:54:46:7c:08:5d:39:16:96:9f:96:8b:
ac:8f:31:4c:45:e9:a1:79:09:9c:81:fd:3f:e2:cf:
da:16:2d:89:c0:26:ca:a9:74:56:3b:b5:94:df:78:
cc:bd:bb:dd:e0:39:2d:1f:85:c1:8f:75:6d:71:29:
3b:b6:b2:24:ab:46:99:19:c2:d6:e9:2f:60:3a:d1:
25:f4:66:bd:46:8e:51:7d:9f:c2:32:f8:81:bf:79:
51:33:4d:66:e3:07:82:f0:d0:b1:fc:b6:0c:a5:bc:
e7:fb:29:ef:2b:d6:3a:64:21:e7:a3:30:ef:8c:5b:
f1:8d:0e:fc:3c:a3:54:39:de:46:bc:c8:d3:5d:f6:
f6:06:4f:ee:3f:71:b7:82:e8:ad:38:71:6c:2e:8d:
15:9f:39:ce:71:af:e7:8a:76:b9:32:66:fe:b4:20:
67:89:20:d4:b4:0c:31:76:bd:31:51:6f:41:0a:0a:
34:b3:9a:39:55:4b:f0:70:36:8e:c0:46:28:de:f5:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DD:B2:EC:68:31:6B:D2:9D:E6:29:5D:FF:7C:E8:38:42:9F:63:30
X509v3 Authority Key Identifier:
keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:9e:44:e8:1a:14:a8:2c:10:26:ef:02:91:3a:7c:07:ec:9c:
f4:e7:f6:57:4b:68:82:60:00:dc:92:92:47:ca:9b:a3:5b:96:
32:2b:cd:e3:c6:9a:57:64:a8:17:3c:51:f4:f4:c5:93:25:86:
5f:93:37:8d:60:01:75:22:b2:4a:e3:81:de:bd:c0:2d:99:41:
72:88:67:b8:fc:79:00:54:89:f9:42:e5:55:70:95:37:d0:04:
8d:f4:40:3b:c1:9f:e1:79:fc:ee:11:b5:34:e3:3f:8b:f1:45:
11:9d:fb:66:ab:43:a2:9d:db:e0:04:17:1a:1d:52:c0:3e:9e:
fa:4f:0f:c7:36:17:42:e1:70:9d:b5:3b:28:b0:f7:71:22:4b:
16:6c:7d:c2:80:00:17:a4:c7:fe:eb:30:46:a3:fc:6b:50:fe:
2a:03:6d:0f:35:e4:b0:a6:1c:4c:00:09:07:00:76:bb:09:64:
6a:32:1a:9c:da:cb:ee:ff:72:a4:48:86:3f:69:65:9e:a7:7c:
0f:f3:85:3f:72:23:24:6f:d3:76:a6:85:49:43:98:3e:19:9b:
6a:cf:88:8d:46:af:d9:1e:0f:ff:5d:b6:4d:34:ef:83:0b:d0:
77:c7:e4:4d:27:85:d7:7b:e2:ef:1f:88:4f:74:fc:03:6f:14:
32:6c:c2:75
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJiq1JeDmvKxfsBOqdJsEfmAj1OgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG
MEI2RkIxOTAeFw0yNDA2MDcxMTUzMTRaFw0yNTA2MDYxMTU4MTRaMDMxMTAvBgNV
BAMTKDM0RERCMkVDNjgzMTZCRDI5REU2Mjk1REZGN0NFODM4NDI5RjYzMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzfWlZp/XKOMkPu6df4OYJ0nH
uKTo94zPGMOZxAhOMubrEj2r3fv0jlAR62RfWnnBsIxOhTfHd2ArjM8c4N9URnwI
XTkWlp+Wi6yPMUxF6aF5CZyB/T/iz9oWLYnAJsqpdFY7tZTfeMy9u93gOS0fhcGP
dW1xKTu2siSrRpkZwtbpL2A60SX0Zr1GjlF9n8Iy+IG/eVEzTWbjB4Lw0LH8tgyl
vOf7Ke8r1jpkIeejMO+MW/GNDvw8o1Q53ka8yNNd9vYGT+4/cbeC6K04cWwujRWf
Oc5xr+eKdrkyZv60IGeJINS0DDF2vTFRb0EKCjSzmjlVS/BwNo7ARije9VgzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNN2y7Ggxa9Kd5ild/3zoOEKfYzAwHwYDVR0j
BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1
MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2
RkIxOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxMGJlMzUzLTRhYjgtNGI3Ny05
ODhkLTczOWY4MmI5ZjY0MS8wLzMxMzAzMzJlMzkzODJlMzEzMjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2J4MA0GCSqG
SIb3DQEBCwUAA4IBAQCcnkToGhSoLBAm7wKROnwH7Jz05/ZXS2iCYADckpJHypuj
W5YyK83jxppXZKgXPFH09MWTJYZfkzeNYAF1IrJK44HevcAtmUFyiGe4/HkAVIn5
QuVVcJU30ASN9EA7wZ/hefzuEbU04z+L8UURnftmq0OindvgBBcaHVLAPp76Tw/H
NhdC4XCdtTsosPdxIksWbH3CgAAXpMf+6zBGo/xrUP4qA20PNeSwphxMAAkHAHa7
CWRqMhqc2svu/3KkSIY/aWWep3wP84U/ciMkb9N2poVJQ5g+GZtqz4iNRq/ZHg//
XbZNNO+DC9B3x+RNJ4XXe+LvH4hPdPwDbxQybMJ1
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:09 2025 by rpki-client