Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e312e302f32342d3234203d3e20313439383830.roa
File: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (raw, json)
Hash identifier: wziHh28+JPXUzCKmbp6oI5UvrqdPm678wP1I2f85h7M=
Subject key identifier: 40:B7:42:77:95:BB:10:92:C3:79:11:83:90:4A:F8:D8:BE:98:EF:B4
Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial: 5249D4FCDD52A0A156C2787719C729C1E0FE834A
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e312e302f32342d3234203d3e20313439383830.roa
Signing time: Thu 18 Apr 2024 07:00:01 +0000
ROA not before: Thu 18 Apr 2024 06:55:01 +0000
ROA not after: Thu 17 Apr 2025 07:00:01 +0000
asID: 149880
IP address blocks: 103.189.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:49:d4:fc:dd:52:a0:a1:56:c2:78:77:19:c7:29:c1:e0:fe:83:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Validity
Not Before: Apr 18 06:55:01 2024 GMT
Not After : Apr 17 07:00:01 2025 GMT
Subject: CN=40B7427795BB1092C3791183904AF8D8BE98EFB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:e1:34:10:3d:b0:ed:8c:2f:a0:67:12:d6:
0a:89:58:2e:0e:fa:e5:11:53:87:15:ac:fc:de:46:
23:d2:02:ea:ee:9f:13:52:36:16:39:e4:57:30:22:
db:0b:18:5d:e6:51:f1:0a:45:c7:91:b0:0c:39:89:
6a:60:78:cb:09:3f:f8:0e:ed:c5:4e:7e:3d:82:ec:
03:0a:c2:89:56:03:43:bd:43:fc:33:62:69:95:62:
93:c4:4b:dd:2b:2c:db:51:4f:62:78:64:71:f0:d6:
b8:24:c8:94:c5:cf:15:da:f6:b9:a6:6d:d3:dd:12:
9d:af:41:b8:48:4e:ec:1c:8f:cf:77:92:9b:57:e3:
82:cd:ec:e7:1a:1d:fc:74:17:b7:01:86:cd:71:0e:
46:55:fa:64:39:3b:27:d2:f9:f7:f6:59:0e:93:70:
8e:e6:0f:c9:fb:b0:45:ba:e8:c6:13:33:f2:ef:97:
4d:b3:b5:37:2d:ed:e8:8c:b6:76:92:4a:56:e7:c9:
cb:aa:ad:8f:3b:21:0b:3f:1d:e0:eb:31:48:35:9b:
bb:28:a3:bb:ef:af:4f:46:93:41:4e:12:a0:42:16:
57:5b:7a:98:b7:5f:82:68:26:f1:9a:0e:e7:4d:55:
2f:5c:35:68:96:1f:58:17:c4:26:77:72:3b:34:2e:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B7:42:77:95:BB:10:92:C3:79:11:83:90:4A:F8:D8:BE:98:EF:B4
X509v3 Authority Key Identifier:
keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e312e302f32342d3234203d3e20313439383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.1.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e3:21:76:cc:b5:04:73:7f:3f:59:75:fd:06:9b:fa:e9:82:
42:63:4d:c2:86:01:6a:1b:12:58:65:ce:59:c7:50:37:cf:eb:
bc:86:7e:73:ce:c9:c9:e5:34:4e:13:db:9e:26:7f:15:ac:7a:
da:7f:8c:1f:ea:91:bd:1b:59:0f:4f:45:e1:c6:fa:cf:10:ed:
04:29:0c:bd:0b:45:6a:97:7e:eb:c5:61:f7:1f:50:85:0b:be:
06:04:f3:c9:86:ea:f2:96:cc:bd:db:74:b2:c6:87:26:b4:4f:
eb:f4:1d:06:79:76:3b:53:34:e9:90:ec:f1:bd:40:4a:cc:02:
1b:df:43:28:72:c4:c9:7c:3a:ca:6f:bb:58:b1:d9:73:f1:f5:
17:e6:43:26:75:dc:45:38:9f:0e:8e:e4:19:9d:e5:32:02:dc:
34:d8:8d:51:23:e7:7b:6a:e3:f8:e5:b2:5a:ba:9b:10:cc:25:
c8:5d:1e:d3:05:a2:cf:06:c5:71:43:47:a1:dd:40:86:5d:6d:
1d:82:c5:c0:70:da:0e:9a:ca:c6:37:11:30:77:3e:a1:82:8a:
86:b1:ac:74:b8:69:ef:25:41:55:d2:0d:aa:84:18:ed:5b:fb:
5c:de:9d:7a:d2:f5:11:d5:9d:45:ba:74:fd:7f:35:df:96:90:
e0:d3:49:97
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUknU/N1SoKFWwnh3GccpweD+g0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0
RkY3QTQ4QjAeFw0yNDA0MTgwNjU1MDFaFw0yNTA0MTcwNzAwMDFaMDMxMTAvBgNV
BAMTKDQwQjc0Mjc3OTVCQjEwOTJDMzc5MTE4MzkwNEFGOEQ4QkU5OEVGQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6uE0ED2w7YwvoGcS1gqJWC4O
+uURU4cVrPzeRiPSAurunxNSNhY55FcwItsLGF3mUfEKRceRsAw5iWpgeMsJP/gO
7cVOfj2C7AMKwolWA0O9Q/wzYmmVYpPES90rLNtRT2J4ZHHw1rgkyJTFzxXa9rmm
bdPdEp2vQbhITuwcj893kptX44LN7OcaHfx0F7cBhs1xDkZV+mQ5OyfS+ff2WQ6T
cI7mD8n7sEW66MYTM/Lvl02ztTct7eiMtnaSSlbnycuqrY87IQs/HeDrMUg1m7so
o7vvr09Gk0FOEqBCFldbepi3X4JoJvGaDudNVS9cNWiWH1gXxCZ3cjs0Lj7RAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUQLdCd5W7EJLDeRGDkEr42L6Y77QwHwYDVR0j
BBgwFoAUJtXAY761gLOPKPPMFrlYY0/3pIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OWE3NGFjOS04ZmE1LTQzOWItOGYyMS0wOGYyODQ2NzdhYTMvMC8yNkQ1QzA2M0JF
QjU4MEIzOEYyOEYzQ0MxNkI5NTg2MzRGRjdBNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0RkY3
QTQ4Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5YTc0YWM5LThmYTUtNDM5Yi04
ZjIxLTA4ZjI4NDY3N2FhMy8wLzMxMzAzMzJlMzEzODM5MmUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzOTM4MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe9ATANBgkqhkiG
9w0BAQsFAAOCAQEAaeMhdsy1BHN/P1l1/Qab+umCQmNNwoYBahsSWGXOWcdQN8/r
vIZ+c87JyeU0ThPbniZ/Fax62n+MH+qRvRtZD09F4cb6zxDtBCkMvQtFapd+68Vh
9x9QhQu+BgTzyYbq8pbMvdt0ssaHJrRP6/QdBnl2O1M06ZDs8b1ASswCG99DKHLE
yXw6ym+7WLHZc/H1F+ZDJnXcRTifDo7kGZ3lMgLcNNiNUSPne2rj+OWyWrqbEMwl
yF0e0wWizwbFcUNHod1Ahl1tHYLFwHDaDprKxjcRMHc+oYKKhrGsdLhp7yVBVdIN
qoQY7Vv7XN6detL1EdWdRbp0/X8135aQ4NNJlw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:01 2025 by rpki-client