Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e372e302f32342d3234203d3e20313333383237.roa
File: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (raw, json)
Hash identifier: 2278ZJ1gGMvFP2g/vEd5/wEl+LVW1rbxi3M1w9tcyIU=
Subject key identifier: 05:73:AA:96:40:BF:DA:57:1A:E9:6B:47:47:45:31:57:C6:C4:F5:3F
Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial: 39CFB1207D4707492A3BFCED8AFCEF248E0A8AB4
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e372e302f32342d3234203d3e20313333383237.roa
Signing time: Thu 08 Aug 2024 04:00:02 +0000
ROA not before: Thu 08 Aug 2024 03:55:02 +0000
ROA not after: Thu 07 Aug 2025 04:00:02 +0000
asID: 133827
IP address blocks: 103.95.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:cf:b1:20:7d:47:07:49:2a:3b:fc:ed:8a:fc:ef:24:8e:0a:8a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Validity
Not Before: Aug 8 03:55:02 2024 GMT
Not After : Aug 7 04:00:02 2025 GMT
Subject: CN=0573AA9640BFDA571AE96B4747453157C6C4F53F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:85:1a:29:bf:87:ca:dc:cb:71:1a:c2:7f:
98:00:e7:5c:bb:96:4c:ea:a1:d0:66:58:dd:7e:e5:
74:7a:c5:9e:ba:2a:72:7e:fb:ff:f4:92:fd:25:3f:
8b:6c:6c:9d:99:ff:f6:c7:d1:7a:ce:36:7e:13:90:
30:df:b8:6a:40:1a:00:76:86:e0:bb:12:00:29:54:
7a:23:a6:0d:a1:b5:ce:38:74:9a:5f:0f:35:92:59:
b9:79:26:28:b5:2e:7a:65:3f:55:6b:2b:df:6c:3f:
3a:e3:17:c4:dc:94:72:73:17:35:aa:6a:3a:f2:55:
bb:ab:fd:c2:ee:b0:ad:0c:e5:d2:e5:b6:e4:03:c1:
a4:49:8f:71:4d:19:06:b2:02:60:6f:ff:8f:96:1c:
7e:08:18:30:c1:e7:d9:57:74:ea:18:ff:aa:fb:84:
c0:4b:70:a9:88:17:8d:99:74:a0:81:f3:bb:5f:4c:
0c:27:c4:66:42:35:03:cf:fc:20:42:f4:be:74:e0:
44:4e:b2:c2:1c:6e:23:de:91:0a:1c:ce:68:ff:3e:
a7:92:0f:f8:88:37:cf:f7:e1:2b:09:8d:58:23:a7:
04:40:7a:c6:fd:97:92:bd:8a:2f:a5:41:92:33:1f:
54:98:ae:50:51:75:24:dd:58:74:a4:46:24:56:34:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:73:AA:96:40:BF:DA:57:1A:E9:6B:47:47:45:31:57:C6:C4:F5:3F
X509v3 Authority Key Identifier:
keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e372e302f32342d3234203d3e20313333383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.95.7.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2a:70:14:56:0d:72:55:14:39:71:25:6a:74:22:91:c3:77:
28:df:85:c6:c6:89:3f:4b:b1:7a:ae:ac:47:1d:d7:81:94:1d:
16:bc:3e:17:55:30:35:e1:6c:8a:13:d8:19:d6:4f:8a:fa:04:
c7:89:f6:d8:78:08:51:55:3b:08:b1:f1:f9:2a:3d:3f:0f:fe:
8f:da:5a:3f:06:da:20:51:22:e1:be:e9:7b:20:4d:c9:8c:b2:
b3:49:6b:5e:07:56:4e:6e:da:c5:09:20:4c:80:a0:7c:7a:c3:
b4:a3:f6:96:50:2d:4b:3f:8c:78:0a:ee:0a:ea:b8:37:be:83:
52:47:8a:69:7a:fc:af:31:0f:a1:3e:14:cc:9b:c5:34:2b:05:
6b:63:b7:94:4e:fa:ec:f2:2d:f5:18:4c:df:f8:73:39:da:0a:
e4:8b:1b:8c:61:e9:1d:d5:95:28:b0:80:41:f7:c4:f6:33:04:
fb:6b:65:59:f4:1e:3d:b0:83:10:76:55:65:d9:38:a6:ac:64:
52:e6:af:f9:35:af:29:f4:11:15:d3:42:0d:7d:ed:46:93:db:
76:96:12:c0:4d:f9:54:e5:42:47:b4:2c:9c:6e:ff:d0:97:29:
34:50:a9:de:26:08:3e:eb:26:bf:db:00:e4:dc:dd:f6:e0:f7:
eb:61:36:78
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUOc+xIH1HB0kqO/ztivzvJI4KirQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1
NjlGODM2RjAeFw0yNDA4MDgwMzU1MDJaFw0yNTA4MDcwNDAwMDJaMDMxMTAvBgNV
BAMTKDA1NzNBQTk2NDBCRkRBNTcxQUU5NkI0NzQ3NDUzMTU3QzZDNEY1M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZIUaKb+HytzLcRrCf5gA51y7
lkzqodBmWN1+5XR6xZ66KnJ++//0kv0lP4tsbJ2Z//bH0XrONn4TkDDfuGpAGgB2
huC7EgApVHojpg2htc44dJpfDzWSWbl5Jii1LnplP1VrK99sPzrjF8TclHJzFzWq
ajryVbur/cLusK0M5dLltuQDwaRJj3FNGQayAmBv/4+WHH4IGDDB59lXdOoY/6r7
hMBLcKmIF42ZdKCB87tfTAwnxGZCNQPP/CBC9L504EROssIcbiPekQoczmj/PqeS
D/iIN8/34SsJjVgjpwRAesb9l5K9ii+lQZIzH1SYrlBRdSTdWHSkRiRWNGpfAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUBXOqlkC/2lca6WtHR0UxV8bE9T8wHwYDVR0j
BBgwFoAUDOannVPYKfKlViNnbo0qmlafg28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTk5MDEyNS02MDlhLTQ4YzgtYWM4Ni0xYzNiYzMxNWJhZDYvMC8wQ0U2QTc5RDUz
RDgyOUYyQTU1NjIzNjc2RThEMkE5QTU2OUY4MzZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1NjlG
ODM2Ri5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhOTkwMTI1LTYwOWEtNDhjOC1h
Yzg2LTFjM2JjMzE1YmFkNi8wLzMxMzAzMzJlMzkzNTJlMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzMzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnXwcwDQYJKoZIhvcN
AQELBQADggEBAEAqcBRWDXJVFDlxJWp0IpHDdyjfhcbGiT9LsXqurEcd14GUHRa8
PhdVMDXhbIoT2BnWT4r6BMeJ9th4CFFVOwix8fkqPT8P/o/aWj8G2iBRIuG+6Xsg
TcmMsrNJa14HVk5u2sUJIEyAoHx6w7Sj9pZQLUs/jHgK7grquDe+g1JHiml6/K8x
D6E+FMybxTQrBWtjt5RO+uzyLfUYTN/4cznaCuSLG4xh6R3VlSiwgEH3xPYzBPtr
ZVn0Hj2wgxB2VWXZOKasZFLmr/k1ryn0ERXTQg197UaT23aWEsBN+VTlQke0LJxu
/9CXKTRQqd4mCD7rJr/bAOTc3fbg9+thNng=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:45 2025 by rpki-client