Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa
File: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (raw, json)
Hash identifier: uWPrpCb0k5EiJaHgU3mG4U+ak1Nlnfzs1/52QmaMMlw=
Subject key identifier: FD:FF:78:61:80:06:1A:CE:27:BE:C3:B7:70:A0:02:A3:B4:DB:07:AA
Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Certificate serial: 24380DB23F4768C329921EDCF7340BA3FA71E29E
Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa
Signing time: Fri 26 Apr 2024 11:00:00 +0000
ROA not before: Fri 26 Apr 2024 10:55:00 +0000
ROA not after: Fri 25 Apr 2025 11:00:00 +0000
asID: 147087
IP address blocks: 103.69.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:38:0d:b2:3f:47:68:c3:29:92:1e:dc:f7:34:0b:a3:fa:71:e2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Validity
Not Before: Apr 26 10:55:00 2024 GMT
Not After : Apr 25 11:00:00 2025 GMT
Subject: CN=FDFF786180061ACE27BEC3B770A002A3B4DB07AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:3b:64:f9:ad:8c:4f:c9:ac:92:9d:98:94:
f0:a2:0c:8b:0e:c6:1d:86:41:9e:ff:5b:48:cc:a7:
af:f3:64:ba:a4:ca:b9:67:e3:1a:24:76:8f:d9:ae:
0b:e5:6b:75:6d:c1:0d:06:48:7d:56:40:3a:96:70:
5f:44:5d:1f:05:cb:c9:d5:63:fc:8d:bc:9b:cf:ed:
f4:9d:99:59:e1:93:d9:3c:a5:2f:a3:91:64:d3:ca:
94:aa:ad:45:8f:ac:ed:17:00:4e:84:09:6e:9e:aa:
f6:d3:f3:fa:e8:e4:40:42:94:63:86:66:4e:04:e5:
a7:ed:6c:da:11:c7:2e:d3:7d:b8:68:6b:fc:70:0f:
ff:34:c9:47:57:fa:45:22:a9:9f:69:9e:ff:8d:92:
b1:93:c5:90:9d:7f:9f:20:40:af:4e:b8:b8:32:59:
ea:08:22:24:bd:82:f8:2b:dd:94:8a:e8:eb:db:6e:
fd:a9:96:d7:24:7e:ef:8f:62:a6:46:4d:29:6b:ca:
83:c2:44:43:50:2c:f4:d4:65:13:79:cb:33:2a:79:
c3:af:b3:31:75:37:ef:92:b5:a6:b6:a5:c7:03:2f:
f8:1f:fa:1c:cc:15:65:1f:f7:b9:c2:b8:de:e4:2f:
4f:61:c5:6d:7d:c6:4a:62:6f:0f:98:65:ed:4b:0e:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FF:78:61:80:06:1A:CE:27:BE:C3:B7:70:A0:02:A3:B4:DB:07:AA
X509v3 Authority Key Identifier:
keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.106.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:09:04:4f:74:83:3a:e1:6f:c0:4d:08:da:2e:08:ee:11:a9:
88:e9:44:ba:0f:4e:fb:58:72:f3:c0:e4:5b:b3:e3:3d:42:4a:
08:15:3c:e6:00:85:38:cd:9d:84:f3:b3:d1:35:2f:f6:f9:27:
6f:71:4b:1e:b7:d4:c5:c5:c1:f0:e2:ce:34:46:85:00:f6:35:
78:9e:21:ea:7b:40:dd:80:f5:92:9f:7a:8f:77:76:88:4c:8f:
a5:fa:5a:f2:77:c7:e0:ac:f1:00:64:51:0c:eb:d6:f7:b9:98:
5a:4c:15:e4:fb:42:80:62:05:b8:98:be:33:d2:38:75:e2:b5:
04:05:09:a8:7e:c5:1d:8d:ed:da:15:7a:7b:87:9b:7d:a4:a3:
cb:2d:7d:c3:64:0c:23:67:3c:19:d8:cd:0b:3f:4d:2e:fe:05:
cf:1d:9e:06:6b:4f:4f:d6:87:18:d4:61:f3:fb:38:27:cc:66:
de:05:db:7c:01:35:4f:e8:7f:8e:24:2b:38:dd:d8:aa:cd:0e:
41:f4:dd:d0:60:f9:e0:b2:db:3e:f6:b3:73:37:bc:8a:88:62:
6d:ae:2c:a8:c2:b5:09:e4:75:24:2f:7d:15:bd:79:55:b7:53:
d0:1e:d6:3a:b4:e3:07:1b:f5:7d:fe:2a:68:df:18:57:f8:8b:
de:85:db:74
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJDgNsj9HaMMpkh7c9zQLo/px4p4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1
RkM4RTBDNzAeFw0yNDA0MjYxMDU1MDBaFw0yNTA0MjUxMTAwMDBaMDMxMTAvBgNV
BAMTKEZERkY3ODYxODAwNjFBQ0UyN0JFQzNCNzcwQTAwMkEzQjREQjA3QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPuztk+a2MT8mskp2YlPCiDIsO
xh2GQZ7/W0jMp6/zZLqkyrln4xokdo/Zrgvla3VtwQ0GSH1WQDqWcF9EXR8Fy8nV
Y/yNvJvP7fSdmVnhk9k8pS+jkWTTypSqrUWPrO0XAE6ECW6eqvbT8/ro5EBClGOG
Zk4E5aftbNoRxy7Tfbhoa/xwD/80yUdX+kUiqZ9pnv+NkrGTxZCdf58gQK9OuLgy
WeoIIiS9gvgr3ZSK6Ovbbv2pltckfu+PYqZGTSlryoPCRENQLPTUZRN5yzMqecOv
szF1N++Staa2pccDL/gf+hzMFWUf97nCuN7kL09hxW19xkpibw+YZe1LDkfdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/f94YYAGGs4nvsO3cKACo7TbB6owHwYDVR0j
BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE
NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4
RTBDNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZTJlYmRlLTYzMTEtNDg4YS04
MmI3LTlkNGMwNTUzMDk4Ny8wLzMxMzAzMzJlMzYzOTJlMzEzMDM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDM3MzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0VqMA0GCSqG
SIb3DQEBCwUAA4IBAQC0CQRPdIM64W/ATQjaLgjuEamI6US6D077WHLzwORbs+M9
QkoIFTzmAIU4zZ2E87PRNS/2+SdvcUset9TFxcHw4s40RoUA9jV4niHqe0DdgPWS
n3qPd3aITI+l+lryd8fgrPEAZFEM69b3uZhaTBXk+0KAYgW4mL4z0jh14rUEBQmo
fsUdje3aFXp7h5t9pKPLLX3DZAwjZzwZ2M0LP00u/gXPHZ4Ga09P1ocY1GHz+zgn
zGbeBdt8ATVP6H+OJCs43diqzQ5B9N3QYPngsts+9rNzN7yKiGJtriyowrUJ5HUk
L30VvXlVt1PQHtY6tOMHG/V9/ipo3xhX+Ivehdt0
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:19 2025 by rpki-client