Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa
File: 3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa (raw, json)
Hash identifier: EDpIpRTLN0yFPF7XG+MSDTWZW8JNfOrFhvnj07p7etE=
Subject key identifier: B0:84:C2:C7:1C:14:92:EF:FF:5D:DA:AF:A1:73:D4:39:33:2E:20:58
Certificate issuer: /CN=51122991EB0981E672637F95671E74F6E59AAC7B
Certificate serial: 204D16EBB1AB688B182E8B0F11C07E7372B809B0
Authority key identifier: 51:12:29:91:EB:09:81:E6:72:63:7F:95:67:1E:74:F6:E5:9A:AC:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51122991EB0981E672637F95671E74F6E59AAC7B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa
Signing time: Mon 01 Jul 2024 01:03:13 +0000
ROA not before: Mon 01 Jul 2024 00:58:13 +0000
ROA not after: Mon 30 Jun 2025 01:03:13 +0000
asID: 133359
IP address blocks: 103.238.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4d:16:eb:b1:ab:68:8b:18:2e:8b:0f:11:c0:7e:73:72:b8:09:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51122991EB0981E672637F95671E74F6E59AAC7B
Validity
Not Before: Jul 1 00:58:13 2024 GMT
Not After : Jun 30 01:03:13 2025 GMT
Subject: CN=B084C2C71C1492EFFF5DDAAFA173D439332E2058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:31:f0:4c:9e:27:88:4a:35:cd:c1:00:54:
45:8b:0c:a2:91:28:7c:f4:09:cd:9a:bf:3e:d3:18:
ef:da:dc:db:b4:19:d0:f7:cd:24:a0:64:3a:5c:69:
e0:c7:a8:04:2c:7f:fe:15:c0:d4:b1:59:9b:e3:fb:
6e:00:d2:6a:4b:85:6d:bf:c1:59:64:4e:9d:e4:3e:
93:ec:d3:88:46:c5:63:fb:e2:24:0c:f8:95:9f:1b:
45:fb:9f:0e:bb:3d:e1:2a:6f:c0:80:b4:a6:5e:ac:
c8:29:3e:79:e0:4f:5c:bf:28:6e:d9:83:7f:45:c1:
6e:2c:e8:23:6e:32:74:cf:98:46:c9:c9:49:7c:a6:
91:5b:60:69:e7:a5:d9:53:b7:1f:eb:ee:52:e2:3f:
5f:e4:de:b5:33:b0:a0:fb:48:79:96:72:ed:db:bc:
f2:1a:30:fc:5d:74:78:d5:a1:57:8e:f6:38:6d:2e:
d8:f2:07:fa:45:5f:11:f3:5d:64:16:22:ff:7f:ea:
8c:ae:5c:4c:bd:eb:80:97:c4:87:0c:4f:3a:52:c5:
b5:95:d5:80:0d:a3:6c:69:d9:cd:2f:ce:76:56:82:
15:63:27:61:2e:1f:0a:db:a3:04:f8:40:1f:9c:b9:
51:09:d4:e1:1e:40:04:b3:37:b2:a5:9c:95:53:8d:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:84:C2:C7:1C:14:92:EF:FF:5D:DA:AF:A1:73:D4:39:33:2E:20:58
X509v3 Authority Key Identifier:
keyid:51:12:29:91:EB:09:81:E6:72:63:7F:95:67:1E:74:F6:E5:9A:AC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/51122991EB0981E672637F95671E74F6E59AAC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51122991EB0981E672637F95671E74F6E59AAC7B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.138.0/23
Signature Algorithm: sha256WithRSAEncryption
60:63:c7:7d:76:c3:73:13:7d:1a:f5:fb:7f:ae:ce:63:fe:4a:
ae:41:78:f8:1b:72:32:c0:a5:3a:7e:be:92:c0:44:4d:09:2d:
a3:70:1d:16:c6:6d:73:c8:7c:27:e9:95:18:04:37:39:28:60:
80:a7:47:56:e7:88:fb:61:e8:12:66:07:1f:65:f3:2e:af:6b:
01:d4:11:7a:59:c7:ac:b9:6f:14:49:43:29:2b:0a:f1:34:5d:
3d:50:b3:42:b3:19:7d:59:83:6d:78:4b:8b:3e:7f:49:f4:31:
cf:ba:0e:43:83:72:60:31:17:19:5d:40:67:19:c9:ab:20:8f:
f4:d5:37:9a:dc:6b:f0:99:91:98:68:5a:94:f9:23:3e:81:d1:
bb:8e:35:78:c0:e7:0c:4c:09:4e:9e:0b:3c:89:5e:1d:ae:88:
a4:9e:ff:a6:45:7c:a9:62:fd:97:20:0f:55:57:fe:f2:c1:ed:
fe:88:ab:7e:db:d6:02:f1:97:31:7d:2f:db:6f:ed:29:d0:fe:
31:54:14:83:4a:d0:c1:aa:f5:10:f7:ac:d6:35:05:59:62:94:
87:78:79:41:3b:b7:62:31:03:2e:56:49:1e:c6:19:cc:37:46:
e6:14:8b:d7:d8:f9:24:6d:ad:ee:e0:14:8b:bc:b2:8c:df:c2:
c2:4c:43:f9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUIE0W67GraIsYLosPEcB+c3K4CbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMjI5OTFFQjA5ODFFNjcyNjM3Rjk1NjcxRTc0RjZF
NTlBQUM3QjAeFw0yNDA3MDEwMDU4MTNaFw0yNTA2MzAwMTAzMTNaMDMxMTAvBgNV
BAMTKEIwODRDMkM3MUMxNDkyRUZGRjVEREFBRkExNzNENDM5MzMyRTIwNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdSDHwTJ4niEo1zcEAVEWLDKKR
KHz0Cc2avz7TGO/a3Nu0GdD3zSSgZDpcaeDHqAQsf/4VwNSxWZvj+24A0mpLhW2/
wVlkTp3kPpPs04hGxWP74iQM+JWfG0X7nw67PeEqb8CAtKZerMgpPnngT1y/KG7Z
g39FwW4s6CNuMnTPmEbJyUl8ppFbYGnnpdlTtx/r7lLiP1/k3rUzsKD7SHmWcu3b
vPIaMPxddHjVoVeO9jhtLtjyB/pFXxHzXWQWIv9/6oyuXEy964CXxIcMTzpSxbWV
1YANo2xp2c0vznZWghVjJ2EuHwrbowT4QB+cuVEJ1OEeQASzN7KlnJVTjcL1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUsITCxxwUku//XdqvoXPUOTMuIFgwHwYDVR0j
BBgwFoAUURIpkesJgeZyY3+VZx509uWarHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzIxOTI1OS1lZDFhLTRkMTgtYmQ5Mi05NGI2MDY3MmU2YTEvMC81MTEyMjk5MUVC
MDk4MUU2NzI2MzdGOTU2NzFFNzRGNkU1OUFBQzdCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTExMjI5OTFFQjA5ODFFNjcyNjM3Rjk1NjcxRTc0RjZFNTlB
QUM3Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMjE5MjU5LWVkMWEtNGQxOC1i
ZDkyLTk0YjYwNjcyZTZhMS8wLzMxMzAzMzJlMzIzMzM4MmUzMTMzMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzMzMzM1Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7oowDQYJ
KoZIhvcNAQELBQADggEBAGBjx312w3MTfRr1+3+uzmP+Sq5BePgbcjLApTp+vpLA
RE0JLaNwHRbGbXPIfCfplRgENzkoYICnR1bniPth6BJmBx9l8y6vawHUEXpZx6y5
bxRJQykrCvE0XT1Qs0KzGX1Zg214S4s+f0n0Mc+6DkODcmAxFxldQGcZyasgj/TV
N5rca/CZkZhoWpT5Iz6B0buONXjA5wxMCU6eCzyJXh2uiKSe/6ZFfKli/ZcgD1VX
/vLB7f6Iq37b1gLxlzF9L9tv7SnQ/jFUFINK0MGq9RD3rNY1BVlilId4eUE7t2Ix
Ay5WSR7GGcw3RuYUi9fY+SRtre7gFIu8sozfwsJMQ/k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:18 2025 by rpki-client