Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa
File: 3130332e36382e302e302f32322d3232203d3e20313335343539.roa (raw, json)
Hash identifier: oFZC2kRBkSHJSAAhUHwtuUOn8BkeHg/lZamkhCDyHAg=
Subject key identifier: FE:F1:F8:19:ED:23:74:C2:45:D7:9E:A4:8B:34:CA:09:2C:7E:76:DA
Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial: 0E6D86C49DEA9C64BFF4A9F20D3CC1B4ED80ABD2
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa
Signing time: Wed 15 May 2024 09:00:53 +0000
ROA not before: Wed 15 May 2024 08:55:53 +0000
ROA not after: Wed 14 May 2025 09:00:53 +0000
asID: 135459
IP address blocks: 103.68.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6d:86:c4:9d:ea:9c:64:bf:f4:a9:f2:0d:3c:c1:b4:ed:80:ab:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Validity
Not Before: May 15 08:55:53 2024 GMT
Not After : May 14 09:00:53 2025 GMT
Subject: CN=FEF1F819ED2374C245D79EA48B34CA092C7E76DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:0d:cf:9d:e5:32:28:f3:aa:40:7d:24:3c:
a1:1f:d4:1f:10:5b:c4:7c:95:24:b6:c9:e6:fb:ac:
b0:35:dc:7c:e3:d6:13:70:e1:8e:79:a3:1c:51:ca:
2d:27:6f:8d:e3:d9:5d:83:0f:0f:d6:84:e6:a5:10:
e6:fd:a1:32:48:8e:a9:83:30:93:82:26:91:21:fb:
ec:55:b4:a2:84:71:fa:3c:d5:a2:14:cd:25:fd:70:
2e:b2:00:39:c2:18:b4:1a:69:f6:9e:f2:47:27:2e:
3d:65:6f:96:7b:71:6c:e9:47:88:ae:d6:1e:19:8c:
57:47:da:5b:f9:7d:9d:f3:24:da:07:87:c6:e0:a5:
3b:89:4f:67:2e:bb:ac:b9:0b:50:49:d3:bb:67:43:
cf:93:58:af:6d:2c:32:9e:61:c2:b5:3c:de:c9:7e:
ff:06:4d:e5:00:a1:5d:9b:85:07:12:ab:3e:ea:1a:
73:e1:84:ce:82:05:be:29:be:f9:84:55:85:94:8f:
65:6d:7d:db:78:54:d9:45:03:29:4f:55:21:e7:eb:
9a:4c:db:54:78:87:0e:5b:4b:a5:ee:ad:ba:47:76:
b8:a5:8b:73:2b:9d:e2:52:14:ad:82:31:18:25:b0:
d8:24:ac:87:1a:24:cd:4c:17:c0:03:9e:9d:06:d2:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F1:F8:19:ED:23:74:C2:45:D7:9E:A4:8B:34:CA:09:2C:7E:76:DA
X509v3 Authority Key Identifier:
keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:99:04:8f:86:44:81:e4:0f:cf:bc:af:63:55:1e:8f:f9:43:
e3:6e:78:56:e8:98:91:64:1b:e0:40:c5:ef:cc:31:b4:0c:e5:
a1:19:74:fc:51:07:87:ee:d2:81:d4:28:81:99:30:76:01:d9:
99:c3:8e:8e:d6:c9:9f:88:d3:f2:b2:c0:1e:25:ae:f3:e0:37:
c7:72:9e:38:65:6b:ca:de:7c:60:c0:85:10:d3:a3:35:ed:10:
ad:8f:2a:4c:32:d1:af:98:b4:57:9e:b4:f4:39:35:1a:72:51:
2a:4a:c3:b7:a7:b9:51:ff:7b:59:cc:af:30:7e:09:d3:6b:68:
0c:0c:88:eb:18:bf:b7:ed:1c:69:3a:1e:8d:f7:e2:11:16:c9:
8f:95:60:ad:9b:08:c5:89:24:bb:75:68:68:13:cb:34:dd:77:
1a:9c:2d:6a:27:0f:58:1e:71:27:ca:8a:92:82:60:6a:08:48:
85:d7:6d:ee:ec:66:2f:ac:8e:6f:07:2c:94:60:7a:48:f0:16:
09:51:b6:4e:bd:ac:90:be:fb:03:d7:3f:fa:1c:21:f1:eb:30:
88:2e:91:45:c5:e7:60:45:d1:49:09:88:f0:48:00:f9:cd:e3:
58:51:51:e0:b6:b9:3a:d7:e9:c0:b3:44:a6:3f:57:9d:af:5a:
ed:5d:94:09
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUDm2GxJ3qnGS/9KnyDTzBtO2Aq9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw
RTMxMDQ0ODAeFw0yNDA1MTUwODU1NTNaFw0yNTA1MTQwOTAwNTNaMDMxMTAvBgNV
BAMTKEZFRjFGODE5RUQyMzc0QzI0NUQ3OUVBNDhCMzRDQTA5MkM3RTc2REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAQ3PneUyKPOqQH0kPKEf1B8Q
W8R8lSS2yeb7rLA13Hzj1hNw4Y55oxxRyi0nb43j2V2DDw/WhOalEOb9oTJIjqmD
MJOCJpEh++xVtKKEcfo81aIUzSX9cC6yADnCGLQaafae8kcnLj1lb5Z7cWzpR4iu
1h4ZjFdH2lv5fZ3zJNoHh8bgpTuJT2cuu6y5C1BJ07tnQ8+TWK9tLDKeYcK1PN7J
fv8GTeUAoV2bhQcSqz7qGnPhhM6CBb4pvvmEVYWUj2Vtfdt4VNlFAylPVSHn65pM
21R4hw5bS6XurbpHdrili3MrneJSFK2CMRglsNgkrIcaJM1MF8ADnp0G0sjlAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU/vH4Ge0jdMJF156kizTKCSx+dtowHwYDVR0j
BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG
MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx
MDQ0OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlOTdkYmM2LTkzNzQtNDJlMi1h
M2QwLTg3OWVkNmExOTE5Ni8wLzMxMzAzMzJlMzYzODJlMzAyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzMTMzMzUzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnRAAwDQYJKoZIhvcN
AQELBQADggEBAIqZBI+GRIHkD8+8r2NVHo/5Q+NueFbomJFkG+BAxe/MMbQM5aEZ
dPxRB4fu0oHUKIGZMHYB2ZnDjo7WyZ+I0/KywB4lrvPgN8dynjhla8refGDAhRDT
ozXtEK2PKkwy0a+YtFeetPQ5NRpyUSpKw7enuVH/e1nMrzB+CdNraAwMiOsYv7ft
HGk6Ho334hEWyY+VYK2bCMWJJLt1aGgTyzTddxqcLWonD1gecSfKipKCYGoISIXX
be7sZi+sjm8HLJRgekjwFglRtk69rJC++wPXP/ocIfHrMIgukUXF52BF0UkJiPBI
APnN41hRUeC2uTrX6cCzRKY/V52vWu1dlAk=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:37 2025 by rpki-client