Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3235332e38362e302f32332d3234203d3e2039333431.roa
File: 3130332e3235332e38362e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier: 5oNCbPk2HYn7/HxfXDGSitPSn/7g+/Tc/4vXHxJeZzo=
Subject key identifier: 33:95:40:5F:A6:3A:D9:8F:47:22:A3:9B:29:61:45:2F:3C:84:93:47
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 7DB61567D9414E4CB28793676EEA525153E584F3
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3235332e38362e302f32332d3234203d3e2039333431.roa
Signing time: Wed 01 May 2024 08:02:07 +0000
ROA not before: Wed 01 May 2024 07:57:07 +0000
ROA not after: Wed 30 Apr 2025 08:02:07 +0000
asID: 9341
IP address blocks: 103.253.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b6:15:67:d9:41:4e:4c:b2:87:93:67:6e:ea:52:51:53:e5:84:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: May 1 07:57:07 2024 GMT
Not After : Apr 30 08:02:07 2025 GMT
Subject: CN=3395405FA63AD98F4722A39B2961452F3C849347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:b0:52:43:cd:31:b6:f7:fe:b8:04:7b:90:
bc:1f:18:9a:41:06:a9:c5:dc:45:1a:0e:50:21:c6:
f0:4d:fe:9b:6c:86:f9:28:95:cf:79:14:2b:3f:ec:
e4:e2:99:48:c0:ac:45:fa:7e:03:70:6c:80:90:ed:
1b:d1:a3:88:21:09:93:d9:f1:b1:76:35:1c:bc:c5:
76:e9:d0:dc:41:8a:a5:1e:2b:50:2f:5a:9c:26:79:
f5:41:85:b2:5a:7f:8f:03:24:35:5d:a9:b2:e2:a8:
e0:59:5a:44:2f:4d:be:a0:69:89:21:aa:33:76:31:
02:5c:13:f1:c9:76:3f:b7:1c:ce:1f:3e:0f:14:fd:
1d:80:4b:ee:63:94:15:d9:4f:0b:f0:ab:31:ab:29:
ae:4d:81:9d:9f:02:a1:85:80:85:98:36:0b:ed:df:
b9:ca:ba:1d:74:db:29:6b:0c:8f:be:57:9f:58:86:
3d:37:f0:a3:49:94:5b:3f:65:89:93:5f:68:a4:b7:
eb:65:1f:d2:81:17:64:f6:8c:23:cf:22:f0:c7:8e:
a0:d2:6c:ae:42:25:c4:95:5f:27:5b:5e:b7:6b:eb:
25:9c:21:45:ab:58:5f:c0:59:18:12:b3:e0:c4:d4:
06:b7:a1:a6:8b:53:c1:f5:22:6d:e9:a2:af:10:f7:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:95:40:5F:A6:3A:D9:8F:47:22:A3:9B:29:61:45:2F:3C:84:93:47
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3235332e38362e302f32332d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.253.86.0/23
Signature Algorithm: sha256WithRSAEncryption
27:6e:bd:43:34:03:02:99:05:51:5a:fa:1c:0a:3d:51:10:1d:
77:5f:73:fc:43:7b:bb:9b:9f:f4:47:f3:bd:16:8c:fc:fc:e7:
2f:ed:c4:9f:e6:3b:18:4a:39:ae:a9:4c:78:93:ee:a5:ae:b0:
51:37:9c:68:ca:00:14:06:ac:d1:38:79:12:45:84:f4:30:e1:
15:48:76:20:76:4d:20:f2:58:e4:a2:15:5f:3d:fc:b6:27:00:
d9:7e:fc:d5:8e:ef:55:ef:32:ba:d5:03:ef:84:96:77:3a:90:
11:1c:19:13:81:15:e1:da:55:40:8d:ed:34:8f:a0:fd:51:20:
84:3d:f9:05:a3:16:18:e7:92:77:76:a9:3c:d4:a4:12:8f:0c:
0e:10:5f:e9:fb:92:ba:5b:b2:fc:79:d8:ef:c5:e1:1f:30:01:
4e:2d:5a:01:15:e1:00:0b:18:ec:9b:8d:a7:67:01:8c:a8:87:
36:c1:5b:f0:4c:8c:ea:a7:c3:8b:5c:c2:d7:45:54:d9:80:66:
ce:40:49:40:dc:4e:23:1a:5c:fd:3e:88:68:82:4f:55:bb:04:
59:ad:14:bb:41:fb:10:ca:89:cf:f2:5d:b5:ca:40:d1:b0:4d:
c2:9b:0a:53:3f:15:39:44:2e:98:f4:97:30:c2:71:46:12:38:
9e:20:68:86
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUfbYVZ9lBTkyyh5NnbupSUVPlhPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNDA1MDEwNzU3MDdaFw0yNTA0MzAwODAyMDdaMDMxMTAvBgNV
BAMTKDMzOTU0MDVGQTYzQUQ5OEY0NzIyQTM5QjI5NjE0NTJGM0M4NDkzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZrBSQ80xtvf+uAR7kLwfGJpB
BqnF3EUaDlAhxvBN/ptshvkolc95FCs/7OTimUjArEX6fgNwbICQ7RvRo4ghCZPZ
8bF2NRy8xXbp0NxBiqUeK1AvWpwmefVBhbJaf48DJDVdqbLiqOBZWkQvTb6gaYkh
qjN2MQJcE/HJdj+3HM4fPg8U/R2AS+5jlBXZTwvwqzGrKa5NgZ2fAqGFgIWYNgvt
37nKuh102ylrDI++V59Yhj038KNJlFs/ZYmTX2ikt+tlH9KBF2T2jCPPIvDHjqDS
bK5CJcSVXydbXrdr6yWcIUWrWF/AWRgSs+DE1Aa3oaaLU8H1Im3poq8Q90SLAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUM5VAX6Y62Y9HIqObKWFFLzyEk0cwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzAzMzJlMzIzNTMzMmUzODM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn/VYwDQYJKoZIhvcN
AQELBQADggEBACduvUM0AwKZBVFa+hwKPVEQHXdfc/xDe7ubn/RH870WjPz85y/t
xJ/mOxhKOa6pTHiT7qWusFE3nGjKABQGrNE4eRJFhPQw4RVIdiB2TSDyWOSiFV89
/LYnANl+/NWO71XvMrrVA++Elnc6kBEcGROBFeHaVUCN7TSPoP1RIIQ9+QWjFhjn
knd2qTzUpBKPDA4QX+n7krpbsvx52O/F4R8wAU4tWgEV4QALGOybjadnAYyohzbB
W/BMjOqnw4tcwtdFVNmAZs5ASUDcTiMaXP0+iGiCT1W7BFmtFLtB+xDKic/yXbXK
QNGwTcKbClM/FTlELpj0lzDCcUYSOJ4gaIY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:51 2025 by rpki-client