Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa
File: 3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (raw, json)
Hash identifier: zEnS7MUIR/K5UV+N9UMD9HrZThlFZltdIGvWRa0yVIA=
Subject key identifier: 87:24:E8:71:EA:C5:95:14:2A:E4:01:AD:32:8E:55:95:5F:68:90:AD
Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
Certificate serial: 2E7DCDC9A1E09D5CEDE9A2FFF8BFF07810B3E8A5
Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa
Signing time: Thu 26 Dec 2024 05:01:50 +0000
ROA not before: Thu 26 Dec 2024 04:56:50 +0000
ROA not after: Thu 25 Dec 2025 05:01:50 +0000
asID: 151582
IP address blocks: 103.80.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7d:cd:c9:a1:e0:9d:5c:ed:e9:a2:ff:f8:bf:f0:78:10:b3:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
Validity
Not Before: Dec 26 04:56:50 2024 GMT
Not After : Dec 25 05:01:50 2025 GMT
Subject: CN=8724E871EAC595142AE401AD328E55955F6890AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:00:16:79:f8:a5:34:0d:b0:63:c6:0f:c9:
43:4b:a8:89:3f:3d:d4:2f:f4:49:d1:cf:e2:84:cd:
6c:49:fb:9d:21:88:ea:c3:47:63:a5:a9:a0:1a:ff:
d7:e1:f5:19:73:ec:f3:48:e1:b5:58:a3:ab:7d:4c:
ac:a9:f6:48:ce:d5:e0:d4:a8:dd:eb:68:1b:40:23:
d7:19:5c:6b:61:89:d5:e1:6e:38:c8:09:58:d8:3a:
b8:2c:32:24:05:74:75:6d:2b:25:d3:68:b4:a9:9e:
d3:c9:76:26:6a:e7:83:10:42:b9:74:7a:0a:3b:07:
56:ef:6a:7a:88:c4:46:cb:01:4c:c1:0a:07:5f:01:
87:52:6a:a4:d1:f8:87:82:0f:32:48:f5:aa:89:32:
04:59:0f:1d:21:2a:3d:59:94:e1:51:5d:8a:e7:91:
31:fd:24:03:3b:4c:e9:45:42:0d:b0:d5:49:b8:06:
63:37:aa:cf:62:c2:c9:7e:b5:2b:07:7a:6a:59:81:
2e:08:98:29:bc:c4:ab:c3:a3:06:de:7a:18:96:dc:
be:c6:9c:1a:0b:54:89:06:da:5b:02:8e:ef:e9:bd:
e2:b4:c7:1e:65:10:90:0f:6d:4d:e0:5f:36:2c:1d:
7a:e7:69:e1:23:fc:59:f5:3c:ff:3e:9a:6a:e4:8d:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:E8:71:EA:C5:95:14:2A:E4:01:AD:32:8E:55:95:5F:68:90:AD
X509v3 Authority Key Identifier:
keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.230.0/24
Signature Algorithm: sha256WithRSAEncryption
50:92:c3:e4:3b:5b:38:7b:4e:64:5a:da:65:c5:ed:10:46:87:
6c:b2:0a:18:04:47:01:65:62:0c:23:20:3d:09:ff:40:4a:58:
69:84:a6:25:56:ce:9e:af:00:35:db:d4:ee:93:06:ea:b5:2d:
19:4c:b1:0c:7c:8b:24:c9:5c:95:af:50:26:7f:e0:fe:67:56:
e4:41:16:64:23:ee:f0:81:10:22:ae:72:01:d5:86:38:72:56:
8d:3a:8f:56:09:27:9f:f9:e4:2a:96:5d:c3:83:f3:5a:0e:7d:
ba:9a:fd:6a:69:b8:ce:91:64:31:1b:cd:94:f6:e0:9b:39:b7:
a2:4c:5b:fd:cc:81:54:d4:7e:58:9f:22:15:1a:a6:9d:7c:3b:
21:6c:0d:87:35:46:09:f1:d1:5c:67:c3:26:e2:ab:7a:27:87:
64:93:b2:4c:fa:1f:a6:e7:9b:2a:0f:c4:3d:2d:17:b6:08:34:
da:ce:e9:4e:7c:d3:79:c8:35:5d:89:06:a4:82:6b:8d:ac:56:
0e:0f:a9:40:1b:a4:f0:56:56:e9:18:fb:32:36:d1:3e:12:e2:
5c:d4:21:5f:5b:dd:5f:d4:6a:08:ec:8c:3c:33:79:f8:9f:ec:
10:3e:a8:85:61:c1:01:7d:36:2e:23:1a:e4:09:9d:4d:c8:99:
b5:37:e5:05
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULn3NyaHgnVzt6aL/+L/weBCz6KUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC
MzZGM0FENjAeFw0yNDEyMjYwNDU2NTBaFw0yNTEyMjUwNTAxNTBaMDMxMTAvBgNV
BAMTKDg3MjRFODcxRUFDNTk1MTQyQUU0MDFBRDMyOEU1NTk1NUY2ODkwQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGQAWefilNA2wY8YPyUNLqIk/
PdQv9EnRz+KEzWxJ+50hiOrDR2OlqaAa/9fh9Rlz7PNI4bVYo6t9TKyp9kjO1eDU
qN3raBtAI9cZXGthidXhbjjICVjYOrgsMiQFdHVtKyXTaLSpntPJdiZq54MQQrl0
ego7B1bvanqIxEbLAUzBCgdfAYdSaqTR+IeCDzJI9aqJMgRZDx0hKj1ZlOFRXYrn
kTH9JAM7TOlFQg2w1Um4BmM3qs9iwsl+tSsHempZgS4ImCm8xKvDowbeehiW3L7G
nBoLVIkG2lsCju/pveK0xx5lEJAPbU3gXzYsHXrnaeEj/Fn1PP8+mmrkjQZvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUhyTocerFlRQq5AGtMo5VlV9okK0wHwYDVR0j
BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz
NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG
M0FENi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0MWU4MjIzLWNjNjgtNDEwZS1i
NjdiLTliODgyNWI1Y2Q1Zi8wLzMxMzAzMzJlMzgzMDJlMzIzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1DmMA0GCSqG
SIb3DQEBCwUAA4IBAQBQksPkO1s4e05kWtplxe0QRodssgoYBEcBZWIMIyA9Cf9A
SlhphKYlVs6erwA129TukwbqtS0ZTLEMfIskyVyVr1Amf+D+Z1bkQRZkI+7wgRAi
rnIB1YY4claNOo9WCSef+eQqll3Dg/NaDn26mv1qabjOkWQxG82U9uCbObeiTFv9
zIFU1H5YnyIVGqadfDshbA2HNUYJ8dFcZ8Mm4qt6J4dkk7JM+h+m55sqD8Q9LRe2
CDTazulOfNN5yDVdiQakgmuNrFYOD6lAG6TwVlbpGPsyNtE+EuJc1CFfW91f1GoI
7Iw8M3n4n+wQPqiFYcEBfTYuIxrkCZ1NyJm1N+UF
-----END CERTIFICATE-----
Generated at Fri May 2 11:32:50 2025 by rpki-client