Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
File: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (raw, json)
Hash identifier: 2bEsYY+M/a6h66329zvhWc5tPmskLFx7J4PCIWERGEs=
Subject key identifier: 48:D5:A1:F8:87:8F:67:33:C0:08:A7:A9:DF:86:2D:6F:07:09:70:1D
Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F
Certificate serial: 44BA36734AF8A8F26BAD0CDB64D4C7919AEAED21
Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
Signing time: Sun 16 Jun 2024 17:00:00 +0000
ROA not before: Sun 16 Jun 2024 16:55:00 +0000
ROA not after: Sun 15 Jun 2025 17:00:00 +0000
asID: 150923
IP address blocks: 103.97.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ba:36:73:4a:f8:a8:f2:6b:ad:0c:db:64:d4:c7:91:9a:ea:ed:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F
Validity
Not Before: Jun 16 16:55:00 2024 GMT
Not After : Jun 15 17:00:00 2025 GMT
Subject: CN=48D5A1F8878F6733C008A7A9DF862D6F0709701D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:6f:c4:4a:ff:84:f8:3f:15:24:f0:88:2f:
12:c1:e7:54:de:1b:fc:1c:60:66:d3:92:34:13:da:
96:62:22:d5:13:24:8b:56:1a:4b:f8:10:8c:f9:9e:
fa:62:3a:23:77:42:7b:2e:3c:17:b8:6b:0f:02:5c:
6d:f2:6d:d3:cc:93:e8:f6:c5:58:c7:17:c4:1c:32:
64:48:7e:b0:c9:a1:a4:91:c1:25:9e:1c:8e:04:a7:
96:8e:81:4f:fa:51:06:85:6f:c3:e2:5e:c0:52:d1:
2f:38:ec:01:32:53:9a:6a:46:d3:be:65:3f:c9:c6:
44:56:30:f8:62:d1:1b:74:70:5f:bf:b9:4d:0a:63:
67:c1:da:26:6d:92:fa:3f:05:31:c8:1e:47:0e:54:
b2:56:2a:a6:21:8a:14:db:b5:6c:df:c5:7d:0b:78:
66:f0:ca:29:8b:a3:17:af:d8:56:a7:38:6f:51:cc:
47:8f:d9:b2:7d:88:00:50:f8:00:79:cf:e9:42:d0:
86:fd:ac:1a:94:e8:13:49:0b:ee:eb:c6:a2:86:71:
9d:d9:3a:2e:7a:4a:0d:7b:99:be:80:d1:5e:ec:c4:
58:b2:80:37:7f:2a:d4:19:6b:7e:99:b6:be:ed:44:
f7:81:45:8d:27:31:27:48:df:cc:69:31:07:d7:44:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D5:A1:F8:87:8F:67:33:C0:08:A7:A9:DF:86:2D:6F:07:09:70:1D
X509v3 Authority Key Identifier:
keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.224.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:a9:c9:8b:51:c1:ec:f9:f5:e7:e9:b5:0f:ba:3d:41:0f:46:
be:34:72:15:23:0d:02:6e:8f:47:31:89:56:32:25:cf:d9:c1:
ad:e9:15:3a:25:53:12:0e:b4:fb:68:fa:34:20:e2:27:70:2c:
b6:c0:e8:41:6f:42:54:8f:dc:76:54:fc:39:f2:28:65:ea:2d:
cd:e6:1a:6f:c7:46:78:4f:3d:55:53:15:f3:c6:71:57:91:f8:
d7:a1:16:59:7e:24:d4:48:d4:91:3f:2b:e0:8f:c1:ba:7f:c4:
e1:4e:d2:e1:ac:a9:22:e7:c9:fe:59:e3:8b:ae:88:e2:67:98:
96:0d:07:ee:47:d7:75:ff:ed:7d:b1:54:76:20:df:11:ec:62:
6f:37:e2:5d:cc:7b:7b:9b:d2:4f:7f:a3:4d:f2:34:19:f4:68:
cf:b6:fe:dc:3f:89:ab:2b:97:01:fa:d5:dc:2a:24:60:35:9f:
8d:98:3a:da:c8:2c:f4:f2:38:0e:b2:4f:6b:8e:a8:5d:70:ba:
fe:33:ec:c9:1f:a3:d9:af:39:fb:b1:71:f1:ae:45:d3:1a:59:
5d:ab:10:dc:d7:e7:fe:fa:cd:b0:2a:97:3e:dc:10:1a:25:2a:
99:1d:a1:a8:25:9a:7a:c4:40:b0:ac:14:bd:e0:45:a9:0d:fa:
4f:29:04:02
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURLo2c0r4qPJrrQzbZNTHkZrq7SEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1
QkVFNzM3RjAeFw0yNDA2MTYxNjU1MDBaFw0yNTA2MTUxNzAwMDBaMDMxMTAvBgNV
BAMTKDQ4RDVBMUY4ODc4RjY3MzNDMDA4QTdBOURGODYyRDZGMDcwOTcwMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnW/ESv+E+D8VJPCILxLB51Te
G/wcYGbTkjQT2pZiItUTJItWGkv4EIz5nvpiOiN3QnsuPBe4aw8CXG3ybdPMk+j2
xVjHF8QcMmRIfrDJoaSRwSWeHI4Ep5aOgU/6UQaFb8PiXsBS0S847AEyU5pqRtO+
ZT/JxkRWMPhi0Rt0cF+/uU0KY2fB2iZtkvo/BTHIHkcOVLJWKqYhihTbtWzfxX0L
eGbwyimLoxev2FanOG9RzEeP2bJ9iABQ+AB5z+lC0Ib9rBqU6BNJC+7rxqKGcZ3Z
Oi56Sg17mb6A0V7sxFiygDd/KtQZa36Ztr7tRPeBRY0nMSdI38xpMQfXRLxpAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSNWh+IePZzPACKep34YtbwcJcB0wHwYDVR0j
BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE
QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF
NzM3Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0YWFhMmYxLTYzYTktNDI4MS04
OTQyLWZiNWQ4MjQxMTlhNC8wLzMxMzAzMzJlMzkzNzJlMzIzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2HgMA0GCSqG
SIb3DQEBCwUAA4IBAQDQqcmLUcHs+fXn6bUPuj1BD0a+NHIVIw0Cbo9HMYlWMiXP
2cGt6RU6JVMSDrT7aPo0IOIncCy2wOhBb0JUj9x2VPw58ihl6i3N5hpvx0Z4Tz1V
UxXzxnFXkfjXoRZZfiTUSNSRPyvgj8G6f8ThTtLhrKki58n+WeOLrojiZ5iWDQfu
R9d1/+19sVR2IN8R7GJvN+JdzHt7m9JPf6NN8jQZ9GjPtv7cP4mrK5cB+tXcKiRg
NZ+NmDrayCz08jgOsk9rjqhdcLr+M+zJH6PZrzn7sXHxrkXTGlldqxDc1+f++s2w
Kpc+3BAaJSqZHaGoJZp6xECwrBS94EWpDfpPKQQC
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:44 2025 by rpki-client