Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa
File: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (raw, json)
Hash identifier: AcWRKVS8hMmQoXQ+7qgHzNHPiMSBcaWoEFEGheb2780=
Subject key identifier: 7B:DD:49:3F:1C:97:78:CD:44:27:92:5A:88:40:5E:9D:BD:C2:B9:5C
Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187
Certificate serial: 33AB4570B9C6AE0ABAC249C10C4C4B18A2E66B06
Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa
Signing time: Tue 19 Mar 2024 18:00:01 +0000
ROA not before: Tue 19 Mar 2024 17:55:01 +0000
ROA not after: Tue 18 Mar 2025 18:00:01 +0000
asID: 131765
IP address blocks: 103.77.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ab:45:70:b9:c6:ae:0a:ba:c2:49:c1:0c:4c:4b:18:a2:e6:6b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187
Validity
Not Before: Mar 19 17:55:01 2024 GMT
Not After : Mar 18 18:00:01 2025 GMT
Subject: CN=7BDD493F1C9778CD4427925A88405E9DBDC2B95C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:bb:9f:63:ba:53:e9:40:31:99:d7:81:d6:
71:c0:48:ac:f8:af:68:dc:1d:e3:b5:4e:c1:bc:e8:
ca:5b:9b:3f:77:b7:36:1b:88:93:2a:bf:94:3d:6e:
59:7b:a6:e5:61:9c:e4:23:15:ec:41:8d:ab:5a:cc:
2e:de:bf:de:25:24:3b:ff:67:54:76:6e:82:78:3b:
80:64:96:b9:42:7b:c3:db:2c:8c:66:f7:0b:69:22:
b6:75:1b:39:41:47:1c:8e:53:03:60:a2:c3:86:f4:
1b:7f:e1:0c:96:07:ae:b3:bd:a9:0f:d9:d4:20:e6:
0e:05:04:8b:26:b9:e9:2d:ea:44:d9:b4:d5:78:78:
63:ab:98:6c:29:d2:c2:96:36:e5:01:bb:6d:ea:02:
d6:d7:7a:23:bc:11:ec:52:da:af:c7:07:41:91:06:
51:3a:68:f1:be:cf:80:32:63:c7:37:29:39:43:8e:
38:7f:79:d2:a6:a9:29:73:34:aa:93:5a:7f:d2:f6:
51:87:27:c1:51:22:3c:a4:ab:b0:c7:6a:9d:b3:89:
dd:de:0b:bc:06:05:59:25:21:ac:a0:38:73:a2:a9:
38:53:09:ef:33:ee:f6:cc:59:24:63:d2:01:8f:17:
b9:6f:44:6e:3f:fd:d0:54:8c:f6:26:aa:3e:2e:0b:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:49:3F:1C:97:78:CD:44:27:92:5A:88:40:5E:9D:BD:C2:B9:5C
X509v3 Authority Key Identifier:
keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.77.185.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a4:bc:65:a1:f6:e1:21:e9:18:5a:17:4a:0e:48:4f:80:b7:
5d:cb:f2:9f:30:00:ef:5d:2f:60:6e:6b:a6:47:60:64:91:ec:
9e:36:ed:58:94:d3:0d:ce:22:2c:a9:72:1d:1f:c4:d5:88:36:
3d:11:ec:27:5b:f7:4c:9f:11:b1:23:86:2c:6e:4e:32:46:18:
35:5f:d7:9d:66:a1:e9:e3:42:4a:8a:de:75:cb:ae:9f:94:29:
2c:ba:f9:1e:d7:21:a2:ff:15:50:ab:94:28:07:83:f7:44:d6:
6e:59:2f:af:f4:92:db:a9:2e:34:cf:dd:3c:4a:f2:08:5d:28:
2c:7d:e1:86:cd:e8:f0:5c:72:7e:4c:f0:ce:cd:a5:ea:5f:6c:
60:71:0c:29:f8:ee:fe:37:b2:45:df:50:fe:c9:e7:3e:8a:97:
8a:60:b5:f7:a0:fb:c8:b5:02:dc:f7:f1:7e:d2:98:e4:07:80:
65:3c:1f:b5:d1:99:2d:5e:b7:83:37:23:32:c5:f5:f9:99:8d:
84:71:40:d7:0b:10:13:47:cb:67:ad:29:5b:59:8b:87:4a:e6:
fd:73:33:34:14:11:23:61:f1:c0:c7:1f:db:fd:f8:fa:86:6d:
43:92:5d:8f:9b:14:2a:96:98:71:b1:97:b5:9f:24:de:8e:30:
78:10:04:9e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUM6tFcLnGrgq6wknBDExLGKLmawYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz
MkVDMjE4NzAeFw0yNDAzMTkxNzU1MDFaFw0yNTAzMTgxODAwMDFaMDMxMTAvBgNV
BAMTKDdCREQ0OTNGMUM5Nzc4Q0Q0NDI3OTI1QTg4NDA1RTlEQkRDMkI5NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcCrufY7pT6UAxmdeB1nHASKz4
r2jcHeO1TsG86Mpbmz93tzYbiJMqv5Q9bll7puVhnOQjFexBjatazC7ev94lJDv/
Z1R2boJ4O4BklrlCe8PbLIxm9wtpIrZ1GzlBRxyOUwNgosOG9Bt/4QyWB66zvakP
2dQg5g4FBIsmuekt6kTZtNV4eGOrmGwp0sKWNuUBu23qAtbXeiO8EexS2q/HB0GR
BlE6aPG+z4AyY8c3KTlDjjh/edKmqSlzNKqTWn/S9lGHJ8FRIjykq7DHap2zid3e
C7wGBVklIaygOHOiqThTCe8z7vbMWSRj0gGPF7lvRG4//dBUjPYmqj4uCxjDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUe91JPxyXeM1EJ5JaiEBenb3CuVwwHwYDVR0j
BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC
MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD
MjE4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2ZDcwMzQ2LTViZGYtNDk2MS1h
NzRmLTU1YWU4NTU2NzJhMS8wLzMxMzAzMzJlMzczNzJlMzEzODM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ025MA0GCSqG
SIb3DQEBCwUAA4IBAQBzpLxlofbhIekYWhdKDkhPgLddy/KfMADvXS9gbmumR2Bk
keyeNu1YlNMNziIsqXIdH8TViDY9EewnW/dMnxGxI4Ysbk4yRhg1X9edZqHp40JK
it51y66flCksuvke1yGi/xVQq5QoB4P3RNZuWS+v9JLbqS40z908SvIIXSgsfeGG
zejwXHJ+TPDOzaXqX2xgcQwp+O7+N7JF31D+yec+ipeKYLX3oPvItQLc9/F+0pjk
B4BlPB+10ZktXreDNyMyxfX5mY2EcUDXCxATR8tnrSlbWYuHSub9czM0FBEjYfHA
xx/b/fj6hm1Dkl2PmxQqlphxsZe1nyTejjB4EASe
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:38 2025 by rpki-client