Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa
File: 3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa (raw, json)
Hash identifier: TrjJa445+JUR+ayqk91EMJFWmXepW8pWumfROn/i7JY=
Subject key identifier: 3F:19:BA:A7:8D:2D:F1:58:B6:AD:EE:DE:C7:86:D5:CA:2E:94:7A:18
Certificate issuer: /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Certificate serial: 62C67AEB72AA0BCBA59FF5FA16E14F042BEE4534
Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa
Signing time: Fri 10 Jan 2025 08:00:00 +0000
ROA not before: Fri 10 Jan 2025 07:55:00 +0000
ROA not after: Fri 09 Jan 2026 08:00:00 +0000
asID: 147163
IP address blocks: 103.177.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c6:7a:eb:72:aa:0b:cb:a5:9f:f5:fa:16:e1:4f:04:2b:ee:45:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Validity
Not Before: Jan 10 07:55:00 2025 GMT
Not After : Jan 9 08:00:00 2026 GMT
Subject: CN=3F19BAA78D2DF158B6ADEEDEC786D5CA2E947A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:6f:0b:0f:59:1f:3a:37:e5:a3:e2:ba:4a:
77:bd:42:eb:b0:70:b5:da:e9:99:1f:bc:45:cb:67:
fa:48:b6:6f:49:15:2b:75:81:08:05:95:aa:ff:0e:
a1:5c:9e:5c:e9:59:88:c2:2c:a8:fb:46:37:28:04:
c9:23:51:34:82:c2:15:2d:14:bb:32:6e:d8:5b:cd:
f6:96:36:ca:6b:56:74:f6:dd:7b:34:af:bc:25:98:
f1:4c:54:41:8d:12:76:54:1e:33:0e:66:02:f2:fb:
47:c9:b6:0a:65:ee:98:26:1c:4d:c3:6a:7d:4e:76:
ba:d3:82:7e:4f:c9:02:02:8b:0c:2f:bf:59:bc:79:
f1:0f:19:66:b2:ba:7f:1f:49:37:e8:1e:68:87:c0:
f4:d1:e5:99:b7:85:df:ed:0d:26:35:89:87:c1:40:
22:94:4f:05:64:93:28:ed:b7:d3:5f:0f:31:8d:9d:
e5:ee:a8:84:70:24:cb:2c:76:09:b2:01:80:00:18:
18:33:bc:4f:4d:eb:24:45:92:3b:24:22:c5:f6:c5:
6d:dd:80:21:9d:b2:9c:60:7b:d9:9e:b4:e2:56:95:
66:15:31:4a:a2:e6:ed:50:d0:1a:92:cb:42:37:38:
3f:0f:48:78:03:df:3f:b2:8c:12:a7:d0:8f:60:51:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:BA:A7:8D:2D:F1:58:B6:AD:EE:DE:C7:86:D5:CA:2E:94:7A:18
X509v3 Authority Key Identifier:
keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.214.0/23
Signature Algorithm: sha256WithRSAEncryption
58:80:85:e8:68:4a:9f:09:18:e0:db:8f:7e:03:87:18:6e:02:
75:0f:de:63:49:56:8e:07:6f:08:19:8d:63:2d:48:4d:c1:fd:
f6:95:20:7d:d6:18:ee:f3:d2:2e:3b:c2:d1:cd:e4:c7:2e:bf:
6d:c3:d7:26:b1:be:54:ae:1b:b1:9a:98:5e:64:fd:a4:5f:2f:
04:0f:c9:3c:54:2c:e9:8d:7f:86:80:cb:f4:48:a8:3d:84:0f:
6d:39:f6:2b:96:3f:32:13:96:00:5a:01:03:d4:bf:0a:56:7f:
b5:e0:07:ca:5b:18:d2:33:0c:e1:7d:e0:e7:0a:83:5b:9c:f2:
68:fb:41:2c:a0:b4:b1:9f:a1:60:ad:b1:15:52:89:f5:3b:7c:
fe:4f:97:e0:f9:11:68:53:69:bf:5d:0f:89:fa:fb:ed:3c:23:
a7:c7:01:00:da:aa:be:e5:f5:7a:bc:64:80:2f:cf:85:c9:0a:
85:60:98:e6:c5:eb:be:c6:5b:ac:b1:e4:33:da:32:85:60:53:
3f:34:3a:07:84:23:62:cf:1d:5d:6a:29:80:ed:af:c3:2f:9b:
ff:3f:0e:e3:24:a1:3f:df:2f:70:d0:10:10:d6:6d:77:28:ef:
32:6e:aa:65:7a:60:c2:6f:12:41:bd:c6:9b:c2:51:de:c7:c0:
83:af:0f:e3
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUYsZ663KqC8uln/X6FuFPBCvuRTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4NjlB
NEMyMzhGNDAeFw0yNTAxMTAwNzU1MDBaFw0yNjAxMDkwODAwMDBaMDMxMTAvBgNV
BAMTKDNGMTlCQUE3OEQyREYxNThCNkFERUVERUM3ODZENUNBMkU5NDdBMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaG8LD1kfOjflo+K6Sne9Quuw
cLXa6ZkfvEXLZ/pItm9JFSt1gQgFlar/DqFcnlzpWYjCLKj7RjcoBMkjUTSCwhUt
FLsybthbzfaWNsprVnT23Xs0r7wlmPFMVEGNEnZUHjMOZgLy+0fJtgpl7pgmHE3D
an1OdrrTgn5PyQICiwwvv1m8efEPGWayun8fSTfoHmiHwPTR5Zm3hd/tDSY1iYfB
QCKUTwVkkyjtt9NfDzGNneXuqIRwJMssdgmyAYAAGBgzvE9N6yRFkjskIsX2xW3d
gCGdspxge9metOJWlWYVMUqi5u1Q0BqSy0I3OD8PSHgD3z+yjBKn0I9gUaE7AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUPxm6p40t8Vi2re7ex4bVyi6UehgwHwYDVR0j
BBgwFoAUrbnBlzUvgSj22qR6In04aaTCOPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NzNkMmI2MC0xMmM4LTQxM2UtYjk0MS0zOTNlMDBmZGQ2NTMvMC9BREI5QzE5NzM1
MkY4MTI4RjZEQUE0N0EyMjdEMzg2OUE0QzIzOEY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4NjlBNEMy
MzhGNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3M2QyYjYwLTEyYzgtNDEzZS1i
OTQxLTM5M2UwMGZkZDY1My8wLzMxMzAzMzJlMzEzNzM3MmUzMjMxMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzczMTM2MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnsdYwDQYJ
KoZIhvcNAQELBQADggEBAFiAhehoSp8JGODbj34DhxhuAnUP3mNJVo4HbwgZjWMt
SE3B/faVIH3WGO7z0i47wtHN5Mcuv23D1yaxvlSuG7GamF5k/aRfLwQPyTxULOmN
f4aAy/RIqD2ED2059iuWPzITlgBaAQPUvwpWf7XgB8pbGNIzDOF94OcKg1uc8mj7
QSygtLGfoWCtsRVSifU7fP5Pl+D5EWhTab9dD4n6++08I6fHAQDaqr7l9Xq8ZIAv
z4XJCoVgmObF677GW6yx5DPaMoVgUz80OgeEI2LPHV1qKYDtr8Mvm/8/DuMkoT/f
L3DQEBDWbXco7zJuqmV6YMJvEkG9xpvCUd7HwIOvD+M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:49 2025 by rpki-client