Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa
File: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (raw, json)
Hash identifier: ln4Ofi4VkpxhIBCKYceqIG3INrnNW1q33kOikEH5kEw=
Subject key identifier: A4:E2:5C:6C:27:99:C0:B4:80:CB:E2:8A:C6:78:AF:D1:8A:EE:57:46
Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D
Certificate serial: 33B05AB8F928ADE341A690A7F0F547D3B7D18819
Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa
Signing time: Sat 11 May 2024 01:00:02 +0000
ROA not before: Sat 11 May 2024 00:55:02 +0000
ROA not after: Sat 10 May 2025 01:00:02 +0000
asID: 149718
IP address blocks: 103.187.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b0:5a:b8:f9:28:ad:e3:41:a6:90:a7:f0:f5:47:d3:b7:d1:88:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D
Validity
Not Before: May 11 00:55:02 2024 GMT
Not After : May 10 01:00:02 2025 GMT
Subject: CN=A4E25C6C2799C0B480CBE28AC678AFD18AEE5746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:4d:9e:fc:63:76:b5:f5:b7:35:4b:c5:19:
11:53:ad:26:f6:30:9d:80:a2:2d:58:31:50:c5:cf:
57:65:a6:e5:62:b3:93:74:77:32:60:6f:1c:89:d9:
bb:12:7d:da:89:55:bc:37:0f:91:ae:50:0e:2f:2f:
c8:b4:68:94:20:b6:92:69:c5:d2:87:3d:87:98:cb:
2c:61:b7:4c:ac:d0:c3:7b:b7:71:7b:4a:a6:99:d7:
2c:aa:54:cd:5e:dc:a4:6b:08:0b:0b:d7:09:37:a6:
a9:da:29:54:98:cd:a5:c0:9e:76:37:21:b6:71:13:
69:2b:c3:ae:f6:5c:84:ec:ae:cb:e4:c3:5c:6b:24:
9c:b7:30:ea:fb:99:ff:bd:ba:35:f2:a0:d5:a9:55:
96:4d:22:c4:cb:fe:7f:62:12:d2:4f:0d:6b:57:85:
3e:dc:fd:4d:04:5a:7a:b0:c4:c7:c9:8d:0e:82:8f:
90:6a:7a:76:9e:4e:f3:0e:bb:16:6f:fd:f1:1e:6f:
da:8c:81:db:85:47:51:87:70:f8:7f:8c:b5:8b:07:
f6:ea:1f:2f:a5:56:f1:f4:d1:9f:4d:bf:8b:d5:97:
e5:df:99:e0:ab:e4:c2:71:c0:f9:0b:a4:57:d3:b7:
74:9a:d5:98:66:b1:1e:b4:c3:bf:7b:bf:fb:b6:ac:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:5C:6C:27:99:C0:B4:80:CB:E2:8A:C6:78:AF:D1:8A:EE:57:46
X509v3 Authority Key Identifier:
keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.87.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5a:95:70:7d:3b:37:8a:65:d1:97:93:d4:27:78:50:4b:05:
1a:c7:ff:0e:d0:1e:dc:c0:ea:00:95:b3:b5:c8:2e:a9:68:20:
07:58:bf:fe:70:40:05:9a:39:4a:e5:f4:a1:a0:11:ad:45:cc:
89:68:b8:3a:c9:b9:d0:2c:f2:61:15:d4:a6:de:5b:1c:8a:d3:
70:92:c0:6d:73:f9:b3:63:19:be:59:4b:be:42:b1:f3:ce:76:
4a:c3:38:be:51:1e:a9:d6:13:17:7d:64:77:b7:72:32:a1:6b:
91:04:40:cc:8c:1b:e3:74:a7:e0:ed:2f:94:ea:e9:02:39:ee:
e5:3a:5c:03:c8:78:31:86:ce:3b:db:04:fb:72:36:f0:ce:4e:
47:1b:29:ad:af:21:01:be:b6:c2:66:45:39:06:8b:36:bb:38:
2f:b3:62:a4:63:b0:84:c7:e9:69:f8:23:94:94:24:7f:ef:b5:
87:0d:57:25:6d:a0:dd:02:ec:e2:fa:2a:7b:3f:d0:73:89:64:
85:b5:2d:c9:f5:a8:60:66:c4:2b:67:d8:8d:79:cc:39:7b:8b:
db:f4:a1:3b:43:b7:df:a5:e3:92:4f:33:5b:42:9a:75:0b:e8:
1c:01:cf:aa:92:a2:04:a4:83:9f:40:25:93:39:ae:f9:f6:61:
26:60:b5:f0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUM7BauPkoreNBppCn8PVH07fRiBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2
NTM5QjA1RDAeFw0yNDA1MTEwMDU1MDJaFw0yNTA1MTAwMTAwMDJaMDMxMTAvBgNV
BAMTKEE0RTI1QzZDMjc5OUMwQjQ4MENCRTI4QUM2NzhBRkQxOEFFRTU3NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjk2e/GN2tfW3NUvFGRFTrSb2
MJ2Aoi1YMVDFz1dlpuVis5N0dzJgbxyJ2bsSfdqJVbw3D5GuUA4vL8i0aJQgtpJp
xdKHPYeYyyxht0ys0MN7t3F7SqaZ1yyqVM1e3KRrCAsL1wk3pqnaKVSYzaXAnnY3
IbZxE2krw672XITsrsvkw1xrJJy3MOr7mf+9ujXyoNWpVZZNIsTL/n9iEtJPDWtX
hT7c/U0EWnqwxMfJjQ6Cj5BqenaeTvMOuxZv/fEeb9qMgduFR1GHcPh/jLWLB/bq
Hy+lVvH00Z9Nv4vVl+XfmeCr5MJxwPkLpFfTt3Sa1ZhmsR60w797v/u2rJPrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUpOJcbCeZwLSAy+KKxniv0YruV0YwHwYDVR0j
BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4
NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5
QjA1RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiN2VmNTE1LTg1NjQtNDFlOC05
ZDIwLTJkMzNkNDVjY2JkNi8wLzMxMzAzMzJlMzEzODM3MmUzODM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7tXMA0GCSqG
SIb3DQEBCwUAA4IBAQBhWpVwfTs3imXRl5PUJ3hQSwUax/8O0B7cwOoAlbO1yC6p
aCAHWL/+cEAFmjlK5fShoBGtRcyJaLg6ybnQLPJhFdSm3lscitNwksBtc/mzYxm+
WUu+QrHzznZKwzi+UR6p1hMXfWR3t3IyoWuRBEDMjBvjdKfg7S+U6ukCOe7lOlwD
yHgxhs472wT7cjbwzk5HGymtryEBvrbCZkU5Bos2uzgvs2KkY7CEx+lp+COUlCR/
77WHDVclbaDdAuzi+ip7P9BziWSFtS3J9ahgZsQrZ9iNecw5e4vb9KE7Q7ffpeOS
TzNbQpp1C+gcAc+qkqIEpIOfQCWTOa759mEmYLXw
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:09:07 2025 by rpki-client