Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa
File: 3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa (raw, json)
Hash identifier: V7RFCHjDQmX/bycVf9vGUXwZyU+bAqqIJro21SU5i0w=
Subject key identifier: CE:BF:CE:AC:F3:D6:8B:98:C6:0A:F8:AB:34:A3:47:45:3E:1D:FE:98
Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial: 77FDE449E2C5EFD278CAD7AD463E58535A54EBB4
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa
Signing time: Mon 23 Dec 2024 06:00:36 +0000
ROA not before: Mon 23 Dec 2024 05:55:36 +0000
ROA not after: Mon 22 Dec 2025 06:00:36 +0000
asID: 150502
IP address blocks: 103.54.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:fd:e4:49:e2:c5:ef:d2:78:ca:d7:ad:46:3e:58:53:5a:54:eb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Validity
Not Before: Dec 23 05:55:36 2024 GMT
Not After : Dec 22 06:00:36 2025 GMT
Subject: CN=CEBFCEACF3D68B98C60AF8AB34A347453E1DFE98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:24:bc:cb:a8:b1:19:8f:9c:40:b0:2b:26:
a7:13:ea:1c:65:d3:2b:5f:64:bc:da:de:78:ed:47:
2f:76:b1:64:ba:52:36:ee:61:8a:19:a4:01:af:f9:
72:0e:f8:2e:bf:4a:6f:44:88:5d:e5:f7:73:de:26:
83:a7:12:f4:17:16:19:eb:49:3f:ea:66:a1:37:13:
c6:f6:e9:92:b1:98:fe:54:9e:2c:55:fb:f0:f4:b0:
c8:e2:7d:76:73:80:89:65:d4:c8:2e:c8:bb:01:38:
d7:4b:a8:f5:e7:97:14:de:01:4d:c1:07:43:96:bc:
86:7b:3f:c4:73:69:20:ff:a8:18:4a:f7:07:3e:a5:
fd:c6:1e:dc:72:82:4d:ff:09:e2:9a:42:aa:6f:73:
b9:5b:6a:1f:9c:72:ff:78:9a:92:05:0e:0f:1f:ca:
c6:d6:2c:dd:72:21:f8:95:cc:bc:19:6e:09:32:80:
0e:ec:2b:a8:7a:94:84:f6:46:49:ea:c8:f7:31:7f:
1a:36:61:99:47:fe:7e:e8:7a:ee:d1:e8:08:f9:12:
76:e1:97:2a:0c:42:da:86:48:90:5f:cb:1a:b7:15:
a1:d0:eb:86:b5:64:f1:a9:c2:0b:45:3c:31:6e:65:
75:f7:90:ce:14:f5:22:3a:fe:1a:e5:7f:d9:7b:b4:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BF:CE:AC:F3:D6:8B:98:C6:0A:F8:AB:34:A3:47:45:3E:1D:FE:98
X509v3 Authority Key Identifier:
keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.171.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:93:d5:bb:cd:f0:5d:39:ce:86:12:11:78:45:c4:50:b6:e7:
6c:47:8e:64:b4:ee:12:5e:f2:03:cd:db:84:f8:b2:4b:d9:13:
cb:c4:bb:cb:4e:0f:49:b3:d4:e0:a8:59:31:97:94:5d:fc:25:
a9:4f:49:6a:32:ea:e4:b2:62:5f:82:92:b3:03:e6:03:2f:11:
16:bc:94:ec:5f:a2:4a:83:c5:7c:9a:9c:74:e3:74:99:74:e7:
fd:13:91:ee:5c:97:b1:98:7d:9b:1c:5a:2e:de:36:cf:e6:63:
be:07:6a:89:ef:3e:ca:93:68:b5:36:d3:ac:18:f5:a7:0a:e6:
c2:91:34:66:64:13:df:cc:db:7e:e7:a8:88:21:17:90:7d:c2:
d2:1c:1d:af:ec:3c:75:5d:29:81:26:bf:a5:e0:19:35:f6:8f:
68:9a:bf:34:65:00:7c:50:06:67:01:08:4f:90:35:ed:69:62:
7b:d2:5f:07:71:29:8d:b4:8e:4d:6c:8e:f4:10:89:92:87:39:
46:2a:1f:43:68:58:95:20:df:93:4e:c5:e6:12:58:14:47:0f:
56:8d:e2:e1:86:9a:81:68:7d:05:7d:d0:30:c2:64:27:a0:97:
e4:f6:78:eb:9c:93:92:3e:5b:db:f8:37:b8:d9:6a:fe:b1:b7:
de:9b:de:e4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUd/3kSeLF79J4ytetRj5YU1pU67QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1
RUVDMjM5QjAeFw0yNDEyMjMwNTU1MzZaFw0yNTEyMjIwNjAwMzZaMDMxMTAvBgNV
BAMTKENFQkZDRUFDRjNENjhCOThDNjBBRjhBQjM0QTM0NzQ1M0UxREZFOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GCS8y6ixGY+cQLArJqcT6hxl
0ytfZLza3njtRy92sWS6UjbuYYoZpAGv+XIO+C6/Sm9EiF3l93PeJoOnEvQXFhnr
ST/qZqE3E8b26ZKxmP5UnixV+/D0sMjifXZzgIll1MguyLsBONdLqPXnlxTeAU3B
B0OWvIZ7P8RzaSD/qBhK9wc+pf3GHtxygk3/CeKaQqpvc7lbah+ccv94mpIFDg8f
ysbWLN1yIfiVzLwZbgkygA7sK6h6lIT2RknqyPcxfxo2YZlH/n7oeu7R6Aj5Enbh
lyoMQtqGSJBfyxq3FaHQ64a1ZPGpwgtFPDFuZXX3kM4U9SI6/hrlf9l7tHVxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUzr/OrPPWi5jGCvirNKNHRT4d/pgwHwYDVR0j
BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB
QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD
MjM5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzNzY5NGI3LTMyNTYtNDY2Ni1h
M2ZlLTZlODJlNzgzYjFlMS8wLzMxMzAzMzJlMzUzNDJlMzEzNzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzarMA0GCSqG
SIb3DQEBCwUAA4IBAQCjk9W7zfBdOc6GEhF4RcRQtudsR45ktO4SXvIDzduE+LJL
2RPLxLvLTg9Js9TgqFkxl5Rd/CWpT0lqMurksmJfgpKzA+YDLxEWvJTsX6JKg8V8
mpx043SZdOf9E5HuXJexmH2bHFou3jbP5mO+B2qJ7z7Kk2i1NtOsGPWnCubCkTRm
ZBPfzNt+56iIIReQfcLSHB2v7Dx1XSmBJr+l4Bk19o9omr80ZQB8UAZnAQhPkDXt
aWJ70l8HcSmNtI5NbI70EImShzlGKh9DaFiVIN+TTsXmElgURw9WjeLhhpqBaH0F
fdAwwmQnoJfk9njrnJOSPlvb+De42Wr+sbfem97k
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:56 2025 by rpki-client