Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa
File: 3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa (raw, json)
Hash identifier: Zbwpw/qKwPe0d3TNY1QWeExL9W/cUwjrkDmumHzLVW8=
Subject key identifier: 98:BF:F1:94:FA:44:C6:47:EC:B2:D0:42:2C:7E:3E:6C:92:D2:9E:9F
Certificate issuer: /CN=06C079105A8A7FB53C97370CDE636B0A22588747
Certificate serial: 78910F3223EC0C05A23DD1BDC92C242F8A9C5A2B
Authority key identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa
Signing time: Mon 01 Jul 2024 01:03:55 +0000
ROA not before: Mon 01 Jul 2024 00:58:55 +0000
ROA not after: Mon 30 Jun 2025 01:03:55 +0000
asID: 138100
IP address blocks: 103.125.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:91:0f:32:23:ec:0c:05:a2:3d:d1:bd:c9:2c:24:2f:8a:9c:5a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06C079105A8A7FB53C97370CDE636B0A22588747
Validity
Not Before: Jul 1 00:58:55 2024 GMT
Not After : Jun 30 01:03:55 2025 GMT
Subject: CN=98BFF194FA44C647ECB2D0422C7E3E6C92D29E9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:21:1f:ad:37:5d:22:6d:dd:56:56:db:dc:
31:80:13:42:b7:2f:c6:53:26:8d:db:fd:58:ac:b5:
4d:55:b1:07:c6:e8:24:5f:98:5c:ab:db:0e:10:af:
3d:5c:9e:80:f9:96:61:8f:98:49:09:48:e1:06:4e:
e3:f4:66:7d:c3:df:b5:c2:f3:09:5e:36:52:ae:6e:
6c:81:f3:25:3c:b6:12:5b:61:59:8e:93:26:a7:97:
0f:10:90:ee:b2:bf:a9:35:8a:90:a5:fa:c4:27:bf:
b8:de:8f:ff:3b:24:3d:24:7b:01:61:58:ae:56:c4:
55:33:fa:67:6f:df:f1:18:bc:e3:3b:8a:38:05:02:
27:c7:26:ce:5f:bc:15:71:68:aa:13:66:88:65:f0:
e2:f6:d3:40:4c:c3:ff:a2:42:11:c7:50:95:9f:f5:
03:85:b6:4a:e3:d3:e8:c1:fc:61:88:f2:bb:14:80:
5c:73:c5:f1:77:6c:7a:d2:ef:a9:c7:0c:89:8f:a3:
b0:d6:a5:b1:20:c0:e4:f0:bd:76:b9:45:9f:98:7e:
f4:d0:09:41:fb:54:b6:25:c2:75:9d:4e:b1:ab:42:
87:4f:c4:9c:0f:04:4a:9e:62:76:c6:f7:36:92:03:
f4:91:59:61:30:39:3f:73:af:84:bc:8e:2c:e8:9f:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BF:F1:94:FA:44:C6:47:EC:B2:D0:42:2C:7E:3E:6C:92:D2:9E:9F
X509v3 Authority Key Identifier:
keyid:06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:a8:ad:5d:79:ff:b8:4f:c5:6b:0e:6c:59:ca:bb:e1:2b:b0:
b8:61:37:ac:6d:e0:f6:aa:5f:cf:90:95:bc:a6:60:19:b9:15:
97:04:da:a5:97:c6:57:19:2c:c2:b1:ea:ac:69:b2:78:07:df:
ee:74:6a:f8:7c:13:35:db:c6:e7:78:93:f3:e5:7a:37:17:6e:
4f:bc:82:3d:f1:a6:c5:fc:c3:c1:96:34:ec:a1:60:6c:1d:90:
44:79:ba:27:23:3b:9a:c0:d8:cd:99:de:20:8e:b3:34:53:5d:
c3:15:99:9b:78:94:fd:63:3c:62:19:91:98:e5:60:33:bc:60:
f0:e6:09:b4:51:4e:de:f1:9c:07:2b:13:2c:d1:93:ce:00:32:
5e:17:95:da:46:ce:74:10:9d:91:da:91:98:e8:b8:78:de:34:
32:2d:6c:8d:ed:e1:c9:77:54:f6:d9:f3:e7:05:83:88:ba:fa:
65:05:2c:e1:75:45:af:8e:40:b1:ee:2c:1e:a8:31:f9:59:69:
7a:8a:6e:34:ba:f4:31:b8:6d:92:0d:95:03:47:a5:50:12:ee:
e9:39:26:7e:48:42:14:b3:33:39:04:61:13:7c:b1:8c:d6:c6:
55:df:b4:a1:8a:5e:2f:5a:89:ce:92:66:51:97:0f:48:17:4f:
29:b7:95:6b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeJEPMiPsDAWiPdG9ySwkL4qcWiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZDMDc5MTA1QThBN0ZCNTNDOTczNzBDREU2MzZCMEEy
MjU4ODc0NzAeFw0yNDA3MDEwMDU4NTVaFw0yNTA2MzAwMTAzNTVaMDMxMTAvBgNV
BAMTKDk4QkZGMTk0RkE0NEM2NDdFQ0IyRDA0MjJDN0UzRTZDOTJEMjlFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjDCEfrTddIm3dVlbb3DGAE0K3
L8ZTJo3b/VistU1VsQfG6CRfmFyr2w4Qrz1cnoD5lmGPmEkJSOEGTuP0Zn3D37XC
8wleNlKubmyB8yU8thJbYVmOkyanlw8QkO6yv6k1ipCl+sQnv7jej/87JD0kewFh
WK5WxFUz+mdv3/EYvOM7ijgFAifHJs5fvBVxaKoTZohl8OL200BMw/+iQhHHUJWf
9QOFtkrj0+jB/GGI8rsUgFxzxfF3bHrS76nHDImPo7DWpbEgwOTwvXa5RZ+YfvTQ
CUH7VLYlwnWdTrGrQodPxJwPBEqeYnbG9zaSA/SRWWEwOT9zr4S8jizon6O1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUmL/xlPpExkfsstBCLH4+bJLSnp8wHwYDVR0j
BBgwFoAUBsB5EFqKf7U8lzcM3mNrCiJYh0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OGNhYzE2MS1mODgwLTQyMDYtOGQyYy1kYWE2MDRmZTA5MDIvMC8wNkMwNzkxMDVB
OEE3RkI1M0M5NzM3MENERTYzNkIwQTIyNTg4NzQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDZDMDc5MTA1QThBN0ZCNTNDOTczNzBDREU2MzZCMEEyMjU4
ODc0Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg4Y2FjMTYxLWY4ODAtNDIwNi04
ZDJjLWRhYTYwNGZlMDkwMi8wLzMxMzAzMzJlMzEzMjM1MmUzMTMwMzQyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzgzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnfWgwDQYJ
KoZIhvcNAQELBQADggEBALKorV15/7hPxWsObFnKu+ErsLhhN6xt4PaqX8+Qlbym
YBm5FZcE2qWXxlcZLMKx6qxpsngH3+50avh8EzXbxud4k/PlejcXbk+8gj3xpsX8
w8GWNOyhYGwdkER5uicjO5rA2M2Z3iCOszRTXcMVmZt4lP1jPGIZkZjlYDO8YPDm
CbRRTt7xnAcrEyzRk84AMl4XldpGznQQnZHakZjouHjeNDItbI3t4cl3VPbZ8+cF
g4i6+mUFLOF1Ra+OQLHuLB6oMflZaXqKbjS69DG4bZINlQNHpVAS7uk5Jn5IQhSz
MzkEYRN8sYzWxlXftKGKXi9aic6SZlGXD0gXTym3lWs=
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:10:26 2025 by rpki-client