Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa
File: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (raw, json)
Hash identifier: g6SAQJJHWXzFVQgYOk15xgdtJmREERi+slGLqoyw75U=
Subject key identifier: 70:31:E9:00:36:A4:BF:07:C3:4D:0D:A4:F9:9C:72:BE:1C:E9:F5:5F
Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B
Certificate serial: 5BEF1CC19BBC987AA377F8EA3F447A1786550127
Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa
Signing time: Mon 13 May 2024 07:03:19 +0000
ROA not before: Mon 13 May 2024 06:58:19 +0000
ROA not after: Mon 12 May 2025 07:03:19 +0000
asID: 149716
IP address blocks: 103.186.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ef:1c:c1:9b:bc:98:7a:a3:77:f8:ea:3f:44:7a:17:86:55:01:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B
Validity
Not Before: May 13 06:58:19 2024 GMT
Not After : May 12 07:03:19 2025 GMT
Subject: CN=7031E90036A4BF07C34D0DA4F99C72BE1CE9F55F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:7c:2b:ff:b2:6c:14:05:a4:06:8d:39:15:
fc:1b:d4:b4:45:2f:ce:ae:01:65:a9:f2:a2:b8:be:
3c:5c:dd:46:0a:fb:17:e7:49:a7:89:60:29:08:3c:
a5:29:f3:08:92:93:de:b9:b0:e6:2e:79:ef:77:b7:
b5:9e:00:fc:47:c3:08:89:53:3e:f9:b8:9e:11:d6:
c3:91:50:67:cb:7c:b4:89:7c:93:ed:19:cb:dc:03:
91:76:6d:01:d8:8e:76:4b:19:b9:ed:01:77:18:95:
2f:2a:85:b6:3e:55:9e:ff:df:ea:df:a3:b0:62:1d:
36:16:93:92:3e:b9:47:8b:e8:5d:54:1b:39:e2:21:
31:a7:49:31:d2:cb:bb:12:62:c2:dd:5f:2d:d7:89:
b6:cd:39:18:aa:14:19:2e:e6:88:d7:6b:ff:0a:07:
1e:fd:c4:5f:0a:2a:c7:50:c3:67:40:55:f3:ed:cd:
0e:54:4e:2e:11:c7:dc:61:c3:eb:b6:c3:05:6c:0c:
bd:f2:62:a0:93:a7:2f:99:a5:44:f5:94:f8:1f:e2:
5c:66:5e:ec:66:02:35:4a:f2:d5:51:65:49:d0:d4:
98:ae:ef:d6:19:58:37:12:d5:2e:49:02:bf:72:5a:
e3:10:23:cf:30:13:6e:a1:89:ec:15:3d:e9:47:40:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:E9:00:36:A4:BF:07:C3:4D:0D:A4:F9:9C:72:BE:1C:E9:F5:5F
X509v3 Authority Key Identifier:
keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5b:9b:1f:42:b9:67:7b:88:53:a8:ad:8b:92:9c:00:74:84:
c9:22:19:d5:85:ad:96:b7:5c:27:61:e7:e3:bc:7a:39:c8:85:
e6:2c:64:f2:a3:75:a5:c9:19:72:95:4f:69:31:0b:62:15:18:
77:e0:a3:5d:65:16:33:83:5f:4c:c2:41:cb:89:ef:c2:57:83:
44:44:26:9a:9e:a5:a2:e3:c3:19:da:50:9d:fb:ab:2f:b2:64:
69:c4:cb:d5:a1:da:f8:ec:a1:7d:79:69:ae:55:ef:10:76:75:
39:72:24:81:29:14:65:0b:58:09:78:86:00:9e:d7:15:a6:f2:
6f:bc:79:7e:72:8f:2d:0c:1b:9d:68:bc:ae:4e:0a:13:c6:86:
1f:be:14:78:fc:5c:46:f4:a1:e7:54:26:bd:10:e9:5e:c5:e6:
d1:35:91:58:c5:29:c8:0c:43:41:db:f6:c5:32:09:e0:52:22:
4b:6e:73:c1:fb:d5:af:2e:ef:43:3c:29:99:86:ee:1f:5c:5c:
3c:1f:2a:52:9f:57:3c:da:d4:57:aa:b6:fa:38:51:90:21:a0:
b6:68:ba:9c:bb:d6:c2:10:62:32:92:75:5d:66:45:6e:df:90:
e1:82:4a:fc:59:e9:e9:9b:9a:d9:c7:a4:31:cb:9c:c2:59:c1:
27:35:eb:14
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUW+8cwZu8mHqjd/jqP0R6F4ZVAScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF
OEU4M0E3QjAeFw0yNDA1MTMwNjU4MTlaFw0yNTA1MTIwNzAzMTlaMDMxMTAvBgNV
BAMTKDcwMzFFOTAwMzZBNEJGMDdDMzREMERBNEY5OUM3MkJFMUNFOUY1NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEunwr/7JsFAWkBo05Ffwb1LRF
L86uAWWp8qK4vjxc3UYK+xfnSaeJYCkIPKUp8wiSk965sOYuee93t7WeAPxHwwiJ
Uz75uJ4R1sORUGfLfLSJfJPtGcvcA5F2bQHYjnZLGbntAXcYlS8qhbY+VZ7/3+rf
o7BiHTYWk5I+uUeL6F1UGzniITGnSTHSy7sSYsLdXy3XibbNORiqFBku5ojXa/8K
Bx79xF8KKsdQw2dAVfPtzQ5UTi4Rx9xhw+u2wwVsDL3yYqCTpy+ZpUT1lPgf4lxm
XuxmAjVK8tVRZUnQ1Jiu79YZWDcS1S5JAr9yWuMQI88wE26hiewVPelHQKXBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUcDHpADakvwfDTQ2k+Zxyvhzp9V8wHwYDVR0j
BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1
QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4
M0E3Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0ZGNlZjY1LTVkZTMtNDEyOS1h
YzI3LTc3MDZkNzI2NjAwMS8wLzMxMzAzMzJlMzEzODM2MmUzMjMxMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnutMwDQYJ
KoZIhvcNAQELBQADggEBAKNbmx9CuWd7iFOorYuSnAB0hMkiGdWFrZa3XCdh5+O8
ejnIheYsZPKjdaXJGXKVT2kxC2IVGHfgo11lFjODX0zCQcuJ78JXg0REJpqepaLj
wxnaUJ37qy+yZGnEy9Wh2vjsoX15aa5V7xB2dTlyJIEpFGULWAl4hgCe1xWm8m+8
eX5yjy0MG51ovK5OChPGhh++FHj8XEb0oedUJr0Q6V7F5tE1kVjFKcgMQ0Hb9sUy
CeBSIktuc8H71a8u70M8KZmG7h9cXDwfKlKfVzza1Feqtvo4UZAhoLZoupy71sIQ
YjKSdV1mRW7fkOGCSvxZ6embmtnHpDHLnMJZwSc16xQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:23 2025 by rpki-client