Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37382e302f32342d3234203d3e20313336313331.roa
File: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (raw, json)
Hash identifier: JoMXwC0dl3+S/2E+/jkIyxH9CRGDeNV8xtqQzeR7S9E=
Subject key identifier: 2E:6D:2F:F1:9C:3B:DE:ED:8B:4A:84:A4:10:86:D0:0F:24:DF:CC:85
Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Certificate serial: 4439BA76A428DAD341FE50DEEBB729D68C9CAB4B
Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37382e302f32342d3234203d3e20313336313331.roa
Signing time: Mon 08 Jul 2024 09:26:25 +0000
ROA not before: Mon 08 Jul 2024 09:21:25 +0000
ROA not after: Mon 07 Jul 2025 09:26:25 +0000
asID: 136131
IP address blocks: 103.97.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:39:ba:76:a4:28:da:d3:41:fe:50:de:eb:b7:29:d6:8c:9c:ab:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Validity
Not Before: Jul 8 09:21:25 2024 GMT
Not After : Jul 7 09:26:25 2025 GMT
Subject: CN=2E6D2FF19C3BDEED8B4A84A41086D00F24DFCC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:08:19:60:db:28:0c:f2:16:24:86:fd:22:
2c:60:7c:2d:14:33:12:53:80:4f:9b:5c:0e:97:d7:
40:97:7b:f0:7e:91:6a:3c:c5:f6:cf:25:13:86:e9:
98:a2:f9:05:d9:43:e2:cb:a8:41:fe:2a:f2:bc:40:
91:13:cb:ab:79:03:8f:dd:4d:80:3d:a7:f6:85:4a:
c3:a6:09:64:f8:79:18:d9:2e:83:fe:04:d1:45:a1:
e7:3b:07:4e:46:17:7e:dd:6e:4d:9c:e4:7e:ab:b9:
64:79:00:9e:6a:e6:57:a0:e3:dc:d4:2f:ed:55:24:
57:02:2c:17:50:db:e5:d6:a3:4c:a8:cf:1a:1e:ca:
fa:6d:24:9d:88:72:27:79:6d:be:5e:e0:c2:ee:0c:
7a:c6:60:2e:a2:83:90:67:b4:f1:7e:52:0c:9c:e2:
65:55:eb:34:57:8b:2c:90:b1:c7:94:8b:51:32:6e:
f2:91:2f:62:8f:84:2f:7f:5e:e3:3b:89:f2:e2:44:
1d:d3:8c:70:fd:0c:71:d8:f5:c2:d9:d1:2a:a0:d7:
92:a0:e7:81:1e:74:ac:8f:04:ab:f8:e2:f6:ac:db:
4a:fa:e3:4d:c5:6b:53:84:22:ab:3c:75:37:00:e7:
a1:c7:b0:a1:42:8d:ba:66:08:fe:65:3f:65:6e:c4:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6D:2F:F1:9C:3B:DE:ED:8B:4A:84:A4:10:86:D0:0F:24:DF:CC:85
X509v3 Authority Key Identifier:
keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37382e302f32342d3234203d3e20313336313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:74:5d:d5:3e:f9:56:24:d2:09:78:4f:cd:f3:99:7d:f7:bb:
8e:4c:27:8b:74:3b:2a:c1:e0:ad:aa:12:c9:65:c7:59:22:b3:
b0:fb:a1:da:1a:3d:1f:0f:87:0d:a2:85:68:be:4b:af:5f:74:
04:25:f8:10:59:a6:24:ed:46:c1:68:b2:50:7b:28:98:70:14:
a1:98:78:2f:7b:8d:75:fe:70:51:46:4a:8c:bb:59:e5:8c:9f:
f0:59:d1:64:96:60:d1:c3:88:80:3b:84:4a:3a:f3:6e:f3:b1:
b7:21:96:94:cc:dc:88:30:71:d6:df:9b:67:6f:8a:48:83:ad:
de:6f:13:f0:10:98:25:73:d1:4f:ea:e4:5e:9e:02:25:a1:4f:
b3:68:a8:ea:22:50:b3:49:f6:b2:da:1d:f1:96:32:17:b2:b2:
2b:c9:29:eb:3c:06:ff:4e:5d:d0:81:e0:06:31:aa:a0:9d:56:
25:db:37:65:70:c0:5a:ea:19:82:3d:3d:ae:35:7e:da:e4:1e:
10:f5:50:e9:e4:1a:ef:a3:6c:18:29:e1:a5:4e:93:d4:68:8c:
f1:df:25:76:da:3b:6f:ba:91:e7:54:45:b1:63:26:60:cc:29:
cc:ce:b3:5a:b6:33:93:19:73:3b:17:e7:bb:33:23:5d:89:8a:
9d:5a:b9:a7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURDm6dqQo2tNB/lDe67cp1oycq0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC
QUI5M0Y2NzAeFw0yNDA3MDgwOTIxMjVaFw0yNTA3MDcwOTI2MjVaMDMxMTAvBgNV
BAMTKDJFNkQyRkYxOUMzQkRFRUQ4QjRBODRBNDEwODZEMDBGMjRERkNDODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHQgZYNsoDPIWJIb9IixgfC0U
MxJTgE+bXA6X10CXe/B+kWo8xfbPJROG6Zii+QXZQ+LLqEH+KvK8QJETy6t5A4/d
TYA9p/aFSsOmCWT4eRjZLoP+BNFFoec7B05GF37dbk2c5H6ruWR5AJ5q5leg49zU
L+1VJFcCLBdQ2+XWo0yozxoeyvptJJ2Icid5bb5e4MLuDHrGYC6ig5BntPF+Ugyc
4mVV6zRXiyyQsceUi1EybvKRL2KPhC9/XuM7ifLiRB3TjHD9DHHY9cLZ0Sqg15Kg
54EedKyPBKv44vas20r6403Fa1OEIqs8dTcA56HHsKFCjbpmCP5lP2VuxMB7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQULm0v8Zw73u2LSoSkEIbQDyTfzIUwHwYDVR0j
BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG
QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5
M0Y2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdlLWVhZGUtNDMxOC1h
YjIwLThjN2YyZDViZTY5Zi8wLzMxMzAzMzJlMzkzNzJlMzczODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdhTjANBgkqhkiG
9w0BAQsFAAOCAQEAjHRd1T75ViTSCXhPzfOZffe7jkwni3Q7KsHgraoSyWXHWSKz
sPuh2ho9Hw+HDaKFaL5Lr190BCX4EFmmJO1GwWiyUHsomHAUoZh4L3uNdf5wUUZK
jLtZ5Yyf8FnRZJZg0cOIgDuESjrzbvOxtyGWlMzciDBx1t+bZ2+KSIOt3m8T8BCY
JXPRT+rkXp4CJaFPs2io6iJQs0n2stod8ZYyF7KyK8kp6zwG/05d0IHgBjGqoJ1W
Jds3ZXDAWuoZgj09rjV+2uQeEPVQ6eQa76NsGCnhpU6T1GiM8d8ldto7b7qR51RF
sWMmYMwpzM6zWrYzkxlzOxfnuzMjXYmKnVq5pw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:34 2025 by rpki-client