Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32332d3233203d3e203633383732.roa
File: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (raw, json)
Hash identifier: z2+zxRk+wf+jCSmrNsYyUGK/oYQNa8ev2JDVJrHXjrA=
Subject key identifier: 3F:BE:6A:06:F0:01:11:E5:9A:FF:7A:FE:F4:9D:3B:8D:CC:69:A3:D4
Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial: 36840B24131F28ABAB409F84BD7FD4D8691CE020
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32332d3233203d3e203633383732.roa
Signing time: Mon 01 Jul 2024 01:05:51 +0000
ROA not before: Mon 01 Jul 2024 01:00:51 +0000
ROA not after: Mon 30 Jun 2025 01:05:51 +0000
asID: 63872
IP address blocks: 103.52.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:84:0b:24:13:1f:28:ab:ab:40:9f:84:bd:7f:d4:d8:69:1c:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Validity
Not Before: Jul 1 01:00:51 2024 GMT
Not After : Jun 30 01:05:51 2025 GMT
Subject: CN=3FBE6A06F00111E59AFF7AFEF49D3B8DCC69A3D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:7d:34:c5:ca:6a:d6:84:09:44:99:44:38:
c7:cd:17:26:c2:61:aa:b7:54:dc:93:de:5f:d8:7f:
f2:d3:2f:17:72:4e:4d:a9:97:48:01:d1:55:6d:f4:
97:00:e5:2d:d7:b2:01:26:6f:f5:36:5e:94:92:23:
66:7a:25:fe:b1:19:ab:03:22:d5:6f:cb:c2:6f:42:
c0:a3:a9:8c:52:87:a7:6a:e8:f4:a5:b9:1b:3e:38:
0f:bf:76:32:40:e9:a5:fa:6a:e7:03:b7:c0:41:b5:
c1:f8:27:d0:8c:8f:32:a9:c6:8e:6e:4f:33:42:91:
0e:ca:7d:da:2b:0a:86:c2:e8:c7:35:93:cb:34:b1:
c7:a8:b5:4c:17:cb:68:b7:40:fa:e5:51:03:81:8b:
e0:ff:50:3a:70:d9:44:f4:15:7a:e1:ac:39:34:19:
34:8c:89:46:c5:bc:ae:c8:80:e6:47:7f:a6:2e:4a:
5c:39:6c:06:00:04:f1:48:1f:d8:b6:6b:b2:f8:e2:
42:26:25:26:48:53:38:9d:a6:9a:e5:be:51:b3:92:
52:c0:f6:07:d9:cf:a4:26:10:04:7d:6b:26:66:a0:
52:35:30:3e:c1:06:53:53:1f:38:42:d0:ce:7a:d2:
33:9f:0c:5f:69:dc:de:85:cc:b7:0e:98:6b:aa:68:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:6A:06:F0:01:11:E5:9A:FF:7A:FE:F4:9D:3B:8D:CC:69:A3:D4
X509v3 Authority Key Identifier:
keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32332d3233203d3e203633383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.52.170.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:b2:90:4a:b6:57:8b:4d:7f:97:5c:c4:40:dd:07:78:f1:a5:
fa:2b:92:b2:d1:49:ee:49:b7:50:96:f8:8f:31:5a:3e:df:80:
fb:15:03:b1:c5:65:98:c0:be:c1:d1:fe:95:35:16:7f:3a:79:
a7:82:20:4d:80:ac:99:90:a3:a3:23:59:81:cf:7c:20:68:8b:
5c:da:4e:f9:52:df:de:a5:12:71:87:3f:59:cf:17:16:0b:77:
11:69:db:01:ed:3f:93:47:92:a7:29:1d:e5:3e:28:c8:8f:b7:
c6:7a:78:6e:e8:97:a2:76:67:fb:35:92:e8:fd:4f:e7:1b:d8:
78:f0:c1:69:ba:cd:7c:fd:7b:0f:dd:ae:58:3e:43:d2:90:92:
28:d1:c4:83:ab:84:86:11:2e:e5:1b:12:b6:2d:fa:2e:1a:25:
22:c0:d7:9f:29:66:80:5d:65:2e:f2:bf:49:d3:8d:b8:8a:c5:
52:1c:4f:a9:97:dd:76:7e:0f:b4:06:5a:a7:0d:50:d8:55:fa:
00:08:8f:7a:58:fe:66:cc:dd:b2:88:bc:00:97:bb:19:00:2b:
01:9e:57:7d:94:d9:2e:df:77:ab:84:df:27:10:7a:07:e6:ec:
fe:00:2a:f1:87:f1:64:31:2e:18:23:65:7b:8d:fd:05:c4:2c:
ec:f6:15:a7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNoQLJBMfKKurQJ+EvX/U2Gkc4CAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy
N0JFN0IxOTAeFw0yNDA3MDEwMTAwNTFaFw0yNTA2MzAwMTA1NTFaMDMxMTAvBgNV
BAMTKDNGQkU2QTA2RjAwMTExRTU5QUZGN0FGRUY0OUQzQjhEQ0M2OUEzRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2H00xcpq1oQJRJlEOMfNFybC
Yaq3VNyT3l/Yf/LTLxdyTk2pl0gB0VVt9JcA5S3XsgEmb/U2XpSSI2Z6Jf6xGasD
ItVvy8JvQsCjqYxSh6dq6PSluRs+OA+/djJA6aX6aucDt8BBtcH4J9CMjzKpxo5u
TzNCkQ7KfdorCobC6Mc1k8s0sceotUwXy2i3QPrlUQOBi+D/UDpw2UT0FXrhrDk0
GTSMiUbFvK7IgOZHf6YuSlw5bAYABPFIH9i2a7L44kImJSZIUzidpprlvlGzklLA
9gfZz6QmEAR9ayZmoFI1MD7BBlNTHzhC0M560jOfDF9p3N6FzLcOmGuqaBKPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUP75qBvABEeWa/3r+9J07jcxpo9QwHwYDVR0j
BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE
QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF
N0IxOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2YmIzMzNjLTk4MmItNGZjZS1h
YzgxLWJjMDY5MjI5ZTI0My8wLzMxMzAzMzJlMzUzMjJlMzEzNzMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzYzMzM4MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc0qjANBgkqhkiG
9w0BAQsFAAOCAQEAPrKQSrZXi01/l1zEQN0HePGl+iuSstFJ7km3UJb4jzFaPt+A
+xUDscVlmMC+wdH+lTUWfzp5p4IgTYCsmZCjoyNZgc98IGiLXNpO+VLf3qUScYc/
Wc8XFgt3EWnbAe0/k0eSpykd5T4oyI+3xnp4buiXonZn+zWS6P1P5xvYePDBabrN
fP17D92uWD5D0pCSKNHEg6uEhhEu5RsSti36LholIsDXnylmgF1lLvK/SdONuIrF
UhxPqZfddn4PtAZapw1Q2FX6AAiPelj+Zszdsoi8AJe7GQArAZ5XfZTZLt93q4Tf
JxB6B+bs/gAq8YfxZDEuGCNle439BcQs7PYVpw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:28 2025 by rpki-client