Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa
File: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (raw, json)
Hash identifier: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=
Subject key identifier: C2:D3:1E:09:CE:A2:B3:93:F4:71:8D:D1:E6:D5:33:73:2D:B7:39:35
Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994
Certificate serial: 4F82BA602B1882FFBC45EBD4180BAC85C0BED7A3
Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa
Signing time: Fri 01 Nov 2024 08:00:32 +0000
ROA not before: Fri 01 Nov 2024 07:55:32 +0000
ROA not after: Fri 31 Oct 2025 08:00:32 +0000
asID: 149333
IP address blocks: 103.179.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:82:ba:60:2b:18:82:ff:bc:45:eb:d4:18:0b:ac:85:c0:be:d7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994
Validity
Not Before: Nov 1 07:55:32 2024 GMT
Not After : Oct 31 08:00:32 2025 GMT
Subject: CN=C2D31E09CEA2B393F4718DD1E6D533732DB73935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:11:5d:0b:15:82:96:d4:47:67:12:63:a2:
4c:a9:80:14:11:96:40:a3:fa:94:ee:76:40:ff:03:
a4:97:59:15:71:a4:08:a3:c9:3f:da:92:c7:5f:56:
15:76:d6:2c:05:75:eb:3c:a6:db:65:1b:3d:8f:1d:
9c:f0:84:00:5b:67:5d:35:01:9e:ad:77:c2:22:74:
21:2e:00:88:bb:bf:15:8b:a8:f0:25:00:93:01:9c:
58:1b:90:5c:dc:7e:7f:03:af:15:35:15:eb:f5:4a:
7d:b9:f2:e8:f5:05:6b:e6:6d:ad:fc:71:36:f9:84:
ac:a4:5d:4e:5e:3f:2a:ee:d2:2e:f1:c8:46:1a:a7:
f8:c8:94:ad:43:ac:d4:c0:67:6f:49:36:fc:c7:b8:
d5:63:10:e0:6d:ec:c5:10:44:f7:7a:d4:f5:1c:7c:
81:80:03:1c:32:3d:6d:03:df:cb:84:02:78:02:9b:
06:bb:d9:18:da:1d:8b:09:74:d7:6e:c3:f8:d5:d8:
c9:f5:df:c1:a8:6c:b2:ea:2d:f6:26:87:21:96:e5:
ff:ac:15:25:ef:9f:fb:8a:02:0e:2e:d8:24:e4:3b:
a8:ad:de:5e:33:a8:ec:99:20:26:0d:86:e5:b9:5a:
c3:64:18:3b:96:2c:b5:50:06:a5:c6:bf:82:90:a4:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:1E:09:CE:A2:B3:93:F4:71:8D:D1:E6:D5:33:73:2D:B7:39:35
X509v3 Authority Key Identifier:
keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a4:59:69:e7:9c:ae:24:9f:6b:5c:f7:41:1d:37:86:6c:35:
fc:4f:29:5a:29:cf:d1:0d:03:a6:ae:60:cb:84:f6:70:7b:c6:
7a:83:64:b3:33:f2:1a:1c:82:a3:09:c5:18:bb:9a:89:f3:e2:
f1:98:23:2a:06:b3:ae:3d:78:29:47:21:1c:6a:98:07:81:7c:
be:99:c5:ce:38:26:fc:92:da:e5:46:7d:79:98:d8:13:da:04:
eb:e3:eb:75:ed:0f:cd:03:a6:b2:8d:da:fb:bf:1b:7d:7e:be:
20:ce:1f:83:78:41:61:28:31:20:5b:2a:52:78:a0:c1:07:51:
f4:0b:cd:7a:4d:b9:37:bc:d4:71:69:19:bb:9b:83:71:1c:ca:
2e:2f:8d:f5:3c:88:37:99:e9:12:d4:cb:96:96:49:b7:9d:14:
e8:8b:ba:a3:53:50:37:69:72:d1:e7:07:92:fb:87:5e:9a:e2:
2f:bc:28:86:af:69:74:fb:da:ba:bd:82:be:34:c1:6d:12:0c:
2d:18:96:85:0e:e4:cd:a2:58:a7:19:fa:c4:8a:f8:56:7f:79:
b6:21:c4:bc:3d:7f:99:0f:87:05:40:69:da:e7:24:3d:3c:51:
67:17:45:fc:4d:27:ae:62:8a:d3:30:9a:41:59:4a:33:80:ae:
0d:96:b0:15
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUT4K6YCsYgv+8RevUGAushcC+16MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz
RjkxMzk5NDAeFw0yNDExMDEwNzU1MzJaFw0yNTEwMzEwODAwMzJaMDMxMTAvBgNV
BAMTKEMyRDMxRTA5Q0VBMkIzOTNGNDcxOEREMUU2RDUzMzczMkRCNzM5MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJBFdCxWCltRHZxJjokypgBQR
lkCj+pTudkD/A6SXWRVxpAijyT/aksdfVhV21iwFdes8pttlGz2PHZzwhABbZ101
AZ6td8IidCEuAIi7vxWLqPAlAJMBnFgbkFzcfn8DrxU1Fev1Sn258uj1BWvmba38
cTb5hKykXU5ePyru0i7xyEYap/jIlK1DrNTAZ29JNvzHuNVjEOBt7MUQRPd61PUc
fIGAAxwyPW0D38uEAngCmwa72RjaHYsJdNduw/jV2Mn138GobLLqLfYmhyGW5f+s
FSXvn/uKAg4u2CTkO6it3l4zqOyZICYNhuW5WsNkGDuWLLVQBqXGv4KQpCZzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUwtMeCc6is5P0cY3R5tUzcy23OTUwHwYDVR0j
BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3
RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx
Mzk5NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5OGIzNTQ5LWUyNTMtNGZkOS1h
NzA0LTI5Njk0NGU1YTA2My8wLzMxMzAzMzJlMzEzNzM5MmUzMjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7MbMA0GCSqG
SIb3DQEBCwUAA4IBAQA9pFlp55yuJJ9rXPdBHTeGbDX8TylaKc/RDQOmrmDLhPZw
e8Z6g2SzM/IaHIKjCcUYu5qJ8+LxmCMqBrOuPXgpRyEcapgHgXy+mcXOOCb8ktrl
Rn15mNgT2gTr4+t17Q/NA6ayjdr7vxt9fr4gzh+DeEFhKDEgWypSeKDBB1H0C816
Tbk3vNRxaRm7m4NxHMouL431PIg3mekS1MuWlkm3nRToi7qjU1A3aXLR5weS+4de
muIvvCiGr2l0+9q6vYK+NMFtEgwtGJaFDuTNolinGfrEivhWf3m2IcS8PX+ZD4cF
QGna5yQ9PFFnF0X8TSeuYorTMJpBWUozgK4NlrAV
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:25 2025 by rpki-client