Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa
File: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (raw, json)
Hash identifier: AwcsJgH8zXeY69819ByBk5jmDVzIUHAAzMOf02IbJGM=
Subject key identifier: 31:DE:58:FD:DA:7C:07:9E:E9:F1:B0:CA:50:AA:FB:BB:F5:6A:DC:CE
Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588
Certificate serial: 7FE149E3309FFB9CC4EB82228597D05169172F52
Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa
Signing time: Mon 09 Sep 2024 16:00:00 +0000
ROA not before: Mon 09 Sep 2024 15:55:00 +0000
ROA not after: Mon 08 Sep 2025 16:00:00 +0000
asID: 150249
IP address blocks: 103.87.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e1:49:e3:30:9f:fb:9c:c4:eb:82:22:85:97:d0:51:69:17:2f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588
Validity
Not Before: Sep 9 15:55:00 2024 GMT
Not After : Sep 8 16:00:00 2025 GMT
Subject: CN=31DE58FDDA7C079EE9F1B0CA50AAFBBBF56ADCCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:fc:09:5b:fa:b1:3a:f8:58:5e:fc:df:78:
54:0a:20:dc:c1:75:6b:cd:ef:17:ee:f9:be:52:b4:
5b:fb:cb:2b:be:3d:8b:b3:6f:81:26:15:d7:d6:60:
1f:af:97:6c:6c:3a:34:f8:0c:84:4e:50:83:49:c4:
c4:7d:0e:c3:5f:10:e4:b9:da:03:49:22:ae:14:18:
b9:97:39:8b:be:99:81:92:e2:36:40:ca:ee:3f:ad:
5c:7f:bd:57:8e:f1:8a:10:be:29:67:eb:fa:f7:f8:
eb:3c:1c:2b:5c:2b:5f:6a:6e:14:24:8f:04:32:64:
6f:ec:88:e5:29:a8:32:18:07:19:3d:4c:40:f1:eb:
fb:2c:01:2e:bf:40:a6:15:37:ea:f0:f2:e2:7a:19:
38:b5:b7:06:e8:0b:22:f6:1f:e1:d6:6c:ca:c5:07:
48:ef:cf:2a:f3:42:07:de:c7:08:6f:53:94:26:54:
8e:07:1d:f1:d3:8e:47:b4:94:e2:5a:b1:85:6c:e4:
a8:26:7a:64:af:90:1a:bb:56:29:b3:09:79:52:43:
f5:8f:2b:35:8d:2a:b0:a2:28:32:95:df:2c:de:8e:
55:5a:44:72:99:37:33:bf:54:1d:2c:98:8f:1c:ce:
a4:31:21:da:c4:d0:48:ca:d6:ed:76:de:95:5b:2d:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DE:58:FD:DA:7C:07:9E:E9:F1:B0:CA:50:AA:FB:BB:F5:6A:DC:CE
X509v3 Authority Key Identifier:
keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/3130332e38372e36382e302f32342d3234203d3e20313530323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.68.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e5:5f:ff:2b:f4:c1:e1:dc:cc:70:b0:19:85:54:80:1f:c1:
75:55:12:57:ab:6a:ab:ba:fb:32:fa:b8:5d:d4:16:57:0c:91:
d8:7f:68:19:da:b3:72:e6:db:b2:7a:bd:ec:63:65:dc:ae:d9:
30:5b:b0:d4:c4:90:be:c6:68:e1:f3:0a:82:23:51:d0:6d:cd:
64:d4:41:40:b4:5b:59:35:fb:0e:f2:c3:e4:47:1b:a7:88:ed:
1d:1d:d1:c4:fe:04:04:51:b8:11:ea:de:61:75:29:7e:db:19:
8e:58:28:b4:22:13:8f:52:05:f0:94:38:22:ac:4b:39:44:82:
5e:ef:50:c3:eb:5d:52:d8:2c:b9:2f:08:d2:b2:88:26:f0:19:
ce:2e:0d:33:24:73:05:12:f4:e3:f9:27:6b:75:d0:f3:10:57:
51:62:9c:ca:1d:33:88:e0:14:57:e1:90:7b:cf:b3:2e:6d:8b:
7e:99:ef:8b:f5:35:e0:ce:bd:c9:2d:e6:ba:00:db:a9:9f:84:
a1:8e:66:f8:4c:55:f8:39:af:a9:dc:3b:43:1a:fe:f5:35:81:
05:1a:57:75:16:90:da:28:70:4f:03:51:07:db:cc:ed:ec:7a:
0b:ee:11:6f:f0:eb:f5:f0:81:f9:d9:7d:80:ec:5a:dd:93:96:
91:43:13:98
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUf+FJ4zCf+5zE64IihZfQUWkXL1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx
MkY4QzU4ODAeFw0yNDA5MDkxNTU1MDBaFw0yNTA5MDgxNjAwMDBaMDMxMTAvBgNV
BAMTKDMxREU1OEZEREE3QzA3OUVFOUYxQjBDQTUwQUFGQkJCRjU2QURDQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UfwJW/qxOvhYXvzfeFQKINzB
dWvN7xfu+b5StFv7yyu+PYuzb4EmFdfWYB+vl2xsOjT4DIROUINJxMR9DsNfEOS5
2gNJIq4UGLmXOYu+mYGS4jZAyu4/rVx/vVeO8YoQviln6/r3+Os8HCtcK19qbhQk
jwQyZG/siOUpqDIYBxk9TEDx6/ssAS6/QKYVN+rw8uJ6GTi1twboCyL2H+HWbMrF
B0jvzyrzQgfexwhvU5QmVI4HHfHTjke0lOJasYVs5KgmemSvkBq7VimzCXlSQ/WP
KzWNKrCiKDKV3yzejlVaRHKZNzO/VB0smI8czqQxIdrE0EjK1u123pVbLa7lAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUMd5Y/dp8B57p8bDKUKr7u/Vq3M4wHwYDVR0j
BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz
N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4
QzU4OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzOWM1NDg0LTJlMzctNDhmOS04
ZWJhLTBhZjRlZjYyOTQ3ZC8wLzMxMzAzMzJlMzgzNzJlMzYzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdXRDANBgkqhkiG
9w0BAQsFAAOCAQEAr+Vf/yv0weHczHCwGYVUgB/BdVUSV6tqq7r7Mvq4XdQWVwyR
2H9oGdqzcubbsnq97GNl3K7ZMFuw1MSQvsZo4fMKgiNR0G3NZNRBQLRbWTX7DvLD
5Ecbp4jtHR3RxP4EBFG4EereYXUpftsZjlgotCITj1IF8JQ4IqxLOUSCXu9Qw+td
UtgsuS8I0rKIJvAZzi4NMyRzBRL04/kna3XQ8xBXUWKcyh0ziOAUV+GQe8+zLm2L
fpnvi/U14M69yS3mugDbqZ+EoY5m+ExV+Dmvqdw7Qxr+9TWBBRpXdRaQ2ihwTwNR
B9vM7ex6C+4Rb/Dr9fCB+dl9gOxa3ZOWkUMTmA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:17 2025 by rpki-client