Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa
File: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (raw, json)
Hash identifier: V98kYcU8v569igqvltJ62ENZBRSZDERQept9pSJvYEE=
Subject key identifier: A2:B7:43:FE:E7:BE:5E:A5:B5:12:CC:11:35:EE:B6:4D:D7:D5:31:16
Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7
Certificate serial: 5045245B7F0F45F8477D4552F6B42831730A6E3D
Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa
Signing time: Sun 11 Aug 2024 23:49:35 +0000
ROA not before: Sun 11 Aug 2024 23:44:35 +0000
ROA not after: Sun 10 Aug 2025 23:49:35 +0000
asID: 151581
IP address blocks: 103.169.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:45:24:5b:7f:0f:45:f8:47:7d:45:52:f6:b4:28:31:73:0a:6e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7
Validity
Not Before: Aug 11 23:44:35 2024 GMT
Not After : Aug 10 23:49:35 2025 GMT
Subject: CN=A2B743FEE7BE5EA5B512CC1135EEB64DD7D53116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:40:93:77:17:70:ed:2f:cb:eb:1a:8b:ef:
61:3b:c1:b2:8c:2f:42:ef:15:21:63:58:ac:0b:06:
27:00:60:3b:77:33:b0:cd:6e:b2:39:82:34:24:ee:
1b:d2:8d:b4:02:c9:f6:cb:74:98:df:b2:f2:ba:82:
4b:4c:39:ab:45:7e:22:ac:0e:00:7f:d7:3a:09:22:
60:0e:dc:fe:05:2d:5e:d5:50:2f:11:92:3e:c3:fc:
8e:05:02:bd:2f:8b:d1:f1:96:1e:af:6d:5c:f7:c0:
58:17:ed:72:4a:d8:e5:87:9f:fd:80:55:19:5f:a5:
61:be:2d:12:c5:65:e4:c1:19:fb:c0:04:5e:05:ca:
78:32:7a:d8:5c:a3:65:5f:2b:fd:57:b7:c1:33:60:
c5:d4:9e:b8:a0:94:8e:c2:7d:a2:08:93:0b:02:76:
7b:79:65:bc:62:d4:ed:93:fb:f5:13:56:ab:fb:ff:
8d:3d:e6:a1:d9:25:f4:0c:4b:65:96:bb:5c:39:51:
3b:7f:35:49:4b:a0:77:b6:59:1f:78:17:fb:8f:a0:
ff:f5:36:3f:e3:7f:a8:14:71:d8:b4:0f:ab:4e:80:
7e:b9:58:2f:4c:3f:28:22:3e:d9:5f:5a:08:0b:a3:
43:f4:e3:a6:f7:ff:f9:f9:73:c6:b0:c9:4c:d9:a0:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B7:43:FE:E7:BE:5E:A5:B5:12:CC:11:35:EE:B6:4D:D7:D5:31:16
X509v3 Authority Key Identifier:
keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.143.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8a:30:16:ba:69:c5:9b:1c:72:2c:79:8e:8b:74:9c:a5:75:
78:b4:69:9a:1a:16:b7:e7:f2:6a:2d:6b:5a:f9:b6:6b:ca:4f:
53:2a:cd:c3:e1:98:a0:b3:df:fa:1b:b5:bd:ab:92:f1:23:97:
33:f0:f2:a9:11:8b:d8:3c:2f:24:a9:67:b8:45:0f:bd:e2:3b:
d9:71:dd:cb:7d:77:74:6b:51:12:4e:41:b5:05:bb:61:3b:c9:
b5:25:ef:d4:d9:06:56:38:0c:63:56:bb:23:fa:5b:48:a2:39:
39:86:e7:79:cc:97:37:85:2c:eb:79:18:e3:bd:8f:70:20:6f:
af:ae:67:c4:13:a2:f3:05:a0:cc:52:99:5e:c5:db:9a:ec:18:
78:6e:02:48:40:41:ca:e3:39:5c:55:06:f7:88:85:37:8c:a1:
02:a8:d6:93:89:f8:48:b5:9f:b2:32:5d:4a:bf:23:fc:9d:2d:
0f:6a:bc:49:bc:f3:c6:10:f1:1d:c1:95:aa:84:bb:97:a0:25:
f2:4d:e0:a8:90:be:9d:22:db:f5:e4:b2:8d:7f:c7:38:4e:71:
7e:f4:a7:e8:d2:da:82:8c:01:b6:20:db:e9:3b:f8:74:9f:9a:
17:ba:53:7e:38:be:4c:e9:fe:de:4a:7f:78:4d:be:e1:e8:3a:
8b:60:8e:6a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUUEUkW38PRfhHfUVS9rQoMXMKbj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC
QzA0MDRDNzAeFw0yNDA4MTEyMzQ0MzVaFw0yNTA4MTAyMzQ5MzVaMDMxMTAvBgNV
BAMTKEEyQjc0M0ZFRTdCRTVFQTVCNTEyQ0MxMTM1RUVCNjRERDdENTMxMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvECTdxdw7S/L6xqL72E7wbKM
L0LvFSFjWKwLBicAYDt3M7DNbrI5gjQk7hvSjbQCyfbLdJjfsvK6gktMOatFfiKs
DgB/1zoJImAO3P4FLV7VUC8Rkj7D/I4FAr0vi9Hxlh6vbVz3wFgX7XJK2OWHn/2A
VRlfpWG+LRLFZeTBGfvABF4Fyngyethco2VfK/1Xt8EzYMXUnriglI7CfaIIkwsC
dnt5Zbxi1O2T+/UTVqv7/4095qHZJfQMS2WWu1w5UTt/NUlLoHe2WR94F/uPoP/1
Nj/jf6gUcdi0D6tOgH65WC9MPygiPtlfWggLo0P046b3//n5c8awyUzZoF1pAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUordD/ue+XqW1EswRNe62TdfVMRYwHwYDVR0j
BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF
NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0
MDRDNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZGUxYThlLWMyYjgtNDk5Ni05
NDkyLTZmOTJjMmRmZWM3YS8wLzMxMzAzMzJlMzEzNjM5MmUzMTM0MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqY8wDQYJ
KoZIhvcNAQELBQADggEBAHGKMBa6acWbHHIseY6LdJyldXi0aZoaFrfn8mota1r5
tmvKT1MqzcPhmKCz3/obtb2rkvEjlzPw8qkRi9g8LySpZ7hFD73iO9lx3ct9d3Rr
URJOQbUFu2E7ybUl79TZBlY4DGNWuyP6W0iiOTmG53nMlzeFLOt5GOO9j3Agb6+u
Z8QTovMFoMxSmV7F25rsGHhuAkhAQcrjOVxVBveIhTeMoQKo1pOJ+Ei1n7IyXUq/
I/ydLQ9qvEm888YQ8R3BlaqEu5egJfJN4KiQvp0i2/Xkso1/xzhOcX70p+jS2oKM
AbYg2+k7+HSfmhe6U344vkzp/t5Kf3hNvuHoOotgjmo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:37 2025 by rpki-client