Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa
File: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier: r0TbBF8saS2mOL5XeCwhn4JCtsrTGBwfR9bmqMpX7uY=
Subject key identifier: A5:0B:3A:5D:E4:8F:39:F9:03:5A:D0:F5:B7:BF:82:2B:99:61:97:C9
Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
Certificate serial: 4887FBDEF37B204CD4DC4508880B47C1816597B2
Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa
Signing time: Thu 24 Oct 2024 08:01:17 +0000
ROA not before: Thu 24 Oct 2024 07:56:17 +0000
ROA not after: Thu 23 Oct 2025 08:01:17 +0000
asID: 135477
IP address blocks: 103.76.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:87:fb:de:f3:7b:20:4c:d4:dc:45:08:88:0b:47:c1:81:65:97:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
Validity
Not Before: Oct 24 07:56:17 2024 GMT
Not After : Oct 23 08:01:17 2025 GMT
Subject: CN=A50B3A5DE48F39F9035AD0F5B7BF822B996197C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:d3:96:b1:02:a0:df:68:71:07:8d:37:6b:
99:20:6b:c0:14:c4:18:f1:59:5c:b3:bb:08:00:18:
4a:de:f4:55:df:cd:3f:6b:b6:ad:47:d0:a7:49:37:
76:c7:7e:71:bd:d1:82:a1:a7:62:04:4f:83:5e:f5:
5a:7e:8d:cd:3c:94:02:df:a0:55:31:7a:ab:17:1f:
3d:0d:df:f8:1e:d2:58:ba:73:bb:26:42:86:87:78:
6f:d0:38:79:d7:0e:a7:0d:b1:30:6e:09:c1:f8:52:
f1:3d:04:65:9a:a2:45:0d:66:9c:20:8c:69:43:ac:
16:40:1c:8f:ea:b2:b9:7f:37:21:70:62:6a:9f:0c:
01:38:8c:12:33:1c:10:eb:b5:2d:2c:3a:fe:a3:e0:
ee:e0:88:61:e9:04:7f:64:24:8e:19:0d:96:14:45:
19:71:15:c8:3b:18:58:22:3f:93:87:c2:79:28:7e:
49:16:db:ab:be:39:9e:9d:a0:6f:65:af:68:cd:8a:
f8:d2:1d:94:96:75:88:d9:1c:56:41:34:b6:32:42:
94:58:5e:e5:4f:4b:e0:c7:dd:66:5e:fb:68:04:e3:
de:00:23:95:e8:31:d4:31:b1:58:ad:aa:d0:9b:17:
cc:be:8a:ff:c5:39:42:6c:55:da:0c:7b:6a:a3:42:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0B:3A:5D:E4:8F:39:F9:03:5A:D0:F5:B7:BF:82:2B:99:61:97:C9
X509v3 Authority Key Identifier:
keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.148.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c2:d4:ff:5e:53:64:48:22:fa:ab:98:6d:f3:55:dd:61:20:
e4:22:0e:e4:24:9c:11:b5:50:d4:04:75:fa:5f:22:23:5d:e1:
3f:50:2f:77:d6:02:ff:af:4f:1b:c6:15:09:b5:4c:d9:92:e0:
58:fc:5a:e8:e3:eb:8f:b3:e7:cf:3b:13:1b:37:b1:45:cb:af:
e6:7b:71:26:ff:d3:77:6f:e8:ac:72:d6:d5:24:00:e8:45:a3:
12:ec:be:db:e1:a0:ca:3d:14:1e:fd:c1:a9:df:6f:05:c7:5f:
85:07:1d:5c:01:02:c2:9a:9a:ab:0f:a8:31:a1:2e:43:af:ab:
4c:ab:bb:6f:9a:bb:72:b7:f1:30:9d:f7:bb:03:d5:39:5c:d1:
be:d0:af:74:97:a2:7d:9a:06:f8:b5:ce:41:d2:a3:de:a7:4e:
99:75:d3:2d:97:ed:64:17:38:1f:a1:33:88:a3:4c:e1:00:5b:
4b:23:9f:f2:00:fc:ec:69:32:8b:78:98:c0:74:f3:32:99:09:
52:62:82:d9:41:6b:76:29:37:50:cb:5a:d4:75:d1:74:90:2c:
89:1a:ac:07:7f:10:de:7c:47:51:e0:e2:6e:81:9d:46:d3:dc:
ee:49:66:5b:30:bd:ff:09:81:aa:4f:28:2d:d8:09:0f:49:ca:
ee:c7:53:54
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSIf73vN7IEzU3EUIiAtHwYFll7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5
Qjk0MTBFOTAeFw0yNDEwMjQwNzU2MTdaFw0yNTEwMjMwODAxMTdaMDMxMTAvBgNV
BAMTKEE1MEIzQTVERTQ4RjM5RjkwMzVBRDBGNUI3QkY4MjJCOTk2MTk3QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJdOWsQKg32hxB403a5kga8AU
xBjxWVyzuwgAGEre9FXfzT9rtq1H0KdJN3bHfnG90YKhp2IET4Ne9Vp+jc08lALf
oFUxeqsXHz0N3/ge0li6c7smQoaHeG/QOHnXDqcNsTBuCcH4UvE9BGWaokUNZpwg
jGlDrBZAHI/qsrl/NyFwYmqfDAE4jBIzHBDrtS0sOv6j4O7giGHpBH9kJI4ZDZYU
RRlxFcg7GFgiP5OHwnkofkkW26u+OZ6doG9lr2jNivjSHZSWdYjZHFZBNLYyQpRY
XuVPS+DH3WZe+2gE494AI5XoMdQxsVitqtCbF8y+iv/FOUJsVdoMe2qjQps3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUpQs6XeSPOfkDWtD1t7+CK5lhl8kwHwYDVR0j
BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4
RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0
MTBFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3ZmRmNDNlLTRhNGMtNGRiYy1i
Nzg1LWRkN2NiZjFhNjdiNy8wLzMxMzAzMzJlMzczNjJlMzEzNDM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0yUMA0GCSqG
SIb3DQEBCwUAA4IBAQAWwtT/XlNkSCL6q5ht81XdYSDkIg7kJJwRtVDUBHX6XyIj
XeE/UC931gL/r08bxhUJtUzZkuBY/Fro4+uPs+fPOxMbN7FFy6/me3Em/9N3b+is
ctbVJADoRaMS7L7b4aDKPRQe/cGp328Fx1+FBx1cAQLCmpqrD6gxoS5Dr6tMq7tv
mrtyt/Ewnfe7A9U5XNG+0K90l6J9mgb4tc5B0qPep06ZddMtl+1kFzgfoTOIo0zh
AFtLI5/yAPzsaTKLeJjAdPMymQlSYoLZQWt2KTdQy1rUddF0kCyJGqwHfxDefEdR
4OJugZ1G09zuSWZbML3/CYGqTygt2AkPScrux1NU
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:09 2025 by rpki-client