Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33382e302f32342d3234203d3e203338353030.roa
File: 3130332e3234342e33382e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier: HP8cAO1Y1V/3QSDDjMm70Q9sc22XjILTjKRvN4TIkFk=
Subject key identifier: 7C:48:2C:E4:57:2B:9C:30:DA:DE:94:8B:74:AE:4A:7B:D2:F2:F2:12
Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial: 5DE6DB92DFE8934D06525ACDCE95D0DDFE169866
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33382e302f32342d3234203d3e203338353030.roa
Signing time: Mon 01 Jul 2024 01:04:46 +0000
ROA not before: Mon 01 Jul 2024 00:59:46 +0000
ROA not after: Mon 30 Jun 2025 01:04:46 +0000
asID: 38500
IP address blocks: 103.244.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e6:db:92:df:e8:93:4d:06:52:5a:cd:ce:95:d0:dd:fe:16:98:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Validity
Not Before: Jul 1 00:59:46 2024 GMT
Not After : Jun 30 01:04:46 2025 GMT
Subject: CN=7C482CE4572B9C30DADE948B74AE4A7BD2F2F212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:2b:a1:82:73:27:2d:fe:b2:ad:be:24:4c:
2d:d9:60:23:27:6d:81:6d:e6:b2:ff:91:95:65:1c:
e8:16:21:80:8d:3d:f8:fb:78:a1:81:54:3f:87:d0:
29:5f:7b:0e:1b:68:f0:8f:d5:dd:aa:39:ff:ec:0d:
7e:a0:11:13:f9:33:15:4d:e9:de:d3:9e:02:78:8f:
2b:b1:68:7c:3a:07:05:b2:6a:2e:39:46:59:f2:89:
2b:d5:cb:8b:e3:f4:7a:47:97:07:67:50:56:ce:f3:
45:1a:02:e7:2e:a3:cf:5a:79:32:f6:d8:ec:53:fb:
9f:5e:c6:1a:30:9f:85:f2:0d:fe:a3:b7:52:7c:aa:
41:34:fc:2c:93:76:00:16:53:01:85:0a:b2:0c:2f:
1a:b5:22:74:f6:4c:99:92:6c:ee:70:b0:db:97:c7:
86:07:5a:58:d6:ac:ae:9b:50:12:3b:41:0a:69:8e:
2f:2c:9e:ae:a6:83:3d:24:93:66:ff:dc:7b:04:c4:
44:9e:a1:57:83:d1:21:a5:82:51:9f:50:56:39:96:
53:8d:6c:55:20:39:4d:22:df:fb:56:bf:42:b7:5b:
ee:c2:3d:52:73:ba:35:02:af:53:39:fd:14:8f:ad:
ff:00:2c:19:af:bd:51:ac:d7:3e:2d:bf:71:b7:72:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:48:2C:E4:57:2B:9C:30:DA:DE:94:8B:74:AE:4A:7B:D2:F2:F2:12
X509v3 Authority Key Identifier:
keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33382e302f32342d3234203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1e:a5:fb:0b:9d:72:23:90:9e:e6:ed:65:31:7e:69:bc:44:
dd:27:b1:d2:e2:78:d3:89:9c:07:90:d5:55:51:7c:f9:a3:5b:
db:81:97:eb:4a:8a:1e:a4:24:05:19:98:e1:5d:56:60:2f:4c:
12:37:3d:9a:1b:82:b5:2c:86:b0:97:19:51:59:78:20:e4:79:
c2:01:dc:5d:5c:eb:31:da:a8:e3:31:51:b0:c9:21:0f:b0:45:
fd:aa:e1:4a:55:8d:5b:69:5b:b7:2a:23:fc:f3:78:91:45:05:
07:32:e1:d3:a2:b7:05:d1:de:68:e6:e0:be:cf:86:3c:54:cf:
d8:dc:9d:3b:c9:d0:1d:1d:f5:d2:cd:b3:7c:81:d5:ca:07:75:
ae:b3:4e:d7:0a:ea:df:72:ff:b9:63:d8:86:04:e3:bc:65:c4:
73:ae:bb:ce:58:fa:75:04:95:7d:61:fd:43:93:f5:46:76:69:
84:04:65:c1:a6:08:ef:1c:21:9d:e6:fa:15:78:f0:e2:b5:22:
b3:0b:28:c0:62:0a:21:75:97:59:ce:23:9d:8a:a2:4d:59:e5:
cb:61:da:a7:5b:5a:b4:c9:3a:0a:33:56:12:f1:72:df:7f:78:
5c:a5:82:64:ee:c5:f3:30:f9:6f:0e:98:b0:08:ef:cd:51:5a:
1a:3b:87:45
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXebbkt/ok00GUlrNzpXQ3f4WmGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVD
RTFEQjFEMDAeFw0yNDA3MDEwMDU5NDZaFw0yNTA2MzAwMTA0NDZaMDMxMTAvBgNV
BAMTKDdDNDgyQ0U0NTcyQjlDMzBEQURFOTQ4Qjc0QUU0QTdCRDJGMkYyMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdSuhgnMnLf6yrb4kTC3ZYCMn
bYFt5rL/kZVlHOgWIYCNPfj7eKGBVD+H0Clfew4baPCP1d2qOf/sDX6gERP5MxVN
6d7TngJ4jyuxaHw6BwWyai45RlnyiSvVy4vj9HpHlwdnUFbO80UaAucuo89aeTL2
2OxT+59exhown4XyDf6jt1J8qkE0/CyTdgAWUwGFCrIMLxq1InT2TJmSbO5wsNuX
x4YHWljWrK6bUBI7QQppji8snq6mgz0kk2b/3HsExESeoVeD0SGlglGfUFY5llON
bFUgOU0i3/tWv0K3W+7CPVJzujUCr1M5/RSPrf8ALBmvvVGs1z4tv3G3cu8hAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUfEgs5FcrnDDa3pSLdK5Ke9Ly8hIwHwYDVR0j
BBgwFoAUuwUpPT6dzQ9K2SYQDBkYhc4dsdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MDQwNjhmMy1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9CQjA1MjkzRDNF
OURDRDBGNEFEOTI2MTAwQzE5MTg4NUNFMURCMUQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVDRTFE
QjFEMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzAzMzJlMzIzNDM0MmUzMzM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf0JjANBgkqhkiG
9w0BAQsFAAOCAQEAHx6l+wudciOQnubtZTF+abxE3Sex0uJ404mcB5DVVVF8+aNb
24GX60qKHqQkBRmY4V1WYC9MEjc9mhuCtSyGsJcZUVl4IOR5wgHcXVzrMdqo4zFR
sMkhD7BF/arhSlWNW2lbtyoj/PN4kUUFBzLh06K3BdHeaObgvs+GPFTP2NydO8nQ
HR310s2zfIHVygd1rrNO1wrq33L/uWPYhgTjvGXEc667zlj6dQSVfWH9Q5P1RnZp
hARlwaYI7xwhneb6FXjw4rUiswsowGIKIXWXWc4jnYqiTVnly2Hap1tatMk6CjNW
EvFy3394XKWCZO7F8zD5bw6YsAjvzVFaGjuHRQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:02:46 2025 by rpki-client