Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35322e302f32342d3234203d3e2039333431.roa
File: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: nSaffT2loCbCY4DbpP8GpLCrFZYYKh3bE+jC1cyDP9Y=
Subject key identifier: BA:B0:71:2C:3D:DE:9E:95:2F:EF:68:16:33:62:2E:46:B6:EA:BF:48
Certificate issuer: /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
Certificate serial: 3F308AEE835BA7DDCC0A681B72BFA8477C1679B3
Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35322e302f32342d3234203d3e2039333431.roa
Signing time: Tue 24 Sep 2024 17:00:01 +0000
ROA not before: Tue 24 Sep 2024 16:55:01 +0000
ROA not after: Tue 23 Sep 2025 17:00:01 +0000
asID: 9341
IP address blocks: 103.36.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:30:8a:ee:83:5b:a7:dd:cc:0a:68:1b:72:bf:a8:47:7c:16:79:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
Validity
Not Before: Sep 24 16:55:01 2024 GMT
Not After : Sep 23 17:00:01 2025 GMT
Subject: CN=BAB0712C3DDE9E952FEF681633622E46B6EABF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:d8:a6:d6:10:12:5a:1b:9f:ba:25:2a:a5:
e0:95:88:8e:ec:13:82:3e:d0:6e:59:e8:69:cb:3a:
07:cf:bc:1c:43:a5:eb:07:cd:48:d9:9c:0e:41:31:
57:86:f5:bc:4e:c4:83:12:92:88:d0:c6:a1:d8:a2:
ae:12:b0:3d:9d:5b:ef:0c:ce:75:33:ab:43:b4:a1:
3b:55:a1:b4:c0:33:f6:53:35:bd:17:a5:62:a5:43:
f6:99:6a:88:70:27:9d:27:4c:52:12:7d:0d:88:67:
d2:45:f5:0b:3b:75:64:a0:53:aa:ac:29:2c:dd:d9:
a9:ab:6b:ab:95:dd:87:2c:38:19:52:57:fa:a1:5f:
db:b6:90:e3:2e:e8:11:bd:20:5b:17:5f:e7:47:34:
39:62:72:78:a6:91:35:fe:dc:f1:5b:37:7e:66:da:
b6:68:ba:0d:62:e4:c1:cf:35:ca:0a:26:91:c0:9c:
96:e6:5e:cf:b0:7c:a6:16:82:eb:be:61:0f:04:71:
1a:9f:5c:4b:01:1c:d1:d8:25:0c:59:ad:79:44:3c:
a2:48:a0:41:12:70:4b:da:52:e2:58:4d:de:fb:ae:
da:6f:27:f6:8f:eb:81:2e:eb:1b:a8:5d:ea:63:ba:
06:d5:52:d7:d0:9b:38:70:eb:b2:4c:55:11:cc:f6:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B0:71:2C:3D:DE:9E:95:2F:EF:68:16:33:62:2E:46:B6:EA:BF:48
X509v3 Authority Key Identifier:
keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35322e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.36.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:03:43:a1:f5:63:63:0a:e3:13:5a:47:1e:42:fd:cc:c3:dd:
60:73:44:73:78:cf:42:88:a2:9f:cf:0f:4f:28:f2:3c:b7:7d:
45:3c:08:13:f3:4c:8f:db:93:01:50:73:21:3a:5e:b9:97:15:
d6:1e:a6:5c:2d:78:39:ad:3c:20:98:fc:c9:72:90:32:0c:d0:
e2:f7:55:b3:75:72:d4:5f:63:23:f3:24:bc:33:3d:05:ac:8b:
40:36:ad:7d:ed:aa:0f:dc:9b:1e:2e:c6:76:50:2b:fe:e0:47:
4e:aa:70:c8:d1:b5:2e:fa:18:6e:97:37:18:fc:a5:31:05:a7:
3e:d7:28:6b:44:84:80:9c:e8:85:04:f3:a3:3e:3e:32:22:8f:
e6:2c:2d:ab:32:09:01:32:b0:01:d9:12:d3:4d:6d:59:6d:12:
82:81:4b:b7:23:52:46:a8:79:1f:b0:e3:aa:03:a9:9e:2c:41:
ff:a5:49:56:df:e2:13:9f:4f:19:2a:11:2a:a2:fd:17:b0:6f:
d1:ee:79:ac:78:73:11:5e:a8:fd:f6:f7:f2:bc:b0:43:fc:ca:
d1:c0:b7:45:9d:35:f0:15:4e:54:cc:f7:85:99:e3:17:82:38:
2b:e3:7c:e9:65:40:12:78:f2:5f:0a:47:9d:26:75:a2:10:d8:
60:f3:90:cc
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUPzCK7oNbp93MCmgbcr+oR3wWebMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4
OUVFODE5QzAeFw0yNDA5MjQxNjU1MDFaFw0yNTA5MjMxNzAwMDFaMDMxMTAvBgNV
BAMTKEJBQjA3MTJDM0RERTlFOTUyRkVGNjgxNjMzNjIyRTQ2QjZFQUJGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd3Nim1hASWhufuiUqpeCViI7s
E4I+0G5Z6GnLOgfPvBxDpesHzUjZnA5BMVeG9bxOxIMSkojQxqHYoq4SsD2dW+8M
znUzq0O0oTtVobTAM/ZTNb0XpWKlQ/aZaohwJ50nTFISfQ2IZ9JF9Qs7dWSgU6qs
KSzd2amra6uV3YcsOBlSV/qhX9u2kOMu6BG9IFsXX+dHNDlicnimkTX+3PFbN35m
2rZoug1i5MHPNcoKJpHAnJbmXs+wfKYWguu+YQ8EcRqfXEsBHNHYJQxZrXlEPKJI
oEEScEvaUuJYTd77rtpvJ/aP64Eu6xuoXepjugbVUtfQmzhw67JMVRHM9jw1AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUurBxLD3enpUv72gWM2IuRrbqv0gwHwYDVR0j
BBgwFoAU3WjJjVGcyNYk9mSwJq65sonugZwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MDQzYTg4OS1jODYxLTRkMjktOWQ3Ny05MjNkOTI3ZTc2MzQvMC9ERDY4Qzk4RDUx
OUNDOEQ2MjRGNjY0QjAyNkFFQjlCMjg5RUU4MTlDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4OUVF
ODE5Qy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk
NzctOTIzZDkyN2U3NjM0LzAvMzEzMDMzMmUzMzM2MmUzNTMyMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnJDQwDQYJKoZIhvcNAQEL
BQADggEBALEDQ6H1Y2MK4xNaRx5C/czD3WBzRHN4z0KIop/PD08o8jy3fUU8CBPz
TI/bkwFQcyE6XrmXFdYeplwteDmtPCCY/MlykDIM0OL3VbN1ctRfYyPzJLwzPQWs
i0A2rX3tqg/cmx4uxnZQK/7gR06qcMjRtS76GG6XNxj8pTEFpz7XKGtEhICc6IUE
86M+PjIij+YsLasyCQEysAHZEtNNbVltEoKBS7cjUkaoeR+w46oDqZ4sQf+lSVbf
4hOfTxkqESqi/Rewb9Hueax4cxFeqP329/K8sEP8ytHAt0WdNfAVTlTM94WZ4xeC
OCvjfOllQBJ48l8KR50mdaIQ2GDzkMw=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:15:52 2025 by rpki-client