Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa
File: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (raw, json)
Hash identifier: 5F95RZDK27mvn3dTD3C5hpwLTOCgLX1sE5sqanqe6xQ=
Subject key identifier: 77:CA:BE:CB:C4:05:DC:39:6A:73:D9:6F:F1:03:EA:49:EC:81:AF:BC
Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A
Certificate serial: 5A669D5E15159F30EA558B1113041C2E343ECEB7
Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa
Signing time: Wed 29 May 2024 02:00:01 +0000
ROA not before: Wed 29 May 2024 01:55:01 +0000
ROA not after: Wed 28 May 2025 02:00:01 +0000
asID: 150961
IP address blocks: 103.230.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:66:9d:5e:15:15:9f:30:ea:55:8b:11:13:04:1c:2e:34:3e:ce:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A
Validity
Not Before: May 29 01:55:01 2024 GMT
Not After : May 28 02:00:01 2025 GMT
Subject: CN=77CABECBC405DC396A73D96FF103EA49EC81AFBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:9f:98:1b:4c:54:44:e0:c1:be:5d:41:4d:
bf:26:8b:12:24:d9:22:cd:df:59:64:f0:e5:40:50:
28:4c:fd:4a:aa:b8:52:70:e8:dd:6d:59:ac:fd:e2:
98:16:37:e7:50:b7:fa:5a:b3:c5:00:3a:c7:7b:0c:
96:95:1b:31:db:62:db:f1:92:b3:7c:85:dd:df:df:
f0:34:04:10:b0:d7:cc:04:82:14:d2:40:04:05:fe:
ce:d4:f8:6c:c2:f7:61:67:76:35:76:c3:a9:fe:d7:
a0:57:76:8c:06:73:7b:75:2d:7a:b9:8f:8a:3e:49:
cc:2b:f5:da:52:bb:00:de:cc:02:5e:bb:89:8e:6f:
9d:a0:0d:b7:2e:3f:03:fd:2e:aa:07:bc:b8:ce:2f:
ca:af:de:00:1c:a4:07:d0:4b:2e:42:73:da:96:7f:
32:14:66:54:91:a4:8f:fa:bb:c4:90:36:4a:bc:61:
af:e7:a6:b0:73:f9:f0:fb:6f:1a:f1:f1:12:b4:21:
a7:4b:19:7b:30:39:53:eb:d8:ea:11:01:b1:b1:e2:
a7:eb:3b:a5:da:60:85:9b:3a:4c:9f:59:a0:b1:2a:
3d:72:a7:77:f2:e7:f3:e9:4c:a5:11:48:99:e7:c2:
65:68:06:4e:d9:54:93:55:4b:7f:93:c7:6e:03:2a:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CA:BE:CB:C4:05:DC:39:6A:73:D9:6F:F1:03:EA:49:EC:81:AF:BC
X509v3 Authority Key Identifier:
keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.81.0/24
Signature Algorithm: sha256WithRSAEncryption
97:42:3d:8d:06:5b:98:49:5b:6d:af:60:12:8e:2a:51:19:4d:
26:23:07:98:3e:2c:bc:1b:fe:0b:cc:43:c4:75:02:b4:fc:8b:
7f:d0:21:f4:b2:69:18:70:35:25:f2:47:2b:00:1a:c7:84:91:
10:cb:e9:53:f0:a3:4d:b0:fd:c3:ab:6e:d7:be:b6:d2:9f:d2:
80:ea:79:20:43:99:16:65:4e:37:df:e3:c6:44:56:93:e9:6c:
f7:dc:43:50:af:bd:e6:25:b4:c3:2e:57:1b:ef:be:2d:f3:84:
cd:a8:31:8b:42:da:87:3f:51:2c:6e:3b:5b:06:89:0a:0d:0b:
e7:ba:c4:90:44:09:d7:14:1e:7c:dc:c8:f6:f6:81:2c:99:39:
02:88:93:c6:8e:95:8e:70:01:f5:34:81:cb:1d:05:ed:fc:0e:
8a:f2:ec:74:4c:ba:86:e0:e1:ec:77:6b:fb:3e:af:9b:aa:e8:
4e:ad:e4:0e:55:60:9c:b6:b1:83:cf:1f:36:06:c0:a9:46:ef:
9e:be:41:33:bd:df:a6:8b:66:4c:b2:f3:af:29:ea:27:54:15:
ff:67:12:78:77:6e:2e:b4:95:7d:03:1e:2b:d4:7d:db:41:f5:
c0:70:c7:3b:74:ab:dc:78:0f:b5:49:4b:15:ce:cf:3b:5e:c3:
9f:6e:66:28
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWmadXhUVnzDqVYsREwQcLjQ+zrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0
Q0FFOTIwQTAeFw0yNDA1MjkwMTU1MDFaFw0yNTA1MjgwMjAwMDFaMDMxMTAvBgNV
BAMTKDc3Q0FCRUNCQzQwNURDMzk2QTczRDk2RkYxMDNFQTQ5RUM4MUFGQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0Z+YG0xURODBvl1BTb8mixIk
2SLN31lk8OVAUChM/UqquFJw6N1tWaz94pgWN+dQt/pas8UAOsd7DJaVGzHbYtvx
krN8hd3f3/A0BBCw18wEghTSQAQF/s7U+GzC92FndjV2w6n+16BXdowGc3t1LXq5
j4o+Scwr9dpSuwDezAJeu4mOb52gDbcuPwP9LqoHvLjOL8qv3gAcpAfQSy5Cc9qW
fzIUZlSRpI/6u8SQNkq8Ya/nprBz+fD7bxrx8RK0IadLGXswOVPr2OoRAbGx4qfr
O6XaYIWbOkyfWaCxKj1yp3fy5/PpTKURSJnnwmVoBk7ZVJNVS3+Tx24DKrHXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUd8q+y8QF3Dlqc9lv8QPqSeyBr7wwHwYDVR0j
BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0
QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF
OTIwQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxNGEyYTQxLTI4MzgtNDM2OS05
OTdiLTQyOTlmMTdlZWU5MC8wLzMxMzAzMzJlMzIzMzMwMmUzODMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+ZRMA0GCSqG
SIb3DQEBCwUAA4IBAQCXQj2NBluYSVttr2ASjipRGU0mIweYPiy8G/4LzEPEdQK0
/It/0CH0smkYcDUl8kcrABrHhJEQy+lT8KNNsP3Dq27XvrbSn9KA6nkgQ5kWZU43
3+PGRFaT6Wz33ENQr73mJbTDLlcb774t84TNqDGLQtqHP1EsbjtbBokKDQvnusSQ
RAnXFB583Mj29oEsmTkCiJPGjpWOcAH1NIHLHQXt/A6K8ux0TLqG4OHsd2v7Pq+b
quhOreQOVWCctrGDzx82BsCpRu+evkEzvd+mi2ZMsvOvKeonVBX/ZxJ4d24utJV9
Ax4r1H3bQfXAcMc7dKvceA+1SUsVzs87XsOfbmYo
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:58 2025 by rpki-client