Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa
File: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier: 0C8pRCsymjTTrJFNZEJzyFd4IOGqdzBKqs9DQmpJI/s=
Subject key identifier: 48:94:92:86:1F:53:72:12:46:B0:92:BE:D1:D7:70:AA:F9:36:41:B6
Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Certificate serial: 15BCEB3BA710868BCCDDB7D23C2D8780A3DA60B3
Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa
Signing time: Fri 02 Aug 2024 09:02:25 +0000
ROA not before: Fri 02 Aug 2024 08:57:25 +0000
ROA not after: Fri 01 Aug 2025 09:02:25 +0000
asID: 17995
IP address blocks: 103.162.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:bc:eb:3b:a7:10:86:8b:cc:dd:b7:d2:3c:2d:87:80:a3:da:60:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Validity
Not Before: Aug 2 08:57:25 2024 GMT
Not After : Aug 1 09:02:25 2025 GMT
Subject: CN=489492861F53721246B092BED1D770AAF93641B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:69:54:96:c5:24:e6:8e:c0:9a:89:cc:cb:
c0:b8:4e:6f:30:15:58:d9:96:23:77:33:b1:87:0c:
1c:8f:bb:cb:fb:bb:69:d6:b1:63:6b:bc:3c:8f:5a:
97:6b:82:30:25:f7:a3:af:5f:b3:63:dd:e0:d6:a0:
db:71:c9:53:c4:ea:bd:ba:6e:0a:71:27:f4:d1:b3:
cf:b7:55:fb:a4:42:cb:ac:43:37:ae:39:cd:91:11:
ff:7e:53:5a:3e:2d:0b:40:ef:73:4d:f8:cf:dd:ce:
17:49:4b:c2:a9:20:1b:40:bf:cb:cb:91:fb:ac:06:
f2:9f:01:50:23:e7:3d:2b:cc:f8:45:c9:63:98:5d:
47:3b:61:c6:3c:43:87:11:e4:9a:a3:df:aa:56:6e:
c9:90:fb:ac:8c:f5:4a:62:7e:b8:36:1c:b9:06:f3:
a1:61:24:ff:f3:81:71:13:3b:34:7c:61:cd:ae:2d:
17:51:da:3b:a1:32:63:69:b6:45:2d:f8:5c:ed:1b:
9c:92:19:01:3f:9f:9e:75:f1:ae:04:76:cf:30:58:
bf:99:df:d7:71:28:29:98:cd:28:65:9d:d0:85:7b:
be:de:c1:d8:1b:91:c2:85:9d:f4:28:58:a4:ad:83:
41:24:48:47:e1:5e:f2:d3:8d:82:e9:fc:50:9b:f8:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:94:92:86:1F:53:72:12:46:B0:92:BE:D1:D7:70:AA:F9:36:41:B6
X509v3 Authority Key Identifier:
keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.122.0/23
Signature Algorithm: sha256WithRSAEncryption
83:2d:97:1c:23:bd:f7:e4:d3:24:89:8d:f7:8c:67:2b:74:3b:
72:6d:19:45:5c:35:77:57:b7:13:4d:69:90:a8:d7:ee:f8:5c:
56:20:fc:73:b3:1b:71:f0:68:26:68:2a:9c:ba:9d:24:ce:36:
07:ba:09:a7:fa:e5:a8:ee:4b:8d:28:44:a5:d1:f0:4f:21:c2:
9e:6e:db:be:91:5a:e0:9f:84:39:b9:e4:b5:74:ff:73:2f:7e:
d7:6a:ee:83:b9:78:f4:6c:38:35:95:0f:f5:cd:aa:d1:0d:f9:
80:6f:7a:91:65:42:9b:3f:86:7c:2e:ec:98:b8:ba:7b:6e:3e:
e4:80:76:46:48:c9:c3:ae:39:af:b9:5d:a1:3a:7f:39:4c:6e:
e3:04:a9:4d:0e:80:05:aa:c2:5d:c7:b7:1e:9b:1d:88:6c:0a:
08:88:93:56:b3:52:89:c8:59:4b:c3:81:3d:01:44:f5:cb:9a:
41:59:01:9f:8c:64:a7:60:46:fe:64:09:5b:7e:fa:50:97:46:
80:0e:bd:91:66:81:1b:59:12:19:a1:be:0d:73:54:26:50:31:
e0:c6:7c:e6:3a:8e:69:3a:66:90:e8:2d:35:4e:32:29:67:71:
7d:6f:9e:73:dd:ed:b1:e4:c9:f7:7c:4a:ff:ff:88:19:4e:7a:
15:67:30:50
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFbzrO6cQhovM3bfSPC2HgKPaYLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE
Mzc3RkNDMjAeFw0yNDA4MDIwODU3MjVaFw0yNTA4MDEwOTAyMjVaMDMxMTAvBgNV
BAMTKDQ4OTQ5Mjg2MUY1MzcyMTI0NkIwOTJCRUQxRDc3MEFBRjkzNjQxQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotGlUlsUk5o7AmonMy8C4Tm8w
FVjZliN3M7GHDByPu8v7u2nWsWNrvDyPWpdrgjAl96OvX7Nj3eDWoNtxyVPE6r26
bgpxJ/TRs8+3VfukQsusQzeuOc2REf9+U1o+LQtA73NN+M/dzhdJS8KpIBtAv8vL
kfusBvKfAVAj5z0rzPhFyWOYXUc7YcY8Q4cR5Jqj36pWbsmQ+6yM9Upifrg2HLkG
86FhJP/zgXETOzR8Yc2uLRdR2juhMmNptkUt+FztG5ySGQE/n5518a4Eds8wWL+Z
39dxKCmYzShlndCFe77ewdgbkcKFnfQoWKStg0EkSEfhXvLTjYLp/FCb+GubAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSJSShh9TchJGsJK+0ddwqvk2QbYwHwYDVR0j
BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz
MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3
RkNDMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxYjNmZTQ1LWI1ODgtNGJiNy1h
ZTkwLTkxZjU3ZjU5M2NiNS8wLzMxMzAzMzJlMzEzNjMyMmUzMTMyMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6J6MA0GCSqG
SIb3DQEBCwUAA4IBAQCDLZccI7335NMkiY33jGcrdDtybRlFXDV3V7cTTWmQqNfu
+FxWIPxzsxtx8GgmaCqcup0kzjYHugmn+uWo7kuNKESl0fBPIcKebtu+kVrgn4Q5
ueS1dP9zL37Xau6DuXj0bDg1lQ/1zarRDfmAb3qRZUKbP4Z8LuyYuLp7bj7kgHZG
SMnDrjmvuV2hOn85TG7jBKlNDoAFqsJdx7cemx2IbAoIiJNWs1KJyFlLw4E9AUT1
y5pBWQGfjGSnYEb+ZAlbfvpQl0aADr2RZoEbWRIZob4Nc1QmUDHgxnzmOo5pOmaQ
6C01TjIpZ3F9b55z3e2x5Mn3fEr//4gZTnoVZzBQ
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:27:59 2025 by rpki-client