Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa
File: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (raw, json)
Hash identifier: JsesZ2XEjGD90Q6rb53op1u+M0C8ZTvk1vBXUWFrpwg=
Subject key identifier: 0A:57:71:05:EF:AE:4C:AF:8F:E7:6A:BA:87:B7:66:A3:3A:36:30:1E
Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A
Certificate serial: 01D2C499CFAB6987884ACB015BAFB66622BB2FAE
Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa
Signing time: Thu 08 Aug 2024 08:01:08 +0000
ROA not before: Thu 08 Aug 2024 07:56:08 +0000
ROA not after: Thu 07 Aug 2025 08:01:08 +0000
asID: 132668
IP address blocks: 103.19.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d2:c4:99:cf:ab:69:87:88:4a:cb:01:5b:af:b6:66:22:bb:2f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A
Validity
Not Before: Aug 8 07:56:08 2024 GMT
Not After : Aug 7 08:01:08 2025 GMT
Subject: CN=0A577105EFAE4CAF8FE76ABA87B766A33A36301E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:ca:24:ee:5f:7b:a3:b7:53:1f:56:e4:98:
35:21:8d:31:55:fd:e7:fe:df:52:a7:08:05:aa:3c:
44:41:eb:29:4b:b1:59:a9:2c:e0:3a:fa:76:85:48:
dc:67:77:51:82:ee:9c:44:c5:86:52:ec:8c:49:f5:
b0:66:1b:05:7b:49:c7:94:a1:ca:f2:f3:0e:24:2b:
e1:6e:c7:d2:5e:c9:f2:8c:14:93:ad:22:c1:18:f7:
6f:55:dc:d7:ae:35:a2:80:c2:3d:de:8a:fa:d8:36:
da:22:96:78:5e:fe:db:3b:95:ff:7f:e8:8f:ec:d3:
c3:c6:b9:ad:d4:04:5c:ba:94:73:8c:34:22:ca:29:
71:51:c0:d4:f4:04:68:cd:34:8c:11:40:ec:8f:03:
9a:b9:39:29:f7:5b:26:a8:f4:0c:ca:e8:c7:79:8d:
31:53:6a:13:df:ec:65:0b:66:b7:69:d4:b8:09:1f:
62:96:56:91:c3:81:51:f1:76:88:6e:a8:02:df:41:
fe:1c:ed:cb:49:1e:8e:8f:2c:9d:c6:c2:63:0d:2e:
37:f9:b0:e3:59:62:99:34:84:f6:f1:23:f4:c8:11:
76:a4:8e:de:2e:22:de:5e:43:77:1a:2d:48:7b:42:
05:92:61:de:34:c9:a2:4f:e1:6b:7b:37:1c:f8:11:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:71:05:EF:AE:4C:AF:8F:E7:6A:BA:87:B7:66:A3:3A:36:30:1E
X509v3 Authority Key Identifier:
keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.19.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:70:4b:8c:d1:86:30:2e:47:eb:2c:de:e0:53:bf:ac:cf:bf:
7a:08:ae:bc:d0:51:94:26:f3:89:24:9f:61:5c:7c:8c:f1:b4:
f8:8b:87:c5:3d:be:90:04:14:1c:7e:cf:29:61:4b:9c:e6:c1:
6d:25:cf:4f:e2:37:1e:55:2b:43:6b:7d:5f:03:de:8a:0d:ab:
b8:41:86:59:4a:09:57:27:7b:e6:2d:85:a9:c2:3b:9c:d5:37:
57:f3:2f:e6:99:81:1e:58:7b:8d:6d:e9:4d:f3:a6:52:55:54:
0d:ac:84:d5:ec:f7:91:ca:88:ed:56:2c:95:3e:9d:bb:10:c5:
20:6b:63:ef:be:43:5b:f2:42:f8:17:70:37:f7:df:b1:5c:fa:
50:f7:71:71:8e:cb:99:d4:8d:d1:87:e7:b2:2b:07:b0:c4:75:
e5:46:3c:5f:3c:95:7a:79:0f:c3:2e:e1:c1:f7:56:fe:c3:b5:
55:77:d4:e0:95:2f:e4:a2:4c:64:82:62:ae:52:dd:f6:41:d6:
77:b5:9b:05:19:0b:1a:60:12:60:b1:e0:b3:b1:f5:a3:f5:4b:
a6:1c:6e:7e:63:07:5e:97:28:17:cc:6b:ef:cb:4b:d8:2a:0c:
be:fc:da:d1:e0:bf:dc:d0:a1:23:fb:90:98:42:a3:da:fe:fd:
a4:a2:01:ae
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAdLEmc+raYeISssBW6+2ZiK7L64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1
MjBGNkUyQTAeFw0yNDA4MDgwNzU2MDhaFw0yNTA4MDcwODAxMDhaMDMxMTAvBgNV
BAMTKDBBNTc3MTA1RUZBRTRDQUY4RkU3NkFCQTg3Qjc2NkEzM0EzNjMwMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNpcok7l97o7dTH1bkmDUhjTFV
/ef+31KnCAWqPERB6ylLsVmpLOA6+naFSNxnd1GC7pxExYZS7IxJ9bBmGwV7SceU
ocry8w4kK+Fux9JeyfKMFJOtIsEY929V3NeuNaKAwj3eivrYNtoilnhe/ts7lf9/
6I/s08PGua3UBFy6lHOMNCLKKXFRwNT0BGjNNIwRQOyPA5q5OSn3Wyao9AzK6Md5
jTFTahPf7GULZrdp1LgJH2KWVpHDgVHxdohuqALfQf4c7ctJHo6PLJ3GwmMNLjf5
sONZYpk0hPbxI/TIEXakjt4uIt5eQ3caLUh7QgWSYd40yaJP4Wt7Nxz4EQpdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUCldxBe+uTK+P52q6h7dmozo2MB4wHwYDVR0j
BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy
NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG
NkUyQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyZjE0MTdhLTU3MTgtNDA3MS05
ZjM1LWMxMjI1NTVkYWM3YS8wLzMxMzAzMzJlMzEzOTJlMzIzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxPmMA0GCSqG
SIb3DQEBCwUAA4IBAQCycEuM0YYwLkfrLN7gU7+sz796CK680FGUJvOJJJ9hXHyM
8bT4i4fFPb6QBBQcfs8pYUuc5sFtJc9P4jceVStDa31fA96KDau4QYZZSglXJ3vm
LYWpwjuc1TdX8y/mmYEeWHuNbelN86ZSVVQNrITV7PeRyojtViyVPp27EMUga2Pv
vkNb8kL4F3A399+xXPpQ93FxjsuZ1I3Rh+eyKwewxHXlRjxfPJV6eQ/DLuHB91b+
w7VVd9TglS/kokxkgmKuUt32QdZ3tZsFGQsaYBJgseCzsfWj9UumHG5+YwdelygX
zGvvy0vYKgy+/NrR4L/c0KEj+5CYQqPa/v2kogGu
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:21 2025 by rpki-client