Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa
File: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier: 2PTof7HgDvQH3uMSjoYHvBJnE/tgljHy1CUnxbc2tLE=
Subject key identifier: 59:E1:F8:9A:EA:7C:B7:04:C8:0A:81:09:D7:6D:5C:19:D9:7E:21:40
Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267
Certificate serial: 3933892E701E4044F4BBC05CDCEB4C81C8282E14
Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa
Signing time: Mon 01 Jul 2024 01:06:10 +0000
ROA not before: Mon 01 Jul 2024 01:01:10 +0000
ROA not after: Mon 30 Jun 2025 01:06:10 +0000
asID: 58477
IP address blocks: 103.56.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:33:89:2e:70:1e:40:44:f4:bb:c0:5c:dc:eb:4c:81:c8:28:2e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267
Validity
Not Before: Jul 1 01:01:10 2024 GMT
Not After : Jun 30 01:06:10 2025 GMT
Subject: CN=59E1F89AEA7CB704C80A8109D76D5C19D97E2140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:08:35:ca:ae:4a:dc:0c:a3:c5:67:57:82:6b:
f1:0e:8c:db:c4:5b:c0:ba:dc:cc:b4:48:6d:64:c7:
83:81:5d:40:61:39:55:c3:e6:83:0f:38:3b:55:cc:
8b:98:47:31:82:6c:27:dd:58:e2:3e:0f:b2:3f:ec:
f3:b5:59:ed:c0:33:b9:5c:8a:68:75:92:5a:ac:4c:
a7:0f:e4:59:cb:4f:00:ae:5e:74:d3:3a:26:9d:53:
c3:59:d6:76:f5:20:3a:1a:2f:d1:02:2d:e7:58:1e:
35:95:38:8b:da:bb:49:a6:18:74:28:0d:5d:3b:35:
e1:62:1f:ec:ab:0a:d0:9d:0e:ed:0e:91:67:10:a3:
92:9c:7c:de:08:e4:87:9e:e3:47:3d:e4:6c:c1:cb:
db:5c:af:3a:a1:24:72:8e:52:03:1c:85:c7:d5:37:
36:f0:34:d9:a9:d6:53:c0:6f:6f:c8:1f:4a:84:3c:
81:b3:62:f2:2c:e7:57:d6:4d:94:db:31:18:d6:4e:
01:f6:8a:89:92:3e:68:15:71:b7:28:55:b6:53:d5:
d7:09:52:66:bd:19:89:e7:70:bf:2b:3f:11:5a:c5:
85:72:6b:88:a8:4f:ad:3b:98:0f:d2:b4:a7:8d:5b:
dc:c5:9a:cc:07:c0:68:91:4a:de:34:af:3e:16:bb:
fb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:F8:9A:EA:7C:B7:04:C8:0A:81:09:D7:6D:5C:19:D9:7E:21:40
X509v3 Authority Key Identifier:
keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.205.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0d:5b:61:c8:9e:26:cb:71:1f:3c:bb:58:1b:ef:70:ad:85:
4a:fb:1f:ef:a0:4f:aa:7b:ac:74:30:3c:87:6a:9f:83:c1:ec:
a4:94:50:ba:9c:0c:1f:89:e4:5e:6e:b4:a8:49:11:37:67:28:
cf:76:9b:7b:81:75:07:b9:49:f9:2c:17:32:06:ac:bf:e4:dd:
4c:6d:57:a8:e6:2a:df:a5:06:e6:90:17:53:32:15:1f:71:19:
cd:f5:2d:20:80:a4:9e:0c:e4:0f:39:d6:4f:52:9d:c4:08:d6:
02:e8:f3:cb:ee:12:3c:92:a5:1b:d8:7a:b7:e7:e5:f8:a4:07:
83:ed:b7:76:dd:60:51:b9:f4:69:31:63:5a:d7:59:d9:fd:23:
0b:89:c1:53:59:69:64:96:aa:03:36:62:17:14:cc:93:43:38:
bf:96:34:0e:78:06:26:3e:25:9c:01:c4:59:5e:a5:76:12:ac:
f8:81:92:6f:f6:33:33:35:80:d6:20:2c:6a:ef:60:20:84:4f:
61:c8:b3:62:03:43:a8:a1:47:02:d1:e4:94:e7:e8:93:2e:a6:
b8:48:46:ea:d6:ea:b0:bf:80:fe:f0:67:62:ce:a4:e5:09:ab:
a4:77:94:b3:ff:69:45:b6:cf:8c:2c:51:9a:75:e2:f5:15:94:
ac:6c:e0:75
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUOTOJLnAeQET0u8Bc3OtMgcgoLhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0
QTk2QjI2NzAeFw0yNDA3MDEwMTAxMTBaFw0yNTA2MzAwMTA2MTBaMDMxMTAvBgNV
BAMTKDU5RTFGODlBRUE3Q0I3MDRDODBBODEwOUQ3NkQ1QzE5RDk3RTIxNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaCDXKrkrcDKPFZ1eCa/EOjNvE
W8C63My0SG1kx4OBXUBhOVXD5oMPODtVzIuYRzGCbCfdWOI+D7I/7PO1We3AM7lc
imh1klqsTKcP5FnLTwCuXnTTOiadU8NZ1nb1IDoaL9ECLedYHjWVOIvau0mmGHQo
DV07NeFiH+yrCtCdDu0OkWcQo5KcfN4I5Iee40c95GzBy9tcrzqhJHKOUgMchcfV
NzbwNNmp1lPAb2/IH0qEPIGzYvIs51fWTZTbMRjWTgH2iomSPmgVcbcoVbZT1dcJ
Uma9GYnncL8rPxFaxYVya4ioT607mA/StKeNW9zFmswHwGiRSt40rz4Wu/ubAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWeH4mup8twTICoEJ121cGdl+IUAwHwYDVR0j
BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2
NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2
QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04
OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zTANBgkqhkiG
9w0BAQsFAAOCAQEAcQ1bYcieJstxHzy7WBvvcK2FSvsf76BPqnusdDA8h2qfg8Hs
pJRQupwMH4nkXm60qEkRN2coz3abe4F1B7lJ+SwXMgasv+TdTG1XqOYq36UG5pAX
UzIVH3EZzfUtIICkngzkDznWT1KdxAjWAujzy+4SPJKlG9h6t+fl+KQHg+23dt1g
Ubn0aTFjWtdZ2f0jC4nBU1lpZJaqAzZiFxTMk0M4v5Y0DngGJj4lnAHEWV6ldhKs
+IGSb/YzMzWA1iAsau9gIIRPYcizYgNDqKFHAtHklOfoky6muEhG6tbqsL+A/vBn
Ys6k5QmrpHeUs/9pRbbPjCxRmnXi9RWUrGzgdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:22 2025 by rpki-client