Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa
File: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (raw, json)
Hash identifier: 7M6efsLhqxjG1H0m8nrpYOTdTc1BnME2E5kel00NXYw=
Subject key identifier: DE:0D:36:04:7E:13:FB:A9:A1:F8:6F:B2:7A:DD:F9:0A:9F:AE:2B:EE
Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB
Certificate serial: 4F60FD77B5551945E0A652451A0F8A224A93EEC1
Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa
Signing time: Fri 05 Jul 2024 20:00:01 +0000
ROA not before: Fri 05 Jul 2024 19:55:01 +0000
ROA not after: Fri 04 Jul 2025 20:00:01 +0000
asID: 139427
IP address blocks: 103.31.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:60:fd:77:b5:55:19:45:e0:a6:52:45:1a:0f:8a:22:4a:93:ee:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB
Validity
Not Before: Jul 5 19:55:01 2024 GMT
Not After : Jul 4 20:00:01 2025 GMT
Subject: CN=DE0D36047E13FBA9A1F86FB27ADDF90A9FAE2BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:5f:68:2a:a1:5f:db:75:d7:84:cd:65:ea:
98:2c:d3:82:f5:29:85:7c:7b:b3:39:0c:13:01:e2:
09:06:bf:3d:62:26:98:05:3f:fb:69:30:d7:4e:15:
2e:c5:82:e1:76:bf:1c:2a:f9:83:98:0e:7a:88:4b:
68:bb:17:16:fd:a0:8f:9b:f6:16:61:3b:21:15:5d:
bb:54:44:b7:3a:b8:45:be:11:e9:50:94:57:25:e3:
38:8a:eb:ce:b8:12:92:d8:0e:5c:85:b2:92:26:54:
02:b9:67:b3:e0:b8:16:b8:cb:40:b3:6b:ea:42:20:
47:41:75:2c:af:4b:b9:24:29:e0:94:22:23:00:84:
eb:9c:9e:ae:f0:c5:63:9f:ce:c4:e2:4a:e3:4d:45:
94:19:c1:6c:44:e8:74:08:59:fb:19:b0:bf:1f:22:
e3:67:15:c8:20:04:f7:cd:08:dc:ed:54:14:60:3e:
a9:e8:42:44:8a:75:03:4d:6b:1b:5e:a6:44:57:19:
0d:60:52:db:23:df:b6:0a:15:36:b2:3c:59:0b:6c:
e5:6d:2f:22:96:ee:1b:58:03:2e:8d:da:3d:2c:89:
e5:43:1c:0a:d1:30:43:1c:6d:09:7a:ec:09:c6:cc:
89:3d:67:08:a5:0a:1f:9f:07:93:da:b2:2b:7d:fa:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:36:04:7E:13:FB:A9:A1:F8:6F:B2:7A:DD:F9:0A:9F:AE:2B:EE
X509v3 Authority Key Identifier:
keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:21:19:8f:ac:f7:62:b5:95:e4:c3:9b:0b:48:72:fb:b8:96:
39:08:39:50:ee:19:5e:63:86:7b:80:3a:65:4e:28:54:a0:ef:
84:f9:16:b4:c9:eb:2e:49:d0:a5:d6:77:98:11:a9:96:b0:7a:
f1:a4:65:4b:55:39:72:c8:82:ad:27:15:6e:da:30:1b:f1:79:
69:9d:2b:f4:cc:c6:c4:0a:d2:3e:33:9f:a1:4d:2a:d3:90:af:
ff:50:06:96:47:87:fc:04:87:04:62:ba:49:fa:8f:47:09:22:
d7:c8:d4:ca:ed:00:83:b0:aa:2f:9e:8f:68:c4:d9:e5:41:4d:
cc:53:d5:24:22:de:6d:66:15:2e:21:6f:89:bf:b4:50:b1:01:
aa:5a:b5:f2:ed:f6:80:cf:37:65:a0:4d:f2:65:8f:58:af:95:
3d:bd:e1:65:2d:c8:04:ea:54:0b:6c:e1:7b:70:c7:aa:99:cc:
7e:cd:ff:91:b5:ea:6d:ef:42:6d:28:43:44:f8:1f:c4:96:23:
7d:b2:c9:d0:14:c2:de:f6:56:04:5f:21:22:39:24:9a:54:ca:
ce:29:bf:4b:be:cd:c0:6f:b7:04:d7:ea:e7:5a:12:f4:5f:c8:
a0:dd:6b:24:da:e7:72:81:7b:5f:4e:2b:dd:f0:fe:08:6d:e8:
91:75:4d:56
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUT2D9d7VVGUXgplJFGg+KIkqT7sEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2
NDBGNDRBQjAeFw0yNDA3MDUxOTU1MDFaFw0yNTA3MDQyMDAwMDFaMDMxMTAvBgNV
BAMTKERFMEQzNjA0N0UxM0ZCQTlBMUY4NkZCMjdBRERGOTBBOUZBRTJCRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqF9oKqFf23XXhM1l6pgs04L1
KYV8e7M5DBMB4gkGvz1iJpgFP/tpMNdOFS7FguF2vxwq+YOYDnqIS2i7Fxb9oI+b
9hZhOyEVXbtURLc6uEW+EelQlFcl4ziK6864EpLYDlyFspImVAK5Z7PguBa4y0Cz
a+pCIEdBdSyvS7kkKeCUIiMAhOucnq7wxWOfzsTiSuNNRZQZwWxE6HQIWfsZsL8f
IuNnFcggBPfNCNztVBRgPqnoQkSKdQNNaxtepkRXGQ1gUtsj37YKFTayPFkLbOVt
LyKW7htYAy6N2j0sieVDHArRMEMcbQl67AnGzIk9ZwilCh+fB5Pasit9+qIDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3g02BH4T+6mh+G+yet35Cp+uK+4wHwYDVR0j
BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1
QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG
NDRBQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2MWI4Y2NjLTZjMjItNDI0ZS05
NjE0LThhYjhhZDI4ODQ5Yy8wLzMxMzAzMzJlMzMzMTJlMzIzNDM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx/4MA0GCSqG
SIb3DQEBCwUAA4IBAQBfIRmPrPditZXkw5sLSHL7uJY5CDlQ7hleY4Z7gDplTihU
oO+E+Ra0yesuSdCl1neYEamWsHrxpGVLVTlyyIKtJxVu2jAb8XlpnSv0zMbECtI+
M5+hTSrTkK//UAaWR4f8BIcEYrpJ+o9HCSLXyNTK7QCDsKovno9oxNnlQU3MU9Uk
It5tZhUuIW+Jv7RQsQGqWrXy7faAzzdloE3yZY9Yr5U9veFlLcgE6lQLbOF7cMeq
mcx+zf+Rtept70JtKENE+B/EliN9ssnQFMLe9lYEXyEiOSSaVMrOKb9Lvs3Ab7cE
1+rnWhL0X8ig3Wsk2udygXtfTivd8P4IbeiRdU1W
-----END CERTIFICATE-----
Generated at Fri May 2 11:11:49 2025 by rpki-client