Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa
File: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (raw, json)
Hash identifier: ItQln5TNr77cpCKNka4JczJ1ZdQmdTc4Ya4R27T4EMU=
Subject key identifier: 54:63:FD:67:2A:CA:13:4E:F3:3B:27:21:6C:8B:DA:89:17:82:B0:DF
Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Certificate serial: 02E0B036C2347E42996965F6EA32EF3548B61021
Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa
Signing time: Thu 11 Apr 2024 11:02:03 +0000
ROA not before: Thu 11 Apr 2024 10:57:03 +0000
ROA not after: Thu 10 Apr 2025 11:02:03 +0000
asID: 149706
IP address blocks: 103.186.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e0:b0:36:c2:34:7e:42:99:69:65:f6:ea:32:ef:35:48:b6:10:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Validity
Not Before: Apr 11 10:57:03 2024 GMT
Not After : Apr 10 11:02:03 2025 GMT
Subject: CN=5463FD672ACA134EF33B27216C8BDA891782B0DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:d9:cf:5b:68:79:17:2f:c0:10:bc:41:3b:
35:de:e1:2a:66:5d:60:98:93:34:68:28:24:79:77:
64:24:f1:27:1e:b4:c1:34:6c:02:b3:06:26:6a:b9:
7b:fc:2c:34:cc:35:80:3f:8a:27:70:b2:3f:e2:78:
3a:c2:45:4c:47:11:21:50:44:a8:4f:09:c3:eb:2a:
35:15:07:12:b3:b7:60:1a:df:d9:8f:3b:69:11:48:
5f:43:1e:b7:9f:fc:b0:0e:ce:6e:7b:87:39:47:2e:
9a:16:c2:54:2c:2b:77:bc:b7:70:1f:4e:68:26:3f:
15:f9:f3:45:38:1c:a1:6a:70:4e:47:69:b8:44:00:
74:66:ec:ba:d6:1f:41:31:b2:d6:de:6c:03:86:35:
ab:12:e8:11:5a:b4:1f:27:e6:6f:77:69:49:5a:35:
f7:99:63:9d:c0:68:24:eb:0d:41:59:7f:4c:34:77:
ec:d3:83:64:9f:32:75:12:e9:28:41:49:94:9e:db:
78:9b:74:67:67:81:e7:32:31:39:94:0a:b3:f4:e5:
71:5b:a3:8a:52:e2:c7:bd:2c:84:9f:40:62:f8:1e:
f8:ba:59:3f:be:3a:e2:de:e9:e9:d0:18:e5:39:bb:
99:bc:1c:f4:6d:2f:3c:96:d4:86:86:06:28:ac:58:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:FD:67:2A:CA:13:4E:F3:3B:27:21:6C:8B:DA:89:17:82:B0:DF
X509v3 Authority Key Identifier:
keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2a:dc:b4:38:b7:17:e7:d7:9e:ef:78:6b:53:d1:61:96:b7:
1f:09:48:75:75:9f:76:63:7f:4d:2c:3e:5a:e2:56:11:09:d9:
59:8a:6e:1d:f7:c3:6c:e1:98:e2:f4:28:3e:cf:5f:df:b4:60:
8a:fd:05:b7:a5:74:cd:ec:7c:2f:1c:96:b0:27:3e:e1:7d:cb:
4c:de:3c:a7:dc:46:3a:51:48:65:86:81:dc:35:82:21:f1:08:
9c:16:f4:4c:25:85:51:4c:51:4d:60:dd:b8:c4:03:ec:f2:6f:
2b:3c:e5:6d:49:28:fd:de:21:56:d0:89:8b:20:74:3d:17:95:
16:00:b6:6a:47:48:2c:4f:c6:8c:dc:ec:57:bc:d6:f5:10:c5:
45:f8:34:35:f4:0e:c2:4a:e1:3c:bc:90:aa:23:b4:c6:5c:c2:
97:5f:e3:27:c3:13:d2:37:d7:a8:8a:0d:d0:ff:08:81:86:9e:
6f:57:27:81:68:2d:57:ad:09:1c:2c:9b:6b:fc:20:14:da:f4:
c8:70:0e:76:6f:bc:04:3a:43:27:a8:e0:91:59:b8:c0:2c:bf:
36:e5:7d:1e:41:43:d3:56:86:c2:85:2c:95:3a:31:15:ce:69:
d9:f0:02:64:b0:47:aa:bb:8a:f6:40:85:18:8e:f3:42:a3:98:
be:91:8b:e7
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUAuCwNsI0fkKZaWX26jLvNUi2ECEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG
RDIxRkE1QzAeFw0yNDA0MTExMDU3MDNaFw0yNTA0MTAxMTAyMDNaMDMxMTAvBgNV
BAMTKDU0NjNGRDY3MkFDQTEzNEVGMzNCMjcyMTZDOEJEQTg5MTc4MkIwREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugNnPW2h5Fy/AELxBOzXe4Spm
XWCYkzRoKCR5d2Qk8ScetME0bAKzBiZquXv8LDTMNYA/iidwsj/ieDrCRUxHESFQ
RKhPCcPrKjUVBxKzt2Aa39mPO2kRSF9DHref/LAOzm57hzlHLpoWwlQsK3e8t3Af
TmgmPxX580U4HKFqcE5HabhEAHRm7LrWH0ExstbebAOGNasS6BFatB8n5m93aUla
NfeZY53AaCTrDUFZf0w0d+zTg2SfMnUS6ShBSZSe23ibdGdngecyMTmUCrP05XFb
o4pS4se9LISfQGL4Hvi6WT++OuLe6enQGOU5u5m8HPRtLzyW1IaGBiisWFIvAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUVGP9ZyrKE07zOychbIvaiReCsN8wHwYDVR0j
BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE
MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx
RkE1Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MTA2ODI3LTg2NmUtNGFjMy04
Zjc5LWE2ZTMyMGIyMGRlNy8wLzMxMzAzMzJlMzEzODM2MmUzMjMwMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnusowDQYJ
KoZIhvcNAQELBQADggEBAH0q3LQ4txfn157veGtT0WGWtx8JSHV1n3Zjf00sPlri
VhEJ2VmKbh33w2zhmOL0KD7PX9+0YIr9BbeldM3sfC8clrAnPuF9y0zePKfcRjpR
SGWGgdw1giHxCJwW9EwlhVFMUU1g3bjEA+zybys85W1JKP3eIVbQiYsgdD0XlRYA
tmpHSCxPxozc7Fe81vUQxUX4NDX0DsJK4Ty8kKojtMZcwpdf4yfDE9I316iKDdD/
CIGGnm9XJ4FoLVetCRwsm2v8IBTa9MhwDnZvvAQ6Qyeo4JFZuMAsvzblfR5BQ9NW
hsKFLJU6MRXOadnwAmSwR6q7ivZAhRiO80KjmL6Ri+c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:36 2025 by rpki-client