Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa
File: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (raw, json)
Hash identifier: 5sv2BLrXUR7pP0OPvmvfvyofoGM5DTSkOAndTrP63eU=
Subject key identifier: EC:E2:71:FE:6F:8C:09:4D:46:1D:AF:B6:B4:07:02:54:24:16:1A:FE
Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED
Certificate serial: 6B881B842E620C7E379FFCB2A85418B1815B571A
Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa
Signing time: Mon 06 May 2024 11:44:08 +0000
ROA not before: Mon 06 May 2024 11:39:08 +0000
ROA not after: Mon 05 May 2025 11:44:08 +0000
asID: 138070
IP address blocks: 103.123.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:88:1b:84:2e:62:0c:7e:37:9f:fc:b2:a8:54:18:b1:81:5b:57:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED
Validity
Not Before: May 6 11:39:08 2024 GMT
Not After : May 5 11:44:08 2025 GMT
Subject: CN=ECE271FE6F8C094D461DAFB6B407025424161AFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:87:92:77:83:b6:04:e0:1d:0f:46:9c:a5:
1e:ec:78:9e:2c:bf:98:8c:78:98:de:2a:ab:30:12:
9c:dc:be:f4:7c:33:60:f2:8b:52:4c:85:8c:33:43:
09:45:e0:d2:cc:c8:9c:bb:be:d9:d2:dc:af:aa:4c:
35:4c:31:09:ed:6f:6e:cd:14:d7:4b:31:19:90:3c:
fa:60:e4:75:6a:33:96:41:96:a4:9c:b0:63:dd:44:
83:6b:4c:8b:dd:74:76:bc:d8:eb:73:1c:fa:ac:92:
f7:aa:30:87:8d:23:00:72:cf:e0:50:9c:44:40:89:
ca:c6:c8:3f:b0:10:53:b4:a5:72:99:b9:94:34:ff:
93:e1:ee:8c:af:c4:58:79:cd:49:44:be:7f:fc:8d:
13:df:37:fa:0e:45:46:d5:76:a4:61:92:8c:86:ff:
8d:26:a6:cc:aa:e9:6c:16:b1:c0:ca:92:af:9d:f5:
4d:d0:c6:71:63:18:32:41:44:05:fd:f9:8d:68:7a:
54:dd:d7:c9:d0:fb:fe:b0:e0:22:3f:bf:dd:ad:8a:
03:50:c6:5b:69:90:ff:16:0e:f9:78:2d:70:b2:16:
fb:29:c5:83:91:33:fe:83:2f:a8:50:1d:83:ce:a6:
04:85:c9:57:5b:e0:7d:be:0a:7a:aa:14:4e:f0:67:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E2:71:FE:6F:8C:09:4D:46:1D:AF:B6:B4:07:02:54:24:16:1A:FE
X509v3 Authority Key Identifier:
keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.123.107.0/24
Signature Algorithm: sha256WithRSAEncryption
21:3e:ba:a4:c2:dc:00:2a:83:cc:dd:ff:14:99:f4:c8:71:58:
11:23:82:73:6a:7c:6c:5a:67:67:99:96:02:50:ee:11:7b:9e:
f3:71:04:8d:5e:be:23:61:2e:51:a4:cb:76:c3:c9:0c:52:cf:
66:44:bb:83:2a:90:f7:44:a0:82:52:d1:f7:94:83:a9:39:cf:
f7:7b:e7:f8:6a:00:f4:12:ae:57:a7:c8:c7:5a:55:2c:4c:d1:
4a:18:12:c4:5f:16:c3:0e:f9:55:e4:67:0d:ce:50:3d:43:1e:
f4:52:48:6e:86:74:21:60:6f:2f:dc:d7:a7:f9:6f:c4:2e:d7:
84:66:b3:98:d8:74:11:26:60:ae:6c:7f:1c:33:90:e3:e5:bf:
36:65:5f:f6:68:05:1c:f2:e6:95:b9:4d:09:bc:4c:6c:ac:fd:
12:19:9a:77:e8:33:49:f8:b6:79:a6:e1:9d:2e:82:36:d7:47:
7b:8a:ae:fa:55:6e:c3:52:79:da:71:d3:d2:77:ac:ee:2e:cb:
4d:03:6e:f3:e7:51:0e:27:20:66:6d:41:f4:b8:0b:72:f8:ec:
59:14:47:2d:47:7b:11:a0:2a:d5:e7:48:0d:dc:5c:ef:e7:d4:
c3:62:b6:70:fb:19:7f:f5:0b:91:c9:e7:c7:2e:a6:a2:5f:78:
f8:9d:ed:e6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUa4gbhC5iDH43n/yyqFQYsYFbVxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy
QjRCMkRFRDAeFw0yNDA1MDYxMTM5MDhaFw0yNTA1MDUxMTQ0MDhaMDMxMTAvBgNV
BAMTKEVDRTI3MUZFNkY4QzA5NEQ0NjFEQUZCNkI0MDcwMjU0MjQxNjFBRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/IeSd4O2BOAdD0acpR7seJ4s
v5iMeJjeKqswEpzcvvR8M2Dyi1JMhYwzQwlF4NLMyJy7vtnS3K+qTDVMMQntb27N
FNdLMRmQPPpg5HVqM5ZBlqScsGPdRINrTIvddHa82OtzHPqskveqMIeNIwByz+BQ
nERAicrGyD+wEFO0pXKZuZQ0/5Ph7oyvxFh5zUlEvn/8jRPfN/oORUbVdqRhkoyG
/40mpsyq6WwWscDKkq+d9U3QxnFjGDJBRAX9+Y1oelTd18nQ+/6w4CI/v92tigNQ
xltpkP8WDvl4LXCyFvspxYORM/6DL6hQHYPOpgSFyVdb4H2+CnqqFE7wZ0rdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU7OJx/m+MCU1GHa+2tAcCVCQWGv4wHwYDVR0j
BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw
MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC
MkRFRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhZDY3ZDVmLTU3MTMtNDE1My04
NzFiLTFiMDA4ZjdmZmRkMi8wLzMxMzAzMzJlMzEzMjMzMmUzMTMwMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM3MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABne2swDQYJ
KoZIhvcNAQELBQADggEBACE+uqTC3AAqg8zd/xSZ9MhxWBEjgnNqfGxaZ2eZlgJQ
7hF7nvNxBI1eviNhLlGky3bDyQxSz2ZEu4MqkPdEoIJS0feUg6k5z/d75/hqAPQS
rlenyMdaVSxM0UoYEsRfFsMO+VXkZw3OUD1DHvRSSG6GdCFgby/c16f5b8Qu14Rm
s5jYdBEmYK5sfxwzkOPlvzZlX/ZoBRzy5pW5TQm8TGys/RIZmnfoM0n4tnmm4Z0u
gjbXR3uKrvpVbsNSedpx09J3rO4uy00DbvPnUQ4nIGZtQfS4C3L47FkURy1HexGg
KtXnSA3cXO/n1MNitnD7GX/1C5HJ58cupqJfePid7eY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:32 2025 by rpki-client