Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e392e302f32342d3234203d3e203435373232.roa
File: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier: 7RROuYODVVhNO2+bjbdOGIl/UFrzyWOSbw909j2VmTo=
Subject key identifier: 05:29:BF:D2:21:56:35:C4:07:04:9A:94:20:61:32:99:4B:09:56:CF
Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial: 38E3F502079FED656AA4C76CC70E8C6699D9A977
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e392e302f32342d3234203d3e203435373232.roa
Signing time: Mon 01 Jul 2024 01:03:48 +0000
ROA not before: Mon 01 Jul 2024 00:58:48 +0000
ROA not after: Mon 30 Jun 2025 01:03:48 +0000
asID: 45722
IP address blocks: 103.94.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e3:f5:02:07:9f:ed:65:6a:a4:c7:6c:c7:0e:8c:66:99:d9:a9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Validity
Not Before: Jul 1 00:58:48 2024 GMT
Not After : Jun 30 01:03:48 2025 GMT
Subject: CN=0529BFD2215635C407049A94206132994B0956CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:aa:d8:30:5e:98:20:73:19:89:1f:e5:f3:
41:d1:34:65:e7:2f:13:1b:76:91:c6:b5:41:0f:1e:
51:80:ef:b9:46:cc:44:99:6c:6c:6e:2d:04:35:95:
92:61:18:62:61:c4:bd:e7:23:dc:59:b7:25:89:d5:
4d:ed:3e:fc:a5:89:9a:1c:ed:26:83:40:04:f0:9f:
78:bc:a1:37:4e:0d:0a:0c:37:9f:5f:aa:ac:4d:a1:
ff:23:ef:29:1b:86:d6:88:de:cd:b8:a2:03:7e:38:
bc:03:26:b3:4a:e6:39:62:90:c0:a4:21:b3:d9:a7:
ec:22:b3:a3:95:27:3e:cd:b0:1c:85:e2:89:81:f9:
73:db:92:c8:c0:58:cf:62:b4:1b:0e:d8:8b:c1:39:
65:7c:a0:28:08:65:a3:d2:b6:b5:75:2a:2c:28:39:
6b:8e:32:fb:3b:0c:93:25:a5:72:40:d0:b0:6f:59:
88:9f:45:de:ad:90:7c:0f:1f:97:ab:c1:3d:2b:cd:
4e:0c:8f:7f:0d:88:aa:fd:72:db:52:61:60:70:4c:
9f:4e:86:00:a2:15:74:c0:dc:8e:fc:72:64:79:0b:
cf:a7:d4:72:5f:b9:db:34:8e:35:69:94:74:56:ba:
3f:d3:3f:25:4c:87:f5:05:58:31:57:7b:3b:ec:55:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:29:BF:D2:21:56:35:C4:07:04:9A:94:20:61:32:99:4B:09:56:CF
X509v3 Authority Key Identifier:
keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e392e302f32342d3234203d3e203435373232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f6:2d:e0:95:b5:89:98:ef:13:64:75:7d:14:5d:73:9e:2d:
d9:fa:f7:82:13:2d:58:cb:1b:8a:88:f7:dd:63:6a:03:4c:41:
3f:90:db:fa:db:ae:ea:ac:be:dd:45:65:72:c8:30:ab:b8:11:
27:25:77:85:a8:16:5f:9e:66:15:a0:42:5a:ce:a9:a6:d5:cc:
52:9b:f5:f0:9f:c7:0b:aa:4f:47:38:ee:ba:7f:86:32:53:4f:
f9:d3:88:9f:6a:05:c9:cc:e1:fb:09:75:64:70:41:81:a8:eb:
e8:76:87:6f:42:b7:57:a9:b0:c9:08:ca:3d:d0:f1:6d:da:31:
ac:40:34:6e:98:e2:23:c2:4b:d8:1f:e2:ee:4a:14:83:0c:5a:
a3:fd:7d:d9:86:c5:7d:5f:7f:61:20:4e:f7:3e:03:7a:e8:2e:
94:4a:6d:d1:11:eb:d4:51:dc:3e:90:3c:56:6d:f9:6d:c0:f9:
cd:b8:10:93:04:f7:a5:d6:44:de:0c:b1:00:10:e0:fd:c3:99:
86:39:54:f8:3f:24:e9:a4:b2:49:0e:ae:14:be:3a:44:df:e7:
f5:8e:37:e5:8b:60:b6:f0:dc:d2:f1:b9:ae:39:d0:fd:f2:e3:
83:b4:23:cb:84:35:b3:a8:ed:a6:4c:70:68:85:04:66:88:36:
66:e9:8b:ab
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUOOP1Agef7WVqpMdsxw6MZpnZqXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1
REUwRUEwQzAeFw0yNDA3MDEwMDU4NDhaFw0yNTA2MzAwMTAzNDhaMDMxMTAvBgNV
BAMTKDA1MjlCRkQyMjE1NjM1QzQwNzA0OUE5NDIwNjEzMjk5NEIwOTU2Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4l6rYMF6YIHMZiR/l80HRNGXn
LxMbdpHGtUEPHlGA77lGzESZbGxuLQQ1lZJhGGJhxL3nI9xZtyWJ1U3tPvyliZoc
7SaDQATwn3i8oTdODQoMN59fqqxNof8j7ykbhtaI3s24ogN+OLwDJrNK5jlikMCk
IbPZp+wis6OVJz7NsByF4omB+XPbksjAWM9itBsO2IvBOWV8oCgIZaPStrV1Kiwo
OWuOMvs7DJMlpXJA0LBvWYifRd6tkHwPH5erwT0rzU4Mj38NiKr9cttSYWBwTJ9O
hgCiFXTA3I78cmR5C8+n1HJfuds0jjVplHRWuj/TPyVMh/UFWDFXezvsVec5AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUBSm/0iFWNcQHBJqUIGEymUsJVs8wHwYDVR0j
BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG
RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw
RUEwQy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYwN2Q5MjktNGNhOC00ZjUzLWEy
OTgtNWUzM2JlMWY4NjA0LzAvMzEzMDMzMmUzOTM0MmUzOTJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM0MzUzNzMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnXgkwDQYJKoZIhvcNAQEL
BQADggEBAKH2LeCVtYmY7xNkdX0UXXOeLdn694ITLVjLG4qI991jagNMQT+Q2/rb
ruqsvt1FZXLIMKu4EScld4WoFl+eZhWgQlrOqabVzFKb9fCfxwuqT0c47rp/hjJT
T/nTiJ9qBcnM4fsJdWRwQYGo6+h2h29Ct1epsMkIyj3Q8W3aMaxANG6Y4iPCS9gf
4u5KFIMMWqP9fdmGxX1ff2EgTvc+A3roLpRKbdER69RR3D6QPFZt+W3A+c24EJME
96XWRN4MsQAQ4P3DmYY5VPg/JOmkskkOrhS+OkTf5/WON+WLYLbw3NLxua450P3y
44O0I8uENbOo7aZMcGiFBGaINmbpi6s=
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:31 2025 by rpki-client