Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31302e302f32342d3234203d3e203338343936.roa
File: 3131372e3130332e31302e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: gU+kFqPNE4jQ1PJrgisgTXanz2SSJg/HmmCBijIG1m8=
Subject key identifier: BE:59:E5:B3:6E:9C:63:23:36:C5:84:1C:47:36:DC:63:7E:09:67:0D
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 338F54E98864F9945FBED7DD4AE5F3849940695A
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31302e302f32342d3234203d3e203338343936.roa
Signing time: Wed 17 Apr 2024 05:02:02 +0000
ROA not before: Wed 17 Apr 2024 04:57:02 +0000
ROA not after: Wed 16 Apr 2025 05:02:02 +0000
asID: 38496
IP address blocks: 117.103.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:8f:54:e9:88:64:f9:94:5f:be:d7:dd:4a:e5:f3:84:99:40:69:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Apr 17 04:57:02 2024 GMT
Not After : Apr 16 05:02:02 2025 GMT
Subject: CN=BE59E5B36E9C632336C5841C4736DC637E09670D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f3:85:09:2f:82:98:0c:5a:13:b9:48:9b:a2:
18:70:f7:1f:57:35:8b:1b:25:b6:3f:ca:e8:73:32:
27:7c:7b:5f:a2:b8:a7:1e:50:d4:fd:c4:c1:f1:7c:
f9:37:46:1f:a4:27:d6:4d:e3:d3:61:9f:c2:c9:55:
54:bb:a5:a6:76:fb:00:f7:3c:e9:ea:6f:c6:66:c4:
a3:7b:a9:09:fe:f1:97:72:b3:96:15:4e:99:de:b8:
8d:bc:96:5f:72:dd:19:99:ba:4d:36:96:29:45:3f:
bd:ef:30:1f:97:d8:7b:32:24:3e:94:27:ca:fb:0a:
8d:3b:0f:05:f3:f7:1f:ed:4e:90:ae:54:a2:aa:4f:
ed:af:06:9c:01:19:ed:cf:85:79:29:d8:87:fa:da:
a9:a4:04:11:b3:23:51:5e:99:3d:e7:2d:2a:6a:59:
53:ba:3c:09:a0:4a:59:40:db:35:80:a2:40:d7:e6:
c1:c8:9d:f0:18:e2:0f:92:6d:70:cc:3d:b2:50:30:
77:4f:0d:5c:a0:e1:fe:7d:40:aa:1e:ef:24:b1:92:
02:98:7a:87:67:59:df:f8:5e:ad:c6:d1:5e:b9:c3:
7a:ae:af:98:78:6b:67:f2:93:e2:c8:3f:94:c5:fc:
82:b7:c3:7f:2e:3a:d0:24:9d:22:96:d0:fc:1f:76:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:59:E5:B3:6E:9C:63:23:36:C5:84:1C:47:36:DC:63:7E:09:67:0D
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31302e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.10.0/24
Signature Algorithm: sha256WithRSAEncryption
06:88:a1:25:51:a2:ae:8d:55:02:8f:4e:49:c0:01:1a:3c:f0:
a5:34:0a:57:22:4c:13:4c:c7:08:6a:87:50:a8:fc:c7:8e:60:
67:23:f4:eb:05:70:e7:fc:cf:6d:a6:6c:35:8b:98:f7:36:f9:
f1:39:d3:24:44:27:65:17:d8:84:00:bf:6e:19:7e:2b:e1:19:
ff:38:8b:dc:fa:5b:f1:5b:54:79:61:95:f6:88:db:28:fb:f1:
1a:82:5a:15:86:be:93:88:37:df:41:66:c2:9a:54:ba:06:46:
fb:3a:36:08:83:19:96:6b:d5:25:ae:2a:7b:46:22:a5:9e:50:
a6:69:61:0f:04:65:9c:4e:cb:01:de:a6:91:81:b2:8e:c8:cf:
b0:57:35:d2:da:e5:f7:0d:f9:9e:9f:73:73:1a:fb:9e:56:66:
cf:87:e4:53:61:cf:f8:6f:4b:b0:11:61:b4:05:ca:06:b9:8a:
1a:da:e0:4b:cd:c4:60:7a:15:04:81:5f:12:84:88:9a:19:d0:
d8:2a:7e:20:f3:a2:76:61:43:45:32:03:61:54:bd:29:dc:95:
59:4a:b2:9e:f1:d7:e5:03:0a:4b:fe:e2:b7:6a:19:22:4f:7d:
b4:85:44:ef:0d:16:2a:98:aa:35:5e:e6:3f:e1:fb:20:ce:17:
42:03:f9:ce
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUM49U6Yhk+ZRfvtfdSuXzhJlAaVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA0MTcwNDU3MDJaFw0yNTA0MTYwNTAyMDJaMDMxMTAvBgNV
BAMTKEJFNTlFNUIzNkU5QzYzMjMzNkM1ODQxQzQ3MzZEQzYzN0UwOTY3MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq84UJL4KYDFoTuUibohhw9x9X
NYsbJbY/yuhzMid8e1+iuKceUNT9xMHxfPk3Rh+kJ9ZN49Nhn8LJVVS7paZ2+wD3
POnqb8ZmxKN7qQn+8Zdys5YVTpneuI28ll9y3RmZuk02lilFP73vMB+X2HsyJD6U
J8r7Co07DwXz9x/tTpCuVKKqT+2vBpwBGe3PhXkp2If62qmkBBGzI1FemT3nLSpq
WVO6PAmgSllA2zWAokDX5sHInfAY4g+SbXDMPbJQMHdPDVyg4f59QKoe7ySxkgKY
eodnWd/4Xq3G0V65w3qur5h4a2fyk+LIP5TF/IK3w38uOtAknSKW0PwfdiE9AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUvlnls26cYyM2xYQcRzbcY34JZw0wHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNzJlMzEzMDMzMmUzMTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVnCjANBgkqhkiG
9w0BAQsFAAOCAQEABoihJVGiro1VAo9OScABGjzwpTQKVyJME0zHCGqHUKj8x45g
ZyP06wVw5/zPbaZsNYuY9zb58TnTJEQnZRfYhAC/bhl+K+EZ/ziL3Ppb8VtUeWGV
9ojbKPvxGoJaFYa+k4g330FmwppUugZG+zo2CIMZlmvVJa4qe0YipZ5QpmlhDwRl
nE7LAd6mkYGyjsjPsFc10trl9w35np9zcxr7nlZmz4fkU2HP+G9LsBFhtAXKBrmK
GtrgS83EYHoVBIFfEoSImhnQ2Cp+IPOidmFDRTIDYVS9KdyVWUqynvHX5QMKS/7i
t2oZIk99tIVE7w0WKpiqNV7mP+H7IM4XQgP5zg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:58:51 2025 by rpki-client