Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa
File: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (raw, json)
Hash identifier: gJZ1sW5BxaKi4OlH0Ko1+AD9dXMVkojyx6OKsnKZ2JU=
Subject key identifier: D6:40:F6:FC:0F:F2:FE:EC:41:AE:BF:B9:82:EC:C0:C5:61:58:E8:BE
Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5
Certificate serial: 139B2A8F8756204DEAB811E14DC1D143325CF76C
Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa
Signing time: Fri 15 Nov 2024 08:00:00 +0000
ROA not before: Fri 15 Nov 2024 07:55:00 +0000
ROA not after: Fri 14 Nov 2025 08:00:00 +0000
asID: 131738
IP address blocks: 103.21.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9b:2a:8f:87:56:20:4d:ea:b8:11:e1:4d:c1:d1:43:32:5c:f7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5
Validity
Not Before: Nov 15 07:55:00 2024 GMT
Not After : Nov 14 08:00:00 2025 GMT
Subject: CN=D640F6FC0FF2FEEC41AEBFB982ECC0C56158E8BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:79:d8:eb:1d:0d:53:ad:11:aa:78:ab:ab:
05:fd:36:54:75:81:6c:f0:4c:3a:c2:a4:31:fc:a1:
17:76:d4:a7:ba:2d:25:e2:ad:52:ea:da:3a:38:ea:
ce:eb:e1:aa:40:76:a3:20:a4:6b:95:4e:10:47:da:
ab:8c:a8:a5:99:32:ed:b4:12:3f:fb:1e:85:03:1b:
bc:c8:52:a9:32:e5:22:9c:21:e7:38:1d:d5:b2:14:
84:98:28:b2:94:9a:48:3c:0b:0c:03:01:6f:db:56:
ce:35:bf:2b:82:d3:b0:c3:94:dc:53:bb:ae:57:c0:
1a:10:d1:76:52:36:96:f9:47:b1:7e:60:43:44:c9:
fd:f2:1c:92:e5:14:c5:bb:aa:38:d2:d5:61:97:f1:
cf:f2:98:3a:ba:b9:eb:cc:f9:e1:e4:19:8a:53:a5:
a4:b4:28:6e:03:6e:8d:d5:db:2d:1f:96:44:71:12:
e7:0f:ba:f0:01:85:39:67:3e:81:73:92:44:51:75:
4d:91:d1:b5:78:9f:72:b9:a2:6b:0d:03:4f:f1:85:
f3:a2:34:e5:f3:18:d4:04:5a:ce:f4:ba:d4:b3:6f:
ad:b4:f9:4c:25:6e:2a:46:89:24:c2:21:62:f0:c4:
6e:99:6c:85:db:f9:4f:82:7f:f4:77:85:86:81:41:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:40:F6:FC:0F:F2:FE:EC:41:AE:BF:B9:82:EC:C0:C5:61:58:E8:BE
X509v3 Authority Key Identifier:
keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.93.0/24
Signature Algorithm: sha256WithRSAEncryption
33:24:3a:03:99:04:f0:a7:79:12:33:f3:ea:da:92:81:0d:8a:
cc:7a:ca:f9:96:a6:36:64:42:61:37:19:9c:10:2b:30:19:b0:
3f:9c:a1:42:69:65:d7:4b:41:4d:71:a9:77:f4:4a:b9:fe:b1:
5f:1c:4f:3a:1d:a3:47:8b:f9:dd:25:8c:ec:49:df:f6:a9:e5:
94:6a:d6:9f:44:49:84:f5:6d:d8:70:ab:ce:f6:ba:5e:78:aa:
06:94:fb:67:a9:ee:56:c0:5f:8b:97:58:1e:c8:7e:8c:03:20:
8c:58:94:ad:d2:55:5a:fe:c0:16:e3:5d:9e:7f:f4:48:c4:15:
f7:59:50:f5:fc:76:63:fe:a5:2f:59:6b:67:fb:1f:c3:78:a3:
8c:2b:30:bc:14:09:17:1e:4e:26:d0:01:f0:17:2a:6f:e2:df:
77:fc:9e:a7:38:ff:e9:b3:e4:c6:80:5c:44:21:cd:8b:87:c8:
da:ad:f9:9a:8c:b6:45:30:bd:f8:c9:6a:7a:c4:f6:39:5a:70:
d4:1b:b7:d4:59:40:05:71:76:bd:5c:a0:59:cc:ca:e9:68:30:
c8:2b:fb:a8:28:fe:8f:3c:04:c2:91:6a:9a:bf:ea:1b:b8:c7:
02:5c:69:6d:4c:33:0e:59:df:f9:81:41:51:9b:d8:02:d1:15:
c5:90:54:60
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUE5sqj4dWIE3quBHhTcHRQzJc92wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2
QkNDMjhFNTAeFw0yNDExMTUwNzU1MDBaFw0yNTExMTQwODAwMDBaMDMxMTAvBgNV
BAMTKEQ2NDBGNkZDMEZGMkZFRUM0MUFFQkZCOTgyRUNDMEM1NjE1OEU4QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQXnY6x0NU60RqnirqwX9NlR1
gWzwTDrCpDH8oRd21Ke6LSXirVLq2jo46s7r4apAdqMgpGuVThBH2quMqKWZMu20
Ej/7HoUDG7zIUqky5SKcIec4HdWyFISYKLKUmkg8CwwDAW/bVs41vyuC07DDlNxT
u65XwBoQ0XZSNpb5R7F+YENEyf3yHJLlFMW7qjjS1WGX8c/ymDq6uevM+eHkGYpT
paS0KG4Dbo3V2y0flkRxEucPuvABhTlnPoFzkkRRdU2R0bV4n3K5omsNA0/xhfOi
NOXzGNQEWs70utSzb620+UwlbipGiSTCIWLwxG6ZbIXb+U+Cf/R3hYaBQfCZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU1kD2/A/y/uxBrr+5guzAxWFY6L4wHwYDVR0j
BBgwFoAUghBJu9IsM1pQhQ8WqxWcDGvMKOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZGU4ZTE4ZC1hMDQ3LTQ1OTAtOWU1Ni00NjRhNzNlMjNjNmMvMC84MjEwNDlCQkQy
MkMzMzVBNTA4NTBGMTZBQjE1OUMwQzZCQ0MyOEU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2QkND
MjhFNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkZThlMThkLWEwNDctNDU5MC05
ZTU2LTQ2NGE3M2UyM2M2Yy8wLzMxMzAzMzJlMzIzMTJlMzkzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcVXTANBgkqhkiG
9w0BAQsFAAOCAQEAMyQ6A5kE8Kd5EjPz6tqSgQ2KzHrK+ZamNmRCYTcZnBArMBmw
P5yhQmll10tBTXGpd/RKuf6xXxxPOh2jR4v53SWM7Enf9qnllGrWn0RJhPVt2HCr
zva6XniqBpT7Z6nuVsBfi5dYHsh+jAMgjFiUrdJVWv7AFuNdnn/0SMQV91lQ9fx2
Y/6lL1lrZ/sfw3ijjCswvBQJFx5OJtAB8Bcqb+Lfd/yepzj/6bPkxoBcRCHNi4fI
2q35moy2RTC9+MlqesT2OVpw1Bu31FlABXF2vVygWczK6WgwyCv7qCj+jzwEwpFq
mr/qG7jHAlxpbUwzDlnf+YFBUZvYAtEVxZBUYA==
-----END CERTIFICATE-----
Generated at Fri May 2 01:32:11 2025 by rpki-client