Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
File: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (raw, json)
Hash identifier: Vowfqb01B3RQZ9usgO233LKgbomEwoSZKEz3MjhkLRs=
Subject key identifier: C8:69:88:F4:4E:5D:25:14:EF:A3:26:35:76:2F:D1:C0:A9:DD:17:D2
Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Certificate serial: 05AD09EBE409BC8BDD5201646DB3CF330B3CE932
Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
Signing time: Mon 15 Apr 2024 10:00:01 +0000
ROA not before: Mon 15 Apr 2024 09:55:01 +0000
ROA not after: Mon 14 Apr 2025 10:00:01 +0000
asID: 149383
IP address blocks: 103.181.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ad:09:eb:e4:09:bc:8b:dd:52:01:64:6d:b3:cf:33:0b:3c:e9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Validity
Not Before: Apr 15 09:55:01 2024 GMT
Not After : Apr 14 10:00:01 2025 GMT
Subject: CN=C86988F44E5D2514EFA32635762FD1C0A9DD17D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:c0:48:80:9a:23:ad:05:f5:87:36:be:f8:
8d:e9:53:e6:6b:26:33:cd:be:b4:c9:b5:33:ef:ba:
78:07:c1:4d:ae:33:b9:3e:dc:15:65:ea:28:18:0a:
d1:5b:76:69:6f:a2:5a:c7:70:b5:80:b3:da:38:96:
a8:df:88:7b:1f:ee:ca:05:a3:35:a4:fd:21:3d:95:
11:f8:0b:a7:74:76:3e:f9:e0:54:ff:ec:f2:4e:37:
5a:93:82:7d:73:63:00:c7:8a:bc:e4:e6:63:aa:4b:
a4:e4:5b:2a:69:ec:51:92:18:e3:40:c8:6d:13:10:
7a:11:2a:7f:eb:3c:05:98:61:ad:81:c2:70:ed:5c:
22:49:18:80:89:3f:1b:34:7a:6c:e5:6c:60:b3:29:
87:6c:41:cc:be:f6:55:9c:ec:a8:65:d7:4b:d3:d3:
73:f5:e5:ad:4c:04:96:7c:5d:ae:0a:75:61:91:72:
e8:c4:79:fc:c0:97:b6:ea:c2:e3:1c:a8:8c:e4:6f:
3d:8f:0d:c4:56:65:1a:b0:b6:2d:3d:52:e3:3c:34:
bb:3f:dd:37:65:92:60:3b:77:38:d2:18:bb:bf:60:
b8:e2:1c:54:af:8e:93:25:50:0c:62:e9:07:87:ec:
a6:17:84:8c:fe:fb:40:13:7c:a0:ad:8c:ba:4b:46:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:69:88:F4:4E:5D:25:14:EF:A3:26:35:76:2F:D1:C0:A9:DD:17:D2
X509v3 Authority Key Identifier:
keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.139.0/24
Signature Algorithm: sha256WithRSAEncryption
38:4b:a1:1e:25:63:58:d1:b4:70:fa:38:b7:3b:fa:5a:d9:8b:
d5:77:46:7b:a6:c3:04:f7:c9:9e:ba:ff:64:5a:58:20:20:ad:
04:92:7a:4f:5c:2c:24:82:60:bf:b6:08:87:a2:c4:16:1f:e5:
d8:74:e2:f4:cc:02:b0:03:d0:9e:b6:c3:58:df:47:24:89:4e:
e6:0d:9f:aa:2a:a4:31:cc:97:ae:a3:e8:bb:7b:57:37:a3:39:
31:27:76:f0:23:89:e8:9d:08:cb:08:57:ac:ae:dc:e9:29:16:
4a:a0:60:01:3d:c6:b2:97:52:af:af:14:1e:ad:00:d2:e5:68:
11:c8:8f:9e:53:21:44:ab:25:1a:c8:b7:fe:56:c3:14:4c:15:
10:fe:3f:73:1b:73:f0:73:0f:64:74:1f:2b:b8:ce:f5:12:88:
6d:10:55:3e:59:57:c1:28:7b:c3:f4:c6:13:1b:1c:28:08:9e:
01:6e:24:e2:41:8a:df:ee:3a:78:3b:20:68:b9:b2:d9:e0:01:
27:76:93:11:0d:1b:e2:a4:77:a9:19:88:e3:ad:f9:5e:4a:97:
f0:c0:35:f3:8a:27:21:59:4e:d8:12:c2:fa:aa:73:3a:e5:4c:
f0:22:48:23:58:88:08:88:07:6e:1d:fc:c0:51:b8:89:a0:a8:
f6:87:59:44
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBa0J6+QJvIvdUgFkbbPPMws86TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx
ODhCQUY3OTAeFw0yNDA0MTUwOTU1MDFaFw0yNTA0MTQxMDAwMDFaMDMxMTAvBgNV
BAMTKEM4Njk4OEY0NEU1RDI1MTRFRkEzMjYzNTc2MkZEMUMwQTlERDE3RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcYcBIgJojrQX1hza++I3pU+Zr
JjPNvrTJtTPvungHwU2uM7k+3BVl6igYCtFbdmlvolrHcLWAs9o4lqjfiHsf7soF
ozWk/SE9lRH4C6d0dj754FT/7PJON1qTgn1zYwDHirzk5mOqS6TkWypp7FGSGONA
yG0TEHoRKn/rPAWYYa2BwnDtXCJJGICJPxs0emzlbGCzKYdsQcy+9lWc7Khl10vT
03P15a1MBJZ8Xa4KdWGRcujEefzAl7bqwuMcqIzkbz2PDcRWZRqwti09UuM8NLs/
3TdlkmA7dzjSGLu/YLjiHFSvjpMlUAxi6QeH7KYXhIz++0ATfKCtjLpLRm/5AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUyGmI9E5dJRTvoyY1di/RwKndF9IwHwYDVR0j
BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE
NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC
QUY3OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3YTExMGU4LWI4YzItNDI3Ny1i
ZWIzLTkyYWE1YjM2OTBmMC8wLzMxMzAzMzJlMzEzODMxMmUzMTMzMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntYswDQYJ
KoZIhvcNAQELBQADggEBADhLoR4lY1jRtHD6OLc7+lrZi9V3RnumwwT3yZ66/2Ra
WCAgrQSSek9cLCSCYL+2CIeixBYf5dh04vTMArAD0J62w1jfRySJTuYNn6oqpDHM
l66j6Lt7VzejOTEndvAjieidCMsIV6yu3OkpFkqgYAE9xrKXUq+vFB6tANLlaBHI
j55TIUSrJRrIt/5WwxRMFRD+P3Mbc/BzD2R0Hyu4zvUSiG0QVT5ZV8Eoe8P0xhMb
HCgIngFuJOJBit/uOng7IGi5stngASd2kxENG+Kkd6kZiOOt+V5Kl/DANfOKJyFZ
TtgSwvqqczrlTPAiSCNYiAiIB24d/MBRuImgqPaHWUQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:08 2025 by rpki-client