Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa
File: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (raw, json)
Hash identifier: 2i8HfdlFIHezHTi1m8fyUROS/IcCg2re+ftnVgBoAd4=
Subject key identifier: 94:D6:72:0B:8F:6A:9A:F4:18:94:62:86:2E:CE:5D:7B:4D:FC:77:A7
Certificate issuer: /CN=5B558AD01277C8212C974318B6352FB28BF683AD
Certificate serial: 3CE9EFC0E286A15029869DF0F904018EC573B4BA
Authority key identifier: 5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa
Signing time: Thu 31 Oct 2024 19:00:02 +0000
ROA not before: Thu 31 Oct 2024 18:55:02 +0000
ROA not after: Thu 30 Oct 2025 19:00:02 +0000
asID: 150200
IP address blocks: 103.196.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e9:ef:c0:e2:86:a1:50:29:86:9d:f0:f9:04:01:8e:c5:73:b4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B558AD01277C8212C974318B6352FB28BF683AD
Validity
Not Before: Oct 31 18:55:02 2024 GMT
Not After : Oct 30 19:00:02 2025 GMT
Subject: CN=94D6720B8F6A9AF4189462862ECE5D7B4DFC77A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:da:f6:5c:7f:99:0d:51:dd:b7:a9:51:c0:
db:46:b2:bd:12:44:eb:a4:f8:3d:87:da:10:e9:7d:
0e:e3:40:ad:aa:cd:fa:f6:2c:36:85:4a:98:94:a7:
f8:d2:c5:d5:0c:e2:33:28:43:41:14:48:08:c5:85:
b5:42:65:f6:a1:d7:05:fb:34:2e:73:01:9b:dc:d4:
52:3d:08:07:e0:a7:06:17:86:aa:8c:93:7c:88:9f:
97:b9:f2:13:e4:df:5b:0b:c6:f1:53:4d:06:1b:fa:
b3:b2:60:aa:14:6c:4a:42:cb:3b:84:85:25:c8:61:
d1:c0:b8:74:6d:2e:e2:a9:4d:da:4c:b0:67:1d:df:
75:0b:da:33:46:b9:97:e3:4b:fc:07:fb:76:8b:db:
3b:c5:fe:0b:22:67:12:f5:d4:66:5e:06:8b:ef:12:
f5:f8:31:62:d0:1d:a6:da:1b:fe:ac:ad:f4:10:4f:
6f:48:8c:19:51:58:c8:60:42:ec:02:f0:32:30:60:
fd:f1:4a:e6:e1:0b:a7:49:17:4f:f4:34:a1:c7:4e:
c6:4c:45:1d:76:37:e1:21:9a:5e:f1:ef:28:5d:ad:
31:95:dc:23:db:68:40:af:f4:6a:0f:ef:b3:41:3d:
4a:a1:44:77:00:c0:ac:44:15:c6:2f:aa:85:25:30:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D6:72:0B:8F:6A:9A:F4:18:94:62:86:2E:CE:5D:7B:4D:FC:77:A7
X509v3 Authority Key Identifier:
keyid:5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a9:c9:b4:34:22:02:4e:88:e7:14:27:28:1b:b7:6b:4d:c8:
2d:b6:3f:e8:9d:5f:1c:1e:7a:b9:88:5c:11:a1:1c:c4:38:bd:
d2:c0:9c:e2:ef:03:6a:d6:64:89:9c:e0:92:01:f4:82:61:ba:
f2:83:5a:6e:81:77:d5:8e:97:31:52:a5:02:65:fe:c3:31:12:
87:26:99:ad:2e:43:8a:fd:ba:04:33:9c:47:87:eb:0c:2e:e3:
71:ee:4e:02:2e:c6:c5:11:83:49:b5:7b:c0:d8:37:3e:b9:12:
91:6c:17:86:4c:e0:d2:7c:93:cd:6c:3f:98:af:34:53:92:22:
00:1e:2b:16:5e:36:b0:7f:f9:70:cf:f5:58:66:fb:e8:6d:57:
4a:64:b6:4b:f7:83:8c:9b:74:ff:7a:9c:e8:fe:ff:6d:a5:61:
cb:ba:90:ef:5b:00:5e:a8:e9:4a:41:d6:3a:2d:2d:5c:9c:a5:
0c:07:9f:3b:b0:ca:b3:9e:16:fb:a7:ba:7f:71:76:34:b5:c1:
27:db:da:6e:67:6c:d5:47:c6:65:29:5e:77:7e:21:8c:ea:f3:
5e:49:ad:9c:e7:ec:67:50:9a:3f:de:4a:15:79:ee:f7:3b:8e:
18:b9:03:ea:b6:dd:12:ba:fb:71:94:20:ce:f4:e6:59:df:14:
2f:dc:a5:5a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPOnvwOKGoVAphp3w+QQBjsVztLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4
QkY2ODNBRDAeFw0yNDEwMzExODU1MDJaFw0yNTEwMzAxOTAwMDJaMDMxMTAvBgNV
BAMTKDk0RDY3MjBCOEY2QTlBRjQxODk0NjI4NjJFQ0U1RDdCNERGQzc3QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGl9r2XH+ZDVHdt6lRwNtGsr0S
ROuk+D2H2hDpfQ7jQK2qzfr2LDaFSpiUp/jSxdUM4jMoQ0EUSAjFhbVCZfah1wX7
NC5zAZvc1FI9CAfgpwYXhqqMk3yIn5e58hPk31sLxvFTTQYb+rOyYKoUbEpCyzuE
hSXIYdHAuHRtLuKpTdpMsGcd33UL2jNGuZfjS/wH+3aL2zvF/gsiZxL11GZeBovv
EvX4MWLQHabaG/6srfQQT29IjBlRWMhgQuwC8DIwYP3xSubhC6dJF0/0NKHHTsZM
RR12N+Ehml7x7yhdrTGV3CPbaECv9GoP77NBPUqhRHcAwKxEFcYvqoUlMFQ3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUlNZyC49qmvQYlGKGLs5de038d6cwHwYDVR0j
BBgwFoAUW1WK0BJ3yCEsl0MYtjUvsov2g60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YTViNGZhNC0zMjhjLTRjZjItYWRlMy1jODY4MTMxZDRlMGQvMC81QjU1OEFEMDEy
NzdDODIxMkM5NzQzMThCNjM1MkZCMjhCRjY4M0FELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4QkY2
ODNBRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhNWI0ZmE0LTMyOGMtNGNmMi1h
ZGUzLWM4NjgxMzFkNGUwZC8wLzMxMzAzMzJlMzEzOTM2MmUzNDMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8QoMA0GCSqG
SIb3DQEBCwUAA4IBAQBMqcm0NCICTojnFCcoG7drTcgttj/onV8cHnq5iFwRoRzE
OL3SwJzi7wNq1mSJnOCSAfSCYbryg1pugXfVjpcxUqUCZf7DMRKHJpmtLkOK/boE
M5xHh+sMLuNx7k4CLsbFEYNJtXvA2Dc+uRKRbBeGTODSfJPNbD+YrzRTkiIAHisW
Xjawf/lwz/VYZvvobVdKZLZL94OMm3T/epzo/v9tpWHLupDvWwBeqOlKQdY6LS1c
nKUMB587sMqznhb7p7p/cXY0tcEn29puZ2zVR8ZlKV53fiGM6vNeSa2c5+xnUJo/
3koVee73O44YuQPqtt0SuvtxlCDO9OZZ3xQv3KVa
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:50 2025 by rpki-client