Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa
File: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (raw, json)
Hash identifier: tcjkZKrAqQ9yYmgw2ICh6qsTS+FTZ8ZlcH4lGdwpZyQ=
Subject key identifier: C7:17:D7:A4:B0:84:11:D3:BA:89:4D:A7:B9:CE:87:E7:F9:36:60:64
Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A
Certificate serial: 57B835ABAF3E5AE186A85CAE10030013807F989E
Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa
Signing time: Fri 09 Aug 2024 05:00:46 +0000
ROA not before: Fri 09 Aug 2024 04:55:46 +0000
ROA not after: Fri 08 Aug 2025 05:00:46 +0000
asID: 55688
IP address blocks: 103.16.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b8:35:ab:af:3e:5a:e1:86:a8:5c:ae:10:03:00:13:80:7f:98:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A
Validity
Not Before: Aug 9 04:55:46 2024 GMT
Not After : Aug 8 05:00:46 2025 GMT
Subject: CN=C717D7A4B08411D3BA894DA7B9CE87E7F9366064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:91:e3:64:6f:d2:60:6a:41:e6:ae:c1:75:
db:7d:b9:92:a2:ec:4c:15:62:85:5e:25:2e:81:4d:
fc:fd:13:4f:10:41:75:8d:b2:89:54:e6:b4:30:39:
28:ce:8f:1b:09:f7:53:9e:f3:25:1d:19:0c:70:2e:
4b:b8:82:77:7a:26:dc:d4:52:a7:36:5e:1d:88:68:
a0:e5:c9:83:f3:00:93:8f:2e:a4:d6:3f:74:bb:c3:
68:02:e8:ff:d2:8f:eb:09:c2:c2:56:56:b3:35:df:
40:2a:ff:f8:19:4e:70:0f:4f:85:c7:78:e3:5e:f5:
be:d5:fa:f4:68:c9:b8:a6:d9:ed:21:74:a2:d6:71:
a0:ec:e1:ff:b7:b0:33:2c:32:9f:9f:b0:a4:db:32:
1c:27:37:49:cb:55:24:0c:d2:31:17:52:32:64:b1:
3e:fd:46:c4:6c:e1:93:19:d1:7e:db:8e:f1:f3:3e:
e9:3b:dd:31:5f:cf:6a:83:80:65:d0:e3:59:a4:1a:
fc:f9:0f:60:6d:f4:dc:6a:fd:7d:2a:19:da:8b:97:
62:91:66:1e:71:e9:2f:28:04:b6:f0:a0:98:90:37:
a9:18:da:36:c7:92:7a:7b:8e:4d:59:11:bd:98:e3:
53:92:58:4f:9e:4d:81:57:c2:d6:3c:66:5f:c5:34:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:17:D7:A4:B0:84:11:D3:BA:89:4D:A7:B9:CE:87:E7:F9:36:60:64
X509v3 Authority Key Identifier:
keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.116.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:98:45:c4:b6:57:c2:13:de:96:ac:7d:c9:85:c7:1f:cd:9c:
5f:2e:f8:d5:f8:e9:93:3b:8d:39:b4:a6:70:1c:94:fa:d2:a6:
45:34:7d:84:08:4f:9a:e6:89:fe:2e:34:27:c7:0d:52:5f:a5:
31:fc:29:89:98:3e:37:2d:24:ae:04:88:34:85:d1:fd:59:eb:
4f:4c:77:f6:4b:a7:ad:c6:58:b3:30:eb:09:a9:a6:e6:d3:bd:
93:36:b1:c2:df:3c:1b:a9:3e:27:04:ef:da:d2:b3:a9:e8:02:
04:88:47:db:4d:76:cb:0a:2e:15:f7:8c:40:56:a3:7e:74:a0:
98:c7:8c:5f:0e:38:06:81:5a:6a:59:10:95:cc:67:50:6f:6c:
2d:c2:d3:d9:d4:1c:e3:01:8d:08:73:04:ba:0e:cb:11:fb:8e:
7c:84:22:f1:ae:f8:dd:32:41:fb:79:81:10:8e:57:ee:0f:42:
9e:b9:1e:3b:5e:d2:20:6e:06:cd:61:63:e8:b9:60:f3:70:dc:
9a:2c:50:d6:7c:20:c2:8b:eb:a4:3f:4b:3c:22:44:bb:81:59:
bf:f9:ba:62:61:bb:0a:52:26:df:c7:28:1a:21:36:64:06:31:
42:25:31:58:3d:d4:8f:4f:f4:cb:f7:9a:87:ae:42:dd:ff:c8:
4c:f0:33:93
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUV7g1q68+WuGGqFyuEAMAE4B/mJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx
MDk0NDQ5QTAeFw0yNDA4MDkwNDU1NDZaFw0yNTA4MDgwNTAwNDZaMDMxMTAvBgNV
BAMTKEM3MTdEN0E0QjA4NDExRDNCQTg5NERBN0I5Q0U4N0U3RjkzNjYwNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+5HjZG/SYGpB5q7Bddt9uZKi
7EwVYoVeJS6BTfz9E08QQXWNsolU5rQwOSjOjxsJ91Oe8yUdGQxwLku4gnd6JtzU
Uqc2Xh2IaKDlyYPzAJOPLqTWP3S7w2gC6P/Sj+sJwsJWVrM130Aq//gZTnAPT4XH
eONe9b7V+vRoybim2e0hdKLWcaDs4f+3sDMsMp+fsKTbMhwnN0nLVSQM0jEXUjJk
sT79RsRs4ZMZ0X7bjvHzPuk73TFfz2qDgGXQ41mkGvz5D2Bt9Nxq/X0qGdqLl2KR
Zh5x6S8oBLbwoJiQN6kY2jbHknp7jk1ZEb2Y41OSWE+eTYFXwtY8Zl/FNJGJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxxfXpLCEEdO6iU2nuc6H5/k2YGQwHwYDVR0j
BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG
RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0
NDQ5QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZThiY2M5LTQzYTEtNGJhYi1i
NmQ4LTFhOTdkMGQzYzIxZC8wLzMxMzAzMzJlMzEzNjJlMzEzMTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcQdDANBgkqhkiG
9w0BAQsFAAOCAQEAGphFxLZXwhPelqx9yYXHH82cXy741fjpkzuNObSmcByU+tKm
RTR9hAhPmuaJ/i40J8cNUl+lMfwpiZg+Ny0krgSINIXR/VnrT0x39kunrcZYszDr
Camm5tO9kzaxwt88G6k+JwTv2tKzqegCBIhH2012ywouFfeMQFajfnSgmMeMXw44
BoFaalkQlcxnUG9sLcLT2dQc4wGNCHMEug7LEfuOfIQi8a743TJB+3mBEI5X7g9C
nrkeO17SIG4GzWFj6Llg83DcmixQ1nwgwovrpD9LPCJEu4FZv/m6YmG7ClIm38co
GiE2ZAYxQiUxWD3Uj0/0y/eah65C3f/ITPAzkw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:28 2025 by rpki-client