Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa
File: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: gNkqorvk0f2bBTsmEL4MnNlyYJ+Qr0d2hFD2R7VVU4Y=
Subject key identifier: 4D:A6:EF:68:07:D1:CD:97:74:6D:40:65:64:E8:FA:D0:D7:45:85:6B
Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Certificate serial: 7843897CF65F8DA94DC0938F9B8360E8B8163FDA
Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa
Signing time: Wed 11 Dec 2024 19:02:33 +0000
ROA not before: Wed 11 Dec 2024 18:57:33 +0000
ROA not after: Wed 10 Dec 2025 19:02:33 +0000
asID: 9341
IP address blocks: 103.182.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:43:89:7c:f6:5f:8d:a9:4d:c0:93:8f:9b:83:60:e8:b8:16:3f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Validity
Not Before: Dec 11 18:57:33 2024 GMT
Not After : Dec 10 19:02:33 2025 GMT
Subject: CN=4DA6EF6807D1CD97746D406564E8FAD0D745856B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:d8:56:e4:09:40:6b:57:72:83:4c:05:dc:
ba:fb:ac:40:1e:f8:d8:6b:65:62:d5:7b:c4:85:3d:
e7:c7:43:2b:83:9b:46:9c:d2:f9:21:17:6b:08:8d:
00:26:4f:3e:3d:01:e8:1e:54:61:00:68:9c:28:16:
d1:86:8a:e8:24:b1:64:6d:f4:f0:40:b2:a7:ab:92:
bb:16:77:ae:c1:9c:ff:1c:9c:68:9f:59:1e:66:d3:
5b:7b:04:91:91:59:22:ad:4b:b5:e6:c5:a2:82:3b:
a8:22:1d:cc:bd:ea:4c:c0:7b:bc:22:36:1e:10:50:
6f:3e:95:9e:bb:78:3b:40:da:f7:67:91:bf:7e:ac:
db:e0:9d:a0:f9:73:81:e3:12:c2:c6:de:fa:66:4f:
1d:98:a2:0d:92:0a:d5:7f:61:03:41:ce:a5:2c:ea:
75:ba:2c:8d:01:f2:fa:41:34:e2:2c:38:e1:71:80:
0b:f2:42:3c:1d:22:5c:fd:d4:74:eb:8f:81:fe:1d:
3c:e8:99:66:25:d5:7f:e9:b9:e4:51:96:b5:6e:ed:
71:e8:d1:14:5f:f8:3f:61:96:14:d8:7c:52:82:75:
4a:e6:f9:7f:61:e0:b7:04:85:62:55:cb:ab:1f:48:
7a:ca:1f:d9:63:09:17:bb:67:f5:60:40:c9:f7:44:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A6:EF:68:07:D1:CD:97:74:6D:40:65:64:E8:FA:D0:D7:45:85:6B
X509v3 Authority Key Identifier:
keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.0.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:de:4e:43:ed:02:66:35:89:0b:54:4b:e0:e6:af:f3:84:d2:
64:58:59:79:bf:85:85:bc:ec:65:ac:f0:2e:32:61:0f:56:3b:
64:a3:1a:ef:b0:59:8a:29:58:e2:f1:90:ad:c0:3f:c3:94:ad:
a2:71:c0:b0:9d:e7:6f:67:31:52:f2:ff:9c:ee:81:8c:fc:54:
1e:57:59:f7:03:d9:21:f5:2f:a1:15:4f:81:3b:e9:8b:cf:54:
72:f9:2c:43:84:cc:53:8f:eb:05:7c:8f:94:69:f5:2f:31:d8:
6f:ae:71:ce:14:3b:07:ab:1a:0f:00:4a:57:c4:e6:5f:a3:a7:
6d:fb:7e:ee:c9:56:fd:8b:1b:96:2e:23:94:1a:a1:00:29:b2:
c0:d5:7d:ae:c4:5d:3e:ac:d0:0a:c1:03:eb:db:18:18:1b:d0:
6f:75:f7:31:c8:83:f1:e1:2c:c4:be:42:15:b6:66:69:61:08:
75:a5:61:34:1f:a3:2e:b0:11:47:5c:f0:4d:d9:af:6a:36:0e:
34:0c:6f:ea:28:a3:b8:71:38:25:7b:a6:20:97:ff:7b:34:e0:
f0:33:e8:7a:55:10:db:40:0f:d4:6b:44:12:df:30:ba:15:44:
fa:ee:de:96:95:ca:57:28:47:f4:73:64:74:65:cc:3e:76:94:
b4:eb:96:27
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUeEOJfPZfjalNwJOPm4Ng6LgWP9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE
OTA0NTkyNTAeFw0yNDEyMTExODU3MzNaFw0yNTEyMTAxOTAyMzNaMDMxMTAvBgNV
BAMTKDREQTZFRjY4MDdEMUNEOTc3NDZENDA2NTY0RThGQUQwRDc0NTg1NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/thW5AlAa1dyg0wF3Lr7rEAe
+NhrZWLVe8SFPefHQyuDm0ac0vkhF2sIjQAmTz49AegeVGEAaJwoFtGGiugksWRt
9PBAsqerkrsWd67BnP8cnGifWR5m01t7BJGRWSKtS7XmxaKCO6giHcy96kzAe7wi
Nh4QUG8+lZ67eDtA2vdnkb9+rNvgnaD5c4HjEsLG3vpmTx2Yog2SCtV/YQNBzqUs
6nW6LI0B8vpBNOIsOOFxgAvyQjwdIlz91HTrj4H+HTzomWYl1X/pueRRlrVu7XHo
0RRf+D9hlhTYfFKCdUrm+X9h4LcEhWJVy6sfSHrKH9ljCRe7Z/VgQMn3RFgpAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUTabvaAfRzZd0bUBlZOj60NdFhWswHwYDVR0j
BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB
NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0
NTkyNS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi
MGMtZDYzYjQ4MjRkMDBlLzAvMzEzMDMzMmUzMTM4MzIyZTMwMmUzMDJmMzIzMzJk
MzIzMzIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntgAwDQYJKoZIhvcNAQEL
BQADggEBAIveTkPtAmY1iQtUS+Dmr/OE0mRYWXm/hYW87GWs8C4yYQ9WO2SjGu+w
WYopWOLxkK3AP8OUraJxwLCd529nMVLy/5zugYz8VB5XWfcD2SH1L6EVT4E76YvP
VHL5LEOEzFOP6wV8j5Rp9S8x2G+ucc4UOwerGg8ASlfE5l+jp237fu7JVv2LG5Yu
I5QaoQApssDVfa7EXT6s0ArBA+vbGBgb0G919zHIg/HhLMS+QhW2ZmlhCHWlYTQf
oy6wEUdc8E3Zr2o2DjQMb+ooo7hxOCV7piCX/3s04PAz6HpVENtAD9RrRBLfMLoV
RPru3paVylcoR/RzZHRlzD52lLTrlic=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:50 2025 by rpki-client