Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e312e302f32342d3234203d3e2039333431.roa
File: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: /hsHlytGSIEPe0GxgSOfGs3J1HDdS9+raMR80Eb5wQY=
Subject key identifier: C3:BB:D4:26:9E:05:21:5A:3F:C2:D6:BF:C9:0A:9A:28:A8:EE:92:3E
Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Certificate serial: 43D31E62EDC885A20D995EC9C035C037273E98F8
Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e312e302f32342d3234203d3e2039333431.roa
Signing time: Wed 11 Dec 2024 19:02:33 +0000
ROA not before: Wed 11 Dec 2024 18:57:33 +0000
ROA not after: Wed 10 Dec 2025 19:02:33 +0000
asID: 9341
IP address blocks: 103.182.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d3:1e:62:ed:c8:85:a2:0d:99:5e:c9:c0:35:c0:37:27:3e:98:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Validity
Not Before: Dec 11 18:57:33 2024 GMT
Not After : Dec 10 19:02:33 2025 GMT
Subject: CN=C3BBD4269E05215A3FC2D6BFC90A9A28A8EE923E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:79:c6:39:24:3f:3d:bb:40:4d:82:64:2c:4e:
1f:d9:88:21:d4:a4:33:ce:a8:64:b9:3f:7f:9b:95:
cd:93:26:5f:24:57:14:19:ef:22:3c:79:3b:35:a9:
a8:96:60:11:84:80:c9:3d:b5:80:09:82:3e:31:b1:
0d:e0:b0:30:8d:7d:fb:10:0e:02:bf:8a:4e:bd:3b:
78:05:5c:93:b3:69:49:5b:aa:c8:e8:44:23:f9:a9:
7b:8b:00:d6:56:98:4b:15:42:47:5f:5c:23:dc:a9:
a7:cf:b7:39:92:ee:19:d7:97:cb:b3:f6:0b:c5:2a:
dc:e6:4d:fa:c7:7e:24:72:7a:33:63:76:77:d1:8e:
30:05:cb:a2:95:4e:fc:a8:fc:24:dc:1a:57:f4:d0:
0e:8f:da:15:b6:47:20:4e:8a:9f:f8:b0:fe:9d:f8:
88:cd:44:f6:91:95:d0:e3:f8:2b:c1:ff:5a:1b:16:
8c:9b:45:ca:9c:3e:a5:6c:96:a7:60:b2:55:51:1d:
c3:4e:b8:f6:42:5f:05:d4:d3:bf:38:b3:98:ad:03:
35:84:ed:2f:63:10:a8:c1:b8:84:b2:07:42:de:1b:
f0:d5:83:21:d4:f0:32:aa:95:ab:73:f0:2f:e8:d0:
8f:5c:9d:7f:9e:24:5c:f1:3b:55:cc:04:a6:65:09:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:D4:26:9E:05:21:5A:3F:C2:D6:BF:C9:0A:9A:28:A8:EE:92:3E
X509v3 Authority Key Identifier:
keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e312e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:29:d4:dc:cf:4e:3c:fd:b3:20:95:01:15:91:27:1a:83:e2:
8e:97:fe:4f:6d:2e:d7:33:41:1c:dc:5c:65:09:ce:6e:05:81:
6d:20:e1:9d:73:f8:8d:be:68:78:2c:55:09:57:25:d8:6e:7e:
38:77:da:f8:fd:4e:52:f9:de:42:40:71:45:34:71:6b:f6:4f:
61:44:49:22:7c:5a:e7:4e:e6:8c:cb:e8:63:f1:96:0d:61:5b:
92:57:b2:ab:c5:96:2f:44:c1:b8:db:e3:b3:40:ae:ae:b0:c8:
3b:93:a6:20:e6:30:4d:6d:50:49:36:fe:f1:ea:60:61:55:9d:
6f:c9:7b:ca:ac:f9:43:b5:9e:8b:f5:d9:3c:f9:1f:d6:e6:76:
d2:af:7a:0d:d2:b5:0c:fb:3b:ec:9d:a0:c4:b6:55:05:52:20:
e1:0c:c4:24:a9:5d:84:de:06:43:24:2d:e7:ec:37:75:a9:d4:
af:ac:9e:cc:8e:c2:80:29:02:ff:b4:f5:5e:1b:32:2b:07:66:
82:f2:26:c6:bd:cf:22:04:ae:50:2a:c2:57:24:6f:79:fa:79:
dc:5b:11:8e:b7:dd:c2:c2:6e:d9:37:c6:c7:4e:a9:07:e7:58:
14:88:e4:c5:58:5e:45:a3:cd:71:29:51:fe:fe:d1:a8:bb:8c:
1c:6e:59:e2
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUQ9MeYu3IhaINmV7JwDXANyc+mPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE
OTA0NTkyNTAeFw0yNDEyMTExODU3MzNaFw0yNTEyMTAxOTAyMzNaMDMxMTAvBgNV
BAMTKEMzQkJENDI2OUUwNTIxNUEzRkMyRDZCRkM5MEE5QTI4QThFRTkyM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqecY5JD89u0BNgmQsTh/ZiCHU
pDPOqGS5P3+blc2TJl8kVxQZ7yI8eTs1qaiWYBGEgMk9tYAJgj4xsQ3gsDCNffsQ
DgK/ik69O3gFXJOzaUlbqsjoRCP5qXuLANZWmEsVQkdfXCPcqafPtzmS7hnXl8uz
9gvFKtzmTfrHfiRyejNjdnfRjjAFy6KVTvyo/CTcGlf00A6P2hW2RyBOip/4sP6d
+IjNRPaRldDj+CvB/1obFoybRcqcPqVslqdgslVRHcNOuPZCXwXU0784s5itAzWE
7S9jEKjBuISyB0LeG/DVgyHU8DKqlatz8C/o0I9cnX+eJFzxO1XMBKZlCQ2pAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUw7vUJp4FIVo/wta/yQqaKKjukj4wHwYDVR0j
BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB
NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0
NTkyNS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi
MGMtZDYzYjQ4MjRkMDBlLzAvMzEzMDMzMmUzMTM4MzIyZTMxMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntgEwDQYJKoZIhvcNAQEL
BQADggEBAEsp1NzPTjz9syCVARWRJxqD4o6X/k9tLtczQRzcXGUJzm4FgW0g4Z1z
+I2+aHgsVQlXJdhufjh32vj9TlL53kJAcUU0cWv2T2FESSJ8WudO5ozL6GPxlg1h
W5JXsqvFli9Ewbjb47NArq6wyDuTpiDmME1tUEk2/vHqYGFVnW/Je8qs+UO1nov1
2Tz5H9bmdtKveg3StQz7O+ydoMS2VQVSIOEMxCSpXYTeBkMkLefsN3Wp1K+snsyO
woApAv+09V4bMisHZoLyJsa9zyIErlAqwlckb3n6edxbEY633cLCbtk3xsdOqQfn
WBSI5MVYXkWjzXEpUf7+0ai7jBxuWeI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:50 2025 by rpki-client