Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e312e302f32342d3234203d3e2039333431.roa
File: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: iq5IAgV/ZMFtmge6dr231dN4pxG0uQlklK/RGgI/gfc=
Subject key identifier: 0E:7F:B0:EE:F0:92:14:1D:71:34:1E:09:06:7A:11:64:94:97:6D:A6
Certificate issuer: /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
Certificate serial: 2E6E5AD2DF4B5D77543E10DA0C3BE3DD1A87C77C
Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e312e302f32342d3234203d3e2039333431.roa
Signing time: Wed 15 Jan 2025 16:00:03 +0000
ROA not before: Wed 15 Jan 2025 15:55:03 +0000
ROA not after: Wed 14 Jan 2026 16:00:03 +0000
asID: 9341
IP address blocks: 103.180.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6e:5a:d2:df:4b:5d:77:54:3e:10:da:0c:3b:e3:dd:1a:87:c7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
Validity
Not Before: Jan 15 15:55:03 2025 GMT
Not After : Jan 14 16:00:03 2026 GMT
Subject: CN=0E7FB0EEF092141D71341E09067A116494976DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:2b:96:1a:29:2b:60:5a:d2:5c:fa:e0:06:
c1:a2:d1:8b:39:44:44:66:fe:76:c0:f7:9a:99:2a:
42:26:e7:b3:f9:8e:09:38:05:f4:7c:39:a5:d7:69:
c5:b2:81:29:8b:93:9a:4f:7d:fe:b1:6f:08:cd:01:
6e:ca:8a:93:8c:5d:57:51:51:67:67:ca:4b:9e:11:
fb:56:79:b3:56:02:c9:5d:06:8b:20:35:9d:be:1e:
a1:c4:de:10:0f:b7:04:fe:b3:10:81:f8:17:82:58:
fa:26:22:17:a3:19:70:09:37:3c:0f:62:a0:83:b6:
d2:cb:aa:fb:57:5c:34:d3:c1:fd:e6:a4:ae:b0:06:
f1:51:d8:be:07:23:93:5c:0e:2a:97:e9:45:d0:f7:
f9:84:7e:b3:00:16:f5:c8:c3:ee:79:03:ad:71:bc:
a9:3a:51:fc:e1:50:8e:66:34:d6:ad:c5:e9:f6:6e:
84:52:83:6a:c0:07:d9:8d:14:97:4f:41:e9:9e:7e:
8f:5b:d5:76:3c:f1:7d:f6:3f:9a:46:0d:24:ec:db:
0b:49:91:7c:46:4e:54:3a:e3:6d:ab:78:13:7d:d6:
e9:32:b8:12:7e:ee:14:b3:7a:96:35:58:6f:2f:68:
af:f1:ec:d9:15:41:8c:de:cd:d3:57:58:2d:26:35:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7F:B0:EE:F0:92:14:1D:71:34:1E:09:06:7A:11:64:94:97:6D:A6
X509v3 Authority Key Identifier:
keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e312e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:20:d5:39:23:95:b4:48:77:6b:a6:bd:d6:3d:e5:85:1c:38:
92:91:6c:9a:a3:93:db:c4:aa:d9:d7:7b:f2:78:94:3a:ff:dd:
1f:02:ac:27:f0:5e:cd:c6:d4:f3:9a:1a:05:fb:08:27:b6:6c:
f4:2e:29:05:82:89:19:5d:e4:93:63:f1:91:53:43:47:d9:57:
8e:c9:22:05:c5:9e:22:70:34:40:7a:a2:d7:14:fe:f8:ec:85:
18:e5:5e:be:d2:dc:02:c2:9b:54:a0:44:f9:4c:92:d0:ee:c5:
e3:df:fb:25:0d:6e:ef:de:f0:e0:ca:fc:83:67:52:3c:04:2e:
72:0e:36:85:b7:63:39:b3:d6:3b:2f:53:80:dd:69:97:c5:5d:
9b:b1:d7:b4:64:eb:2c:58:9c:b8:48:5d:39:74:47:e0:9c:a9:
52:6b:ba:36:62:36:ff:90:fd:51:01:e1:a9:de:ed:2a:39:9a:
5c:9e:1f:31:36:56:db:23:4d:20:23:02:2b:42:b9:78:97:17:
68:96:78:f4:b8:fb:56:a4:1f:f0:e1:30:4e:cd:96:e6:2e:e6:
45:da:cb:f4:72:06:17:f6:44:20:c3:8d:8f:b4:e9:0c:4e:be:
c1:f0:52:fb:a4:6d:c8:04:57:32:20:b8:0e:24:0f:c2:d2:39:
9c:9c:5e:a8
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIULm5a0t9LXXdUPhDaDDvj3RqHx3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUw
MjNGQjcwRjAeFw0yNTAxMTUxNTU1MDNaFw0yNjAxMTQxNjAwMDNaMDMxMTAvBgNV
BAMTKDBFN0ZCMEVFRjA5MjE0MUQ3MTM0MUUwOTA2N0ExMTY0OTQ5NzZEQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFSuWGikrYFrSXPrgBsGi0Ys5
RERm/nbA95qZKkIm57P5jgk4BfR8OaXXacWygSmLk5pPff6xbwjNAW7KipOMXVdR
UWdnykueEftWebNWAsldBosgNZ2+HqHE3hAPtwT+sxCB+BeCWPomIhejGXAJNzwP
YqCDttLLqvtXXDTTwf3mpK6wBvFR2L4HI5NcDiqX6UXQ9/mEfrMAFvXIw+55A61x
vKk6UfzhUI5mNNatxen2boRSg2rAB9mNFJdPQemefo9b1XY88X32P5pGDSTs2wtJ
kXxGTlQ6422reBN91ukyuBJ+7hSzepY1WG8vaK/x7NkVQYzezdNXWC0mNd4JAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUDn+w7vCSFB1xNB4JBnoRZJSXbaYwHwYDVR0j
BBgwFoAUJrBDMfPbpwtpTy//NxyF7gI/tw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YThhOWE4MS0wYTUyLTRhNTAtYjdmNi1hMzZmODZmM2QyYzcvMC8yNkIwNDMzMUYz
REJBNzBCNjk0RjJGRkYzNzFDODVFRTAyM0ZCNzBGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUwMjNG
QjcwRi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3
ZjYtYTM2Zjg2ZjNkMmM3LzAvMzEzMDMzMmUzMTM4MzAyZTMxMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntAEwDQYJKoZIhvcNAQEL
BQADggEBAC8g1TkjlbRId2umvdY95YUcOJKRbJqjk9vEqtnXe/J4lDr/3R8CrCfw
Xs3G1POaGgX7CCe2bPQuKQWCiRld5JNj8ZFTQ0fZV47JIgXFniJwNEB6otcU/vjs
hRjlXr7S3ALCm1SgRPlMktDuxePf+yUNbu/e8ODK/INnUjwELnIONoW3Yzmz1jsv
U4DdaZfFXZux17Rk6yxYnLhIXTl0R+CcqVJrujZiNv+Q/VEB4ane7So5mlyeHzE2
VtsjTSAjAitCuXiXF2iWePS4+1akH/DhME7NluYu5kXay/RyBhf2RCDDjY+06QxO
vsHwUvukbcgEVzIguA4kD8LSOZycXqg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:47 2025 by rpki-client