Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa
File: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier: 6kBcLlz4I+EwiYd/zHv8YINF31MEROhjhbQ+A0qjPjE=
Subject key identifier: 76:E9:C8:5C:80:49:2C:CB:51:02:20:AA:6E:9E:23:55:5C:EE:79:BA
Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4
Certificate serial: 21EDECA781F98A199AF020735FECD74443C8D5F6
Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa
Signing time: Wed 11 Dec 2024 19:02:08 +0000
ROA not before: Wed 11 Dec 2024 18:57:08 +0000
ROA not after: Wed 10 Dec 2025 19:02:08 +0000
asID: 9341
IP address blocks: 103.181.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ed:ec:a7:81:f9:8a:19:9a:f0:20:73:5f:ec:d7:44:43:c8:d5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4
Validity
Not Before: Dec 11 18:57:08 2024 GMT
Not After : Dec 10 19:02:08 2025 GMT
Subject: CN=76E9C85C80492CCB510220AA6E9E23555CEE79BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:9c:c7:6e:6e:75:96:1d:c4:c8:38:c7:d4:
48:b0:dd:ab:82:da:20:bf:7e:16:1b:b6:51:5f:03:
21:99:4c:1f:7f:bb:8d:4b:c0:2a:7c:49:25:43:9a:
f4:d7:47:88:4a:60:89:73:b8:aa:4d:8e:57:9b:d1:
ef:08:80:85:74:1e:fd:c6:ea:35:35:25:5a:5d:36:
39:59:84:3b:d1:3f:05:65:d2:95:a8:f0:9c:cd:77:
ae:79:0b:a4:cb:ce:1f:9d:7f:0b:db:ea:4c:7d:2b:
d8:36:28:01:aa:11:9f:aa:28:a5:e4:7f:45:00:89:
45:3a:5b:56:85:5a:14:24:66:82:ec:8e:d8:c6:4c:
58:96:38:0f:e1:25:84:7c:a1:0d:f3:15:c8:7b:4f:
39:24:52:a2:ec:77:3a:86:5a:05:94:fe:a0:b5:14:
ba:63:d9:4c:27:75:5c:c9:e8:5c:e9:e1:37:cc:a2:
49:f4:19:e7:9a:6b:a1:ed:c1:6f:58:07:e4:63:32:
fe:f6:fb:d1:35:7d:e4:3b:20:fc:b4:ee:62:44:f8:
18:82:27:da:8b:d6:bf:90:12:44:07:64:94:3d:92:
0f:45:36:15:fd:1a:80:77:c0:96:af:b6:f9:93:73:
f8:08:47:d6:a7:96:dd:19:1f:e7:f4:b4:aa:7f:e2:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E9:C8:5C:80:49:2C:CB:51:02:20:AA:6E:9E:23:55:5C:EE:79:BA
X509v3 Authority Key Identifier:
keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.136.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:f4:aa:ce:74:a9:89:31:ba:c6:c2:bc:e8:73:e6:db:7e:a2:
41:09:8b:14:8f:60:06:dc:fc:f3:61:5f:53:67:f7:c1:56:11:
4b:8c:38:4e:f0:52:7c:9b:f2:bf:bf:8a:8e:b4:02:15:50:77:
e5:f3:a0:ac:a9:63:39:62:1e:25:ca:fa:29:e9:93:3b:63:40:
3d:9b:18:50:ae:0b:3f:44:b1:86:33:45:da:e8:be:2f:02:77:
ef:e3:f4:b0:b9:d9:81:82:c0:f2:cf:2b:67:f8:f2:49:8a:65:
2f:66:29:3c:b5:68:63:5a:bb:f4:6d:24:e9:0c:d5:02:d7:8f:
92:6f:21:4f:d2:c9:3b:06:25:c5:bc:09:fd:46:51:30:89:d2:
77:a3:03:c3:fe:a2:d4:01:a0:41:71:a0:3a:97:25:57:93:db:
ae:1f:a3:f4:47:1b:fc:96:12:54:bc:f3:70:64:38:b6:29:32:
c6:b0:db:d0:1c:bf:65:1d:7a:29:4c:f3:95:39:c5:16:aa:a4:
b2:8d:be:c4:ae:ad:71:f7:c7:dd:fd:72:f9:f8:d8:27:ab:50:
94:e7:4e:e4:e7:22:4e:2e:26:a2:e0:f6:f2:b6:2a:50:cf:8d:
f3:1f:fa:dc:97:43:16:e4:92:76:05:40:b0:53:65:b1:ef:2e:
2c:14:85:3a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIe3sp4H5ihma8CBzX+zXREPI1fYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3
NzU4ODRBNDAeFw0yNDEyMTExODU3MDhaFw0yNTEyMTAxOTAyMDhaMDMxMTAvBgNV
BAMTKDc2RTlDODVDODA0OTJDQ0I1MTAyMjBBQTZFOUUyMzU1NUNFRTc5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZZzHbm51lh3EyDjH1Eiw3auC
2iC/fhYbtlFfAyGZTB9/u41LwCp8SSVDmvTXR4hKYIlzuKpNjleb0e8IgIV0Hv3G
6jU1JVpdNjlZhDvRPwVl0pWo8JzNd655C6TLzh+dfwvb6kx9K9g2KAGqEZ+qKKXk
f0UAiUU6W1aFWhQkZoLsjtjGTFiWOA/hJYR8oQ3zFch7TzkkUqLsdzqGWgWU/qC1
FLpj2UwndVzJ6Fzp4TfMokn0Geeaa6HtwW9YB+RjMv72+9E1feQ7IPy07mJE+BiC
J9qL1r+QEkQHZJQ9kg9FNhX9GoB3wJavtvmTc/gIR9anlt0ZH+f0tKp/4rO9AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUdunIXIBJLMtRAiCqbp4jVVzuebowHwYDVR0j
BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw
NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4
ODRBNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3NmZkYzYwLTgwMjMtNDBjZC1h
YWE0LWNkNmVkMjJjNGQ0NS8wLzMxMzAzMzJlMzEzODMxMmUzMTMzMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe1iDANBgkqhkiG
9w0BAQsFAAOCAQEALvSqznSpiTG6xsK86HPm236iQQmLFI9gBtz882FfU2f3wVYR
S4w4TvBSfJvyv7+KjrQCFVB35fOgrKljOWIeJcr6KemTO2NAPZsYUK4LP0SxhjNF
2ui+LwJ37+P0sLnZgYLA8s8rZ/jySYplL2YpPLVoY1q79G0k6QzVAtePkm8hT9LJ
OwYlxbwJ/UZRMInSd6MDw/6i1AGgQXGgOpclV5Pbrh+j9Ecb/JYSVLzzcGQ4tiky
xrDb0By/ZR16KUzzlTnFFqqkso2+xK6tcffH3f1y+fjYJ6tQlOdO5OciTi4mouD2
8rYqUM+N8x/63JdDFuSSdgVAsFNlse8uLBSFOg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:25 2025 by rpki-client