Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa
File: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=
Subject key identifier: E6:94:83:31:50:B3:62:48:F4:0E:34:38:49:4B:5D:30:74:80:01:CC
Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D
Certificate serial: 0721192E0C9BB1BCF23B4A97A43121847DD44DB1
Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa
Signing time: Wed 11 Dec 2024 19:00:00 +0000
ROA not before: Wed 11 Dec 2024 18:55:00 +0000
ROA not after: Wed 10 Dec 2025 19:00:00 +0000
asID: 9341
IP address blocks: 103.181.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:21:19:2e:0c:9b:b1:bc:f2:3b:4a:97:a4:31:21:84:7d:d4:4d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D
Validity
Not Before: Dec 11 18:55:00 2024 GMT
Not After : Dec 10 19:00:00 2025 GMT
Subject: CN=E694833150B36248F40E3438494B5D30748001CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:b9:38:37:d8:cc:f3:28:ef:62:84:12:eb:
24:ce:a7:89:3b:c0:d5:99:98:fa:78:e2:88:15:b1:
8a:80:bb:41:35:e9:18:df:29:f8:cc:72:85:81:a2:
5c:33:6c:73:3f:ba:a0:cb:06:1f:88:e7:8b:e0:cb:
e2:13:6d:c0:2b:e0:e1:2c:68:80:17:6e:d0:dc:30:
a8:31:a1:0b:16:87:ae:23:b6:f9:54:f7:6a:57:3d:
49:e6:9e:24:1a:08:9e:bc:7e:d3:06:07:d3:c9:04:
ad:01:ad:6d:74:bb:3d:a3:c2:7d:4a:e0:57:c7:bd:
34:53:29:b5:52:f7:16:c1:c4:f7:3e:12:1a:88:2d:
8c:8d:4b:e8:d9:08:0f:55:97:33:c8:0b:2f:4a:66:
c0:ea:be:3d:e1:29:10:16:16:83:c6:ab:24:a4:48:
7c:f2:8f:7a:8a:94:25:a6:f0:a6:43:e6:c3:28:e7:
1a:5e:7b:73:59:6a:67:9d:97:75:58:f3:89:5f:cc:
89:b9:9e:d0:be:67:e1:70:c2:87:a4:6d:19:ae:1d:
54:fa:5c:5c:f3:ed:9b:c4:49:37:a5:c8:35:6c:a3:
9e:82:09:6b:dc:09:11:bb:38:a7:7d:6e:2f:31:d5:
ee:da:b9:21:7f:ce:a5:c7:9c:d4:30:a7:0e:88:48:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:94:83:31:50:B3:62:48:F4:0E:34:38:49:4B:5D:30:74:80:01:CC
X509v3 Authority Key Identifier:
keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.250.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:47:d1:57:0a:1c:60:cf:95:e5:b0:62:5f:33:ca:56:14:8a:
c9:d2:e1:50:dd:00:cd:89:d4:d6:f4:5d:f1:cf:78:62:da:4f:
89:2f:73:69:26:7b:d7:6c:a7:1a:db:89:c1:00:0a:bf:b6:01:
ed:2c:c5:5b:2b:ac:ce:fb:ae:40:15:c4:bf:5c:76:92:74:ed:
aa:34:cf:c0:53:5a:f9:7b:fc:52:cd:5b:3b:47:5f:32:37:ec:
3e:99:75:96:55:cf:c4:82:db:bd:19:38:e3:98:3e:d7:74:af:
bc:21:a6:40:72:bc:88:d5:72:cd:9a:07:80:e8:3d:e1:b1:3a:
c7:4d:79:ab:12:25:76:5f:af:0a:a4:b9:22:7f:8d:80:02:16:
f5:11:89:95:f6:6d:c9:84:2f:8a:a0:a6:bf:05:c2:2c:c9:2f:
3a:87:cd:5f:24:e5:38:4f:ca:fc:2f:14:91:18:dc:f8:7c:8c:
6e:1a:00:4b:45:9b:85:46:75:19:88:df:c8:56:1c:5b:3d:00:
83:7f:4c:b3:b3:dd:76:c2:bc:5a:3c:33:19:9a:bc:21:b4:6c:
6d:c3:d8:da:41:11:80:14:fc:f5:34:d7:57:da:5b:10:4c:e8:
49:3a:53:48:8d:8d:62:7b:53:c3:8a:35:73:8d:b8:46:e9:4d:
f7:af:18:4d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUByEZLgybsbzyO0qXpDEhhH3UTbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx
RTk4RUI2RDAeFw0yNDEyMTExODU1MDBaFw0yNTEyMTAxOTAwMDBaMDMxMTAvBgNV
BAMTKEU2OTQ4MzMxNTBCMzYyNDhGNDBFMzQzODQ5NEI1RDMwNzQ4MDAxQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFLk4N9jM8yjvYoQS6yTOp4k7
wNWZmPp44ogVsYqAu0E16RjfKfjMcoWBolwzbHM/uqDLBh+I54vgy+ITbcAr4OEs
aIAXbtDcMKgxoQsWh64jtvlU92pXPUnmniQaCJ68ftMGB9PJBK0BrW10uz2jwn1K
4FfHvTRTKbVS9xbBxPc+EhqILYyNS+jZCA9VlzPICy9KZsDqvj3hKRAWFoPGqySk
SHzyj3qKlCWm8KZD5sMo5xpee3NZamedl3VY84lfzIm5ntC+Z+FwwoekbRmuHVT6
XFzz7ZvESTelyDVso56CCWvcCRG7OKd9bi8x1e7auSF/zqXHnNQwpw6ISLhrAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5pSDMVCzYkj0DjQ4SUtdMHSAAcwwHwYDVR0j
BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy
QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4
RUI2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYTU4OWVmLTlmM2QtNDNiYy1i
YTMwLWZhMzI2YjcxZjc4Ny8wLzMxMzAzMzJlMzEzODMxMmUzMjM1MzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe1+jANBgkqhkiG
9w0BAQsFAAOCAQEAbkfRVwocYM+V5bBiXzPKVhSKydLhUN0AzYnU1vRd8c94YtpP
iS9zaSZ712ynGtuJwQAKv7YB7SzFWyuszvuuQBXEv1x2knTtqjTPwFNa+Xv8Us1b
O0dfMjfsPpl1llXPxILbvRk445g+13SvvCGmQHK8iNVyzZoHgOg94bE6x015qxIl
dl+vCqS5In+NgAIW9RGJlfZtyYQviqCmvwXCLMkvOofNXyTlOE/K/C8UkRjc+HyM
bhoAS0WbhUZ1GYjfyFYcWz0Ag39Ms7PddsK8WjwzGZq8IbRsbcPY2kERgBT89TTX
V9pbEEzoSTpTSI2NYntTw4o1c424RulN968YTQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:27 2025 by rpki-client