Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32332d3233203d3e20313431393238.roa
File: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (raw, json)
Hash identifier: p5EFv5iTI/0Z94GE0UTCYJyVJzWN7502i7/2ecayiBo=
Subject key identifier: C3:43:77:91:CE:3F:89:1C:9E:6D:8E:51:D8:7A:52:D0:5D:32:11:E0
Certificate issuer: /CN=011400263413DE61A797AA22B58664ACD84FD8DF
Certificate serial: 344BC50D3E375ACDB29956846E4C98A74B3B875A
Authority key identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32332d3233203d3e20313431393238.roa
Signing time: Wed 10 Apr 2024 12:35:14 +0000
ROA not before: Wed 10 Apr 2024 12:30:14 +0000
ROA not after: Wed 09 Apr 2025 12:35:14 +0000
asID: 141928
IP address blocks: 103.166.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4b:c5:0d:3e:37:5a:cd:b2:99:56:84:6e:4c:98:a7:4b:3b:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011400263413DE61A797AA22B58664ACD84FD8DF
Validity
Not Before: Apr 10 12:30:14 2024 GMT
Not After : Apr 9 12:35:14 2025 GMT
Subject: CN=C3437791CE3F891C9E6D8E51D87A52D05D3211E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:59:00:38:fa:65:fb:cc:1b:e3:73:d6:1f:
93:15:11:aa:12:d9:ab:0d:31:59:3c:37:d2:20:43:
c1:0b:0c:b8:3f:d1:66:f3:7f:ff:25:8c:d3:5d:3e:
b8:4e:91:b3:25:79:c5:f0:d8:8e:eb:b0:91:3f:ed:
34:5a:b5:29:ab:b9:3c:fd:6d:1e:54:7a:92:d8:aa:
dd:60:6e:6d:7c:df:ea:69:8d:eb:9a:f1:b7:42:25:
77:1c:e9:26:51:e3:0e:c2:f0:4c:2e:8b:a1:d8:e3:
0b:78:df:03:76:e6:bf:a2:9b:d3:17:45:c1:79:87:
0a:ea:2c:02:a8:3a:6f:7c:63:4f:44:05:9f:d3:e1:
56:87:9b:ef:22:bb:f1:8a:02:3f:62:c5:b9:20:d0:
b5:8c:cd:04:67:b2:5a:5a:a2:29:95:85:4d:5b:40:
55:ee:00:8b:19:d4:5e:f1:ba:2d:af:a2:13:00:df:
ea:43:ef:63:62:6e:5c:8b:be:4f:bf:47:2c:01:e6:
56:f4:4f:c3:2b:62:04:51:a8:05:b7:ef:9e:f2:bc:
48:ce:d8:d7:8e:96:e1:bd:d9:cc:e2:30:10:89:32:
d6:d6:59:61:4a:4b:cf:65:30:34:81:31:9a:ce:71:
2e:f4:89:85:c6:a1:30:ad:a3:28:ca:44:78:1a:11:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:43:77:91:CE:3F:89:1C:9E:6D:8E:51:D8:7A:52:D0:5D:32:11:E0
X509v3 Authority Key Identifier:
keyid:01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e302e302f32332d3233203d3e20313431393238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.0.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:f5:67:f0:8d:0d:9f:fc:82:b6:71:3f:da:a2:ba:5b:38:d9:
fd:c0:d3:77:23:d8:bf:60:1b:00:1a:8f:0c:24:18:38:fa:d3:
6a:e6:12:d9:4d:62:1c:53:1d:8a:9d:3a:0a:ee:ec:73:bc:8e:
8a:9a:b2:f1:c9:11:a6:16:70:c3:09:23:70:d4:65:e0:c2:a4:
fd:6d:28:b9:39:3c:5e:fb:2c:24:90:a8:4d:46:3a:3f:ba:85:
a0:da:0e:b5:8a:22:11:58:a5:50:f9:00:70:1a:18:2b:21:36:
c8:9a:39:22:74:43:2d:97:98:37:76:57:ae:06:3a:43:58:df:
89:96:8f:ec:dc:eb:22:43:35:69:3f:df:79:43:e6:01:40:df:
82:6c:da:9c:19:9b:e7:ce:6d:00:d8:bb:7d:0a:94:76:7e:bf:
fb:77:5f:79:ce:84:b9:a0:92:9f:87:66:94:8d:bf:27:d9:7d:
14:ed:a2:c5:6f:b5:0b:ab:33:3f:ed:46:8c:27:d3:2d:ac:8e:
04:f3:54:84:53:09:ef:0a:0e:70:f8:ab:f0:9e:c5:9a:11:1e:
f1:e3:13:de:a1:6b:b9:01:14:75:6b:f4:14:0c:57:37:f6:b3:
a5:f9:1c:42:85:8e:2b:b2:5b:51:e2:7f:c3:ca:9e:ab:7a:94:
6a:14:a6:74
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNEvFDT43Ws2ymVaEbkyYp0s7h1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDExNDAwMjYzNDEzREU2MUE3OTdBQTIyQjU4NjY0QUNE
ODRGRDhERjAeFw0yNDA0MTAxMjMwMTRaFw0yNTA0MDkxMjM1MTRaMDMxMTAvBgNV
BAMTKEMzNDM3NzkxQ0UzRjg5MUM5RTZEOEU1MUQ4N0E1MkQwNUQzMjExRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5j1kAOPpl+8wb43PWH5MVEaoS
2asNMVk8N9IgQ8ELDLg/0Wbzf/8ljNNdPrhOkbMlecXw2I7rsJE/7TRatSmruTz9
bR5UepLYqt1gbm183+ppjeua8bdCJXcc6SZR4w7C8Ewui6HY4wt43wN25r+im9MX
RcF5hwrqLAKoOm98Y09EBZ/T4VaHm+8iu/GKAj9ixbkg0LWMzQRnslpaoimVhU1b
QFXuAIsZ1F7xui2vohMA3+pD72NiblyLvk+/RywB5lb0T8MrYgRRqAW3757yvEjO
2NeOluG92cziMBCJMtbWWWFKS89lMDSBMZrOcS70iYXGoTCtoyjKRHgaEeklAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUw0N3kc4/iRyebY5R2HpS0F0yEeAwHwYDVR0j
BBgwFoAUARQAJjQT3mGnl6oitYZkrNhP2N8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NWU2MDNlMy1mMjNlLTRjNmEtYmIzYy0wNjQwOWQ2NWM4MzgvMC8wMTE0MDAyNjM0
MTNERTYxQTc5N0FBMjJCNTg2NjRBQ0Q4NEZEOERGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDExNDAwMjYzNDEzREU2MUE3OTdBQTIyQjU4NjY0QUNEODRG
RDhERi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1ZTYwM2UzLWYyM2UtNGM2YS1i
YjNjLTA2NDA5ZDY1YzgzOC8wLzMxMzAzMzJlMzEzNjM2MmUzMDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzQzMTM5MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWemADANBgkqhkiG
9w0BAQsFAAOCAQEAyfVn8I0Nn/yCtnE/2qK6WzjZ/cDTdyPYv2AbABqPDCQYOPrT
auYS2U1iHFMdip06Cu7sc7yOipqy8ckRphZwwwkjcNRl4MKk/W0ouTk8XvssJJCo
TUY6P7qFoNoOtYoiEVilUPkAcBoYKyE2yJo5InRDLZeYN3ZXrgY6Q1jfiZaP7Nzr
IkM1aT/feUPmAUDfgmzanBmb585tANi7fQqUdn6/+3dfec6EuaCSn4dmlI2/J9l9
FO2ixW+1C6szP+1GjCfTLayOBPNUhFMJ7woOcPir8J7FmhEe8eMT3qFruQEUdWv0
FAxXN/azpfkcQoWOK7JbUeJ/w8qeq3qUahSmdA==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:04 2025 by rpki-client