Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa
File: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (raw, json)
Hash identifier: /cdl8KopWWEAVSKHGwwN7jQvT8+haRS7g+4C1ytM8Dg=
Subject key identifier: 95:55:1C:56:71:BC:79:E8:95:A1:C4:FF:A7:B5:7B:FA:38:41:2D:F5
Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520
Certificate serial: 1E45FCAC802E239256D8A59F169CD2631816522E
Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa
Signing time: Tue 26 Nov 2024 06:00:00 +0000
ROA not before: Tue 26 Nov 2024 05:55:00 +0000
ROA not after: Tue 25 Nov 2025 06:00:00 +0000
asID: 138082
IP address blocks: 103.179.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:45:fc:ac:80:2e:23:92:56:d8:a5:9f:16:9c:d2:63:18:16:52:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520
Validity
Not Before: Nov 26 05:55:00 2024 GMT
Not After : Nov 25 06:00:00 2025 GMT
Subject: CN=95551C5671BC79E895A1C4FFA7B57BFA38412DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:5a:67:2d:2c:60:b9:8a:44:99:24:eb:8e:
f0:80:d6:f4:cf:f5:e5:7d:1a:d4:84:f7:1b:0a:5c:
28:a2:de:a0:8e:ca:66:58:74:ac:12:fc:4e:73:46:
4d:b9:9e:26:aa:81:fa:cb:c2:1b:80:b7:f4:24:98:
b4:48:9e:42:1c:26:14:72:49:28:8d:d3:f9:9a:43:
fb:a9:3d:bc:1e:3c:07:3e:12:db:f1:96:1a:a4:c0:
df:48:2a:30:c8:4a:50:0f:89:94:cd:3e:b6:4e:36:
ba:3e:56:3f:1d:42:14:94:0e:d7:07:05:a6:8b:67:
41:f2:26:79:97:41:4d:8b:dc:7b:39:d7:8b:c6:e3:
70:05:fd:40:99:0b:49:1f:ec:82:4b:15:2b:a5:4a:
d8:8c:6a:c6:49:fc:42:86:26:2c:e3:f7:07:c2:c4:
0b:ab:0a:5f:46:84:51:9c:97:2e:a3:7e:6b:ef:23:
cd:12:35:c5:01:d6:0a:9a:f4:b0:da:39:12:cb:4e:
15:9c:07:a2:26:54:3b:25:05:4b:15:01:13:6d:90:
df:6b:65:e2:2d:f9:bd:1f:fd:ab:28:94:82:16:b3:
ea:2e:44:6f:2b:c5:5c:61:d7:c2:29:31:a3:0a:8e:
10:a5:5d:e9:0a:3c:a5:9c:1e:bb:1f:74:1b:b9:be:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:1C:56:71:BC:79:E8:95:A1:C4:FF:A7:B5:7B:FA:38:41:2D:F5
X509v3 Authority Key Identifier:
keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b8:ef:b8:e8:c9:90:b1:62:a1:4e:92:9d:0e:86:37:5c:f4:
18:da:fe:3f:83:07:a0:fb:61:f9:50:9d:0e:26:34:d6:86:e4:
64:dc:34:73:3e:4d:d7:0a:50:77:b9:f2:f1:de:e8:55:9c:cc:
73:77:27:66:dd:63:f9:e5:53:3e:55:30:ff:23:20:84:ec:1c:
e7:1f:a0:18:6e:39:1d:99:00:43:ee:67:ce:22:02:3d:12:b3:
b6:9f:4a:89:a7:28:58:5e:36:2e:3e:0a:6c:b5:77:3b:4f:7f:
08:61:a1:e8:f4:40:2b:af:b9:cb:47:59:e0:18:65:0c:15:eb:
54:d1:65:d7:57:0a:63:2a:e8:68:18:59:21:9e:7e:2d:c3:67:
e7:80:2e:14:66:eb:dd:40:8f:7f:5b:58:5a:a9:73:d7:7c:de:
80:73:b6:86:14:18:3d:6b:81:ca:b3:96:09:51:70:12:68:e6:
bb:80:4d:f4:10:9e:c0:e5:92:04:a3:4b:95:55:c7:59:c6:09:
2a:dd:5a:79:19:2c:07:25:c1:ea:7e:c0:90:dd:15:06:83:77:
bd:7e:d5:4b:bc:19:29:e2:fd:4e:0f:39:11:88:b9:ef:6c:6d:
46:42:06:2b:65:ae:63:55:a8:17:89:97:f7:1c:3a:90:4a:29:
3a:0b:14:af
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHkX8rIAuI5JW2KWfFpzSYxgWUi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx
QTVEMDUyMDAeFw0yNDExMjYwNTU1MDBaFw0yNTExMjUwNjAwMDBaMDMxMTAvBgNV
BAMTKDk1NTUxQzU2NzFCQzc5RTg5NUExQzRGRkE3QjU3QkZBMzg0MTJERjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDVpnLSxguYpEmSTrjvCA1vTP
9eV9GtSE9xsKXCii3qCOymZYdKwS/E5zRk25niaqgfrLwhuAt/QkmLRInkIcJhRy
SSiN0/maQ/upPbwePAc+EtvxlhqkwN9IKjDISlAPiZTNPrZONro+Vj8dQhSUDtcH
BaaLZ0HyJnmXQU2L3Hs514vG43AF/UCZC0kf7IJLFSulStiMasZJ/EKGJizj9wfC
xAurCl9GhFGcly6jfmvvI80SNcUB1gqa9LDaORLLThWcB6ImVDslBUsVARNtkN9r
ZeIt+b0f/asolIIWs+ouRG8rxVxh18IpMaMKjhClXekKPKWcHrsfdBu5vlqTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUlVUcVnG8eeiVocT/p7V7+jhBLfUwHwYDVR0j
BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx
QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE
MDUyMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjZDI0ZTgyLWYzMDYtNDQwMC1i
MDBhLWQ1OWI0MWUyODZiYi8wLzMxMzAzMzJlMzEzNzM5MmUzODMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7NSMA0GCSqG
SIb3DQEBCwUAA4IBAQBuuO+46MmQsWKhTpKdDoY3XPQY2v4/gweg+2H5UJ0OJjTW
huRk3DRzPk3XClB3ufLx3uhVnMxzdydm3WP55VM+VTD/IyCE7BznH6AYbjkdmQBD
7mfOIgI9ErO2n0qJpyhYXjYuPgpstXc7T38IYaHo9EArr7nLR1ngGGUMFetU0WXX
VwpjKuhoGFkhnn4tw2fngC4UZuvdQI9/W1haqXPXfN6Ac7aGFBg9a4HKs5YJUXAS
aOa7gE30EJ7A5ZIEo0uVVcdZxgkq3Vp5GSwHJcHqfsCQ3RUGg3e9ftVLvBkp4v1O
DzkRiLnvbG1GQgYrZa5jVagXiZf3HDqQSik6CxSv
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:36 2025 by rpki-client