Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa
File: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (raw, json)
Hash identifier: 3GDWd5HFOus4BUOBTb2uyHOJpRj1Ipbr33f+C8Wt4s8=
Subject key identifier: 8E:33:97:6D:8A:42:FC:70:D8:9A:96:19:FD:35:13:DB:FF:C9:3A:36
Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial: 02649A146A1AE5BBC7D818A576DB326CA5AE554A
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa
Signing time: Mon 01 Jul 2024 01:02:38 +0000
ROA not before: Mon 01 Jul 2024 00:57:38 +0000
ROA not after: Mon 30 Jun 2025 01:02:38 +0000
asID: 132649
IP address blocks: 103.24.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:64:9a:14:6a:1a:e5:bb:c7:d8:18:a5:76:db:32:6c:a5:ae:55:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Validity
Not Before: Jul 1 00:57:38 2024 GMT
Not After : Jun 30 01:02:38 2025 GMT
Subject: CN=8E33976D8A42FC70D89A9619FD3513DBFFC93A36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c7:8b:1b:80:ab:7c:05:a4:0a:bd:47:e2:c5:
bd:2c:fd:e4:0c:67:d2:f1:76:33:78:d1:21:af:15:
ed:6b:88:28:f2:d4:fb:b2:79:56:12:f6:fc:8f:d0:
81:05:6f:32:10:e1:c9:3e:78:7a:7d:19:8b:b7:69:
ca:e9:f3:98:06:cc:64:0d:55:24:5e:b6:6d:8f:80:
0c:01:53:3a:b7:eb:96:1c:06:36:52:73:dc:9c:87:
77:79:b6:f3:62:6c:10:da:d1:b9:a8:96:11:c1:11:
65:0f:51:1c:29:d8:91:9e:ae:34:f1:30:64:42:3c:
ac:aa:b2:38:c2:44:43:5c:fa:20:f5:ec:3b:d3:e1:
61:a7:f7:ef:23:34:60:20:ef:b6:14:d0:e8:2b:49:
38:a2:75:57:5b:9f:93:88:77:06:94:d1:b6:6c:68:
96:7e:c1:33:95:49:f3:57:0c:6a:28:d6:0f:8e:db:
46:ee:86:0f:8d:e1:df:20:70:a1:51:7a:ea:38:3d:
f4:4b:5f:d2:f9:4e:9a:8d:96:87:0a:de:f8:87:fd:
de:f6:7c:2a:b8:30:a1:43:cf:11:ab:4c:a3:35:26:
ac:fe:c2:8d:a1:4b:ef:7b:d2:91:df:62:59:40:ce:
2d:f8:14:42:40:f9:0b:2c:e6:63:9c:4e:1b:fb:0c:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:97:6D:8A:42:FC:70:D8:9A:96:19:FD:35:13:DB:FF:C9:3A:36
X509v3 Authority Key Identifier:
keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:71:5f:27:88:5d:61:3a:dd:65:88:de:45:80:cf:f5:ed:8a:
e5:5a:0f:fe:96:ae:c6:a1:51:7f:cb:c0:2c:a0:4d:5e:5d:74:
89:79:af:87:8c:60:7d:27:a8:b6:1c:c7:ee:28:b6:82:15:09:
a8:c7:95:0a:08:d8:50:6b:4e:e2:c7:83:c0:38:c6:2a:d2:d8:
04:25:cc:3b:72:01:bc:36:cf:9b:11:e6:04:da:ac:ee:ef:9a:
62:c7:a9:6f:bf:ef:31:a0:6d:a3:eb:b1:ea:70:72:ae:3a:ff:
f9:e6:83:42:23:e4:07:cb:2c:98:7c:5f:aa:b9:d0:b5:d3:77:
fa:2c:12:28:91:f4:7b:fa:0b:7e:25:5f:62:2f:5b:37:28:43:
6b:8a:6b:22:7f:e0:98:d2:82:85:b9:73:ac:57:b3:0d:b0:1f:
5f:2a:9c:5b:98:59:1f:93:fa:6a:bb:70:99:05:de:2d:9a:d6:
9d:03:94:34:ef:7e:ad:2e:96:a8:68:ab:3e:4d:80:e6:6a:a3:
ff:a2:9f:18:9f:ea:72:7c:41:86:cf:3e:a0:44:a1:53:39:97:
d1:e7:11:4f:41:14:3c:48:f5:18:86:ab:72:1a:1e:96:3a:b3:
a9:5e:fc:c9:51:d3:55:75:79:f7:d9:2e:f7:58:6b:aa:73:6b:
9e:fd:cd:6b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAmSaFGoa5bvH2BildtsybKWuVUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz
OTI0NDkxRTAeFw0yNDA3MDEwMDU3MzhaFw0yNTA2MzAwMTAyMzhaMDMxMTAvBgNV
BAMTKDhFMzM5NzZEOEE0MkZDNzBEODlBOTYxOUZEMzUxM0RCRkZDOTNBMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcx4sbgKt8BaQKvUfixb0s/eQM
Z9LxdjN40SGvFe1riCjy1PuyeVYS9vyP0IEFbzIQ4ck+eHp9GYu3acrp85gGzGQN
VSRetm2PgAwBUzq365YcBjZSc9ych3d5tvNibBDa0bmolhHBEWUPURwp2JGerjTx
MGRCPKyqsjjCRENc+iD17DvT4WGn9+8jNGAg77YU0OgrSTiidVdbn5OIdwaU0bZs
aJZ+wTOVSfNXDGoo1g+O20buhg+N4d8gcKFReuo4PfRLX9L5TpqNlocK3viH/d72
fCq4MKFDzxGrTKM1Jqz+wo2hS+970pHfYllAzi34FEJA+Qss5mOcThv7DCoRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUjjOXbYpC/HDYmpYZ/TUT2//JOjYwHwYDVR0j
BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy
NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0
NDkxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlNDZhMzA1LWRmNzctNDU4Ny04
NzAzLWE5MDVjNTM3NzlhYy8wLzMxMzAzMzJlMzIzNDJlMzIzMTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxjUMA0GCSqG
SIb3DQEBCwUAA4IBAQAMcV8niF1hOt1liN5FgM/17YrlWg/+lq7GoVF/y8AsoE1e
XXSJea+HjGB9J6i2HMfuKLaCFQmox5UKCNhQa07ix4PAOMYq0tgEJcw7cgG8Ns+b
EeYE2qzu75pix6lvv+8xoG2j67HqcHKuOv/55oNCI+QHyyyYfF+qudC103f6LBIo
kfR7+gt+JV9iL1s3KENrimsif+CY0oKFuXOsV7MNsB9fKpxbmFkfk/pqu3CZBd4t
mtadA5Q0736tLpaoaKs+TYDmaqP/op8Yn+pyfEGGzz6gRKFTOZfR5xFPQRQ8SPUY
hqtyGh6WOrOpXvzJUdNVdXn32S73WGuqc2ue/c1r
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:31:33 2025 by rpki-client