Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa
File: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (raw, json)
Hash identifier: 132Kizc+R6ps/hT6AogJkCilm9HX7+ORPphZ8hVhLQ8=
Subject key identifier: F7:65:B8:58:4D:F6:70:EF:F6:8B:4F:95:8D:C7:EA:A8:B5:64:7E:99
Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
Certificate serial: 31E088F72D13E093A07757ABCCF360CF21607D68
Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa
Signing time: Wed 18 Dec 2024 15:00:02 +0000
ROA not before: Wed 18 Dec 2024 14:55:02 +0000
ROA not after: Wed 17 Dec 2025 15:00:02 +0000
asID: 149373
IP address blocks: 103.180.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e0:88:f7:2d:13:e0:93:a0:77:57:ab:cc:f3:60:cf:21:60:7d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
Validity
Not Before: Dec 18 14:55:02 2024 GMT
Not After : Dec 17 15:00:02 2025 GMT
Subject: CN=F765B8584DF670EFF68B4F958DC7EAA8B5647E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:62:e1:6a:26:ca:6d:ee:37:d6:c5:7a:b5:
6a:cc:05:4a:b9:08:c7:d9:4f:96:15:0c:0a:fc:d5:
b4:b4:1b:a9:17:b2:46:65:36:fa:2f:f2:cd:0a:ed:
5c:21:16:b7:0e:db:90:77:28:30:9b:af:eb:8c:ca:
b1:69:96:c9:a9:36:81:0e:18:9f:ca:00:ed:fa:93:
77:6a:da:b3:4a:99:86:f0:3b:24:10:62:37:8f:d3:
61:2b:dd:95:2f:20:25:72:a0:1a:2b:4b:d8:2f:0b:
c0:17:b6:12:24:1d:8a:1b:27:e6:d7:8c:3e:8f:2f:
0e:7e:0c:c2:eb:80:76:49:cc:ec:6a:4f:18:05:ce:
60:5a:9d:9d:64:dc:84:f1:67:60:73:96:b6:b7:f0:
02:cd:4e:2d:2d:d1:27:90:82:42:88:e2:cc:c9:7e:
e5:8d:19:e4:52:98:ff:d6:b1:8f:17:fc:ae:73:da:
b2:a0:aa:e9:79:58:ef:44:0e:10:f4:47:20:28:83:
41:18:36:13:03:ad:96:b7:7a:f5:5f:b7:26:b9:2b:
22:22:8b:d7:3f:a5:aa:6d:ec:46:9f:1d:2f:f1:69:
ca:9a:0e:9e:32:eb:1b:bb:1a:bb:8e:b4:4f:c0:1d:
71:66:4e:3c:d7:ec:c0:34:31:f6:10:c4:e9:dc:5b:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:65:B8:58:4D:F6:70:EF:F6:8B:4F:95:8D:C7:EA:A8:B5:64:7E:99
X509v3 Authority Key Identifier:
keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:48:0f:28:63:bd:b3:b4:95:3b:e3:c5:ce:37:6e:58:51:6f:
ec:67:cc:a9:fe:c7:20:c8:de:41:5b:d1:e8:85:48:54:d0:57:
c1:1c:7d:56:87:aa:da:a8:a0:d5:63:93:75:7a:5e:da:9e:32:
f1:e0:31:76:ca:b4:2c:42:db:be:ce:09:a7:fe:8c:59:cf:66:
75:69:c8:99:b0:f9:7f:3a:81:26:e5:21:7b:c6:10:fa:a1:b4:
be:e3:9a:1f:0b:df:84:93:fc:05:a6:e8:6d:1c:8d:4f:43:9f:
eb:18:2b:98:73:83:94:13:f8:8c:de:6e:97:fb:d8:fe:4f:d0:
9c:c8:e4:42:04:c4:ae:16:51:e4:a5:c9:07:10:c6:e0:22:28:
11:c3:c1:a7:2c:8d:33:2b:24:9a:24:a3:13:4d:94:d8:06:85:
5a:06:6b:92:9a:3e:54:00:2d:a4:94:ac:e0:c8:31:e9:d6:08:
fd:aa:2c:df:05:2d:b6:ec:82:77:d7:32:bc:0a:6a:d2:44:4a:
ad:4f:39:22:1a:03:6d:c3:2a:5b:a6:e3:1a:1a:67:34:1a:09:
80:ca:e0:1f:88:0d:8e:eb:a3:76:8d:dd:db:79:63:8c:c2:01:
1b:98:1b:d0:85:e4:26:de:14:df:73:36:6a:fb:e7:8e:29:c9:
8b:79:59:c3
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMeCI9y0T4JOgd1erzPNgzyFgfWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB
MTBBMUUyMDAeFw0yNDEyMTgxNDU1MDJaFw0yNTEyMTcxNTAwMDJaMDMxMTAvBgNV
BAMTKEY3NjVCODU4NERGNjcwRUZGNjhCNEY5NThEQzdFQUE4QjU2NDdFOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjpmLhaibKbe431sV6tWrMBUq5
CMfZT5YVDAr81bS0G6kXskZlNvov8s0K7VwhFrcO25B3KDCbr+uMyrFplsmpNoEO
GJ/KAO36k3dq2rNKmYbwOyQQYjeP02Er3ZUvICVyoBorS9gvC8AXthIkHYobJ+bX
jD6PLw5+DMLrgHZJzOxqTxgFzmBanZ1k3ITxZ2Bzlra38ALNTi0t0SeQgkKI4szJ
fuWNGeRSmP/WsY8X/K5z2rKgqul5WO9EDhD0RyAog0EYNhMDrZa3evVftya5KyIi
i9c/papt7EafHS/xacqaDp4y6xu7GruOtE/AHXFmTjzX7MA0MfYQxOncW5LdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU92W4WE32cO/2i0+VjcfqqLVkfpkwHwYDVR0j
BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy
ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB
MUUyMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyNDlkMzg3LTcwY2YtNDBlOS04
NzU5LTliODZlMGM2NTEyOC8wLzMxMzAzMzJlMzEzODMwMmUzMjM1MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntPowDQYJ
KoZIhvcNAQELBQADggEBAAxIDyhjvbO0lTvjxc43blhRb+xnzKn+xyDI3kFb0eiF
SFTQV8EcfVaHqtqooNVjk3V6XtqeMvHgMXbKtCxC277OCaf+jFnPZnVpyJmw+X86
gSblIXvGEPqhtL7jmh8L34ST/AWm6G0cjU9Dn+sYK5hzg5QT+Izebpf72P5P0JzI
5EIExK4WUeSlyQcQxuAiKBHDwacsjTMrJJokoxNNlNgGhVoGa5KaPlQALaSUrODI
MenWCP2qLN8FLbbsgnfXMrwKatJESq1POSIaA23DKlum4xoaZzQaCYDK4B+IDY7r
o3aN3dt5Y4zCARuYG9CF5CbeFN9zNmr7544pyYt5WcM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:06 2025 by rpki-client