Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32332d3234203d3e203436303236.roa
File: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (raw, json)
Hash identifier: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=
Subject key identifier: 56:C3:6A:DF:EA:DC:24:DD:A8:E5:68:3E:A7:AD:CB:15:E8:4E:4E:8D
Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial: 30F41C3D547311748A90BCE3A738AC983B8CE9D4
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32332d3234203d3e203436303236.roa
Signing time: Mon 16 Dec 2024 02:00:00 +0000
ROA not before: Mon 16 Dec 2024 01:55:00 +0000
ROA not after: Mon 15 Dec 2025 02:00:00 +0000
asID: 46026
IP address blocks: 103.135.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f4:1c:3d:54:73:11:74:8a:90:bc:e3:a7:38:ac:98:3b:8c:e9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Validity
Not Before: Dec 16 01:55:00 2024 GMT
Not After : Dec 15 02:00:00 2025 GMT
Subject: CN=56C36ADFEADC24DDA8E5683EA7ADCB15E84E4E8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:ee:fa:0e:b5:c4:7f:87:80:60:36:fe:d4:
2c:7b:16:bd:a9:d7:b7:c3:c9:46:bb:e0:03:ec:df:
ae:c2:cd:c6:05:80:96:91:29:3c:db:3c:53:4b:37:
eb:37:72:db:2c:72:7b:68:95:94:d4:dc:84:a2:07:
fc:24:50:79:e7:24:84:2a:5b:a8:34:a3:f9:1f:c1:
9b:ca:8f:38:6d:4a:50:4a:25:91:c2:80:8d:16:fb:
b3:f4:fb:9e:26:3e:ac:fd:05:5a:24:d1:24:d3:31:
98:d9:8f:83:dc:41:c7:3c:51:b6:dc:29:a9:4f:83:
88:c4:74:a0:9c:18:1d:6e:e3:14:bc:a7:66:cc:32:
bd:89:fa:08:8d:1d:17:da:8a:8f:2f:b4:ec:52:8d:
a6:e5:97:47:ef:31:c4:7d:05:7a:76:0d:57:ca:5f:
19:c0:fe:e7:7e:51:be:f2:04:79:75:1c:fd:d7:d3:
e3:d0:c6:87:de:f0:67:47:40:b6:41:d4:06:7f:9f:
33:15:7c:bf:e2:f0:df:6c:d4:ca:dd:b8:5b:17:0d:
fe:1c:21:6e:a6:8c:0c:cb:55:ee:16:8d:8d:c0:46:
e9:fb:db:45:5c:e0:eb:d2:83:14:90:4d:38:a1:af:
54:a4:98:5c:88:01:61:4d:d2:c1:c9:58:9b:e6:27:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:6A:DF:EA:DC:24:DD:A8:E5:68:3E:A7:AD:CB:15:E8:4E:4E:8D
X509v3 Authority Key Identifier:
keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32332d3234203d3e203436303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.72.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:98:00:e6:4f:a4:3c:12:f3:1a:ed:36:48:21:53:d1:70:80:
f3:b3:f5:6a:dd:69:d2:b3:82:17:9a:b9:29:9c:c9:e6:b4:b6:
77:fa:a2:1f:e6:dc:13:64:c0:c6:e1:1c:7a:9d:23:d1:ea:6f:
37:b2:1e:6f:55:25:ed:db:5b:4d:cf:59:be:39:da:ae:69:9f:
f4:94:85:df:8b:be:c5:8c:9b:60:63:76:76:cc:95:48:ea:35:
20:a5:cf:23:85:d3:b1:ce:e1:6c:46:1f:0f:19:90:9c:c4:1b:
6f:13:84:cf:58:c8:0a:bf:05:50:27:36:50:25:53:36:1a:fc:
b9:c6:98:a0:1d:5b:0c:35:88:0d:10:f8:0e:4d:9b:7e:fb:09:
38:87:ea:80:0b:68:0d:1e:f9:9a:af:f8:33:7f:d7:0a:b4:f4:
84:24:ab:f0:af:8b:84:e0:dd:5e:ac:cf:0e:c7:d6:fc:16:25:
2a:30:f0:99:da:65:8e:cb:09:94:f7:73:23:75:a0:b9:69:83:
47:b4:26:4b:5c:ae:31:78:29:e4:60:b9:18:86:d9:46:c2:57:
77:61:62:09:a3:eb:99:e7:de:08:41:c0:f4:a8:f7:af:c7:b3:
d4:7c:38:8f:ec:f1:7e:d5:96:f5:15:90:7d:1a:25:4a:bf:d8:
2e:6a:01:1f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMPQcPVRzEXSKkLzjpzismDuM6dQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4
NDkwM0UxNzAeFw0yNDEyMTYwMTU1MDBaFw0yNTEyMTUwMjAwMDBaMDMxMTAvBgNV
BAMTKDU2QzM2QURGRUFEQzI0RERBOEU1NjgzRUE3QURDQjE1RTg0RTRFOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKb+76DrXEf4eAYDb+1Cx7Fr2p
17fDyUa74APs367CzcYFgJaRKTzbPFNLN+s3ctsscntolZTU3ISiB/wkUHnnJIQq
W6g0o/kfwZvKjzhtSlBKJZHCgI0W+7P0+54mPqz9BVok0STTMZjZj4PcQcc8Ubbc
KalPg4jEdKCcGB1u4xS8p2bMMr2J+giNHRfaio8vtOxSjabll0fvMcR9BXp2DVfK
XxnA/ud+Ub7yBHl1HP3X0+PQxofe8GdHQLZB1AZ/nzMVfL/i8N9s1MrduFsXDf4c
IW6mjAzLVe4WjY3ARun720Vc4OvSgxSQTTihr1SkmFyIAWFN0sHJWJvmJ56JAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVsNq3+rcJN2o5Wg+p63LFehOTo0wHwYDVR0j
BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD
QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw
M0UxNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h
OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzAzMzJlMzEzMzM1MmUzNzMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeHSDANBgkqhkiG
9w0BAQsFAAOCAQEA0ZgA5k+kPBLzGu02SCFT0XCA87P1at1p0rOCF5q5KZzJ5rS2
d/qiH+bcE2TAxuEcep0j0epvN7Ieb1Ul7dtbTc9Zvjnarmmf9JSF34u+xYybYGN2
dsyVSOo1IKXPI4XTsc7hbEYfDxmQnMQbbxOEz1jICr8FUCc2UCVTNhr8ucaYoB1b
DDWIDRD4Dk2bfvsJOIfqgAtoDR75mq/4M3/XCrT0hCSr8K+LhODdXqzPDsfW/BYl
KjDwmdpljssJlPdzI3WguWmDR7QmS1yuMXgp5GC5GIbZRsJXd2FiCaPrmefeCEHA
9Kj3r8ez1Hw4j+zxftWW9RWQfRolSr/YLmoBHw==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:04 2025 by rpki-client