Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa
File: 3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa (raw, json)
Hash identifier: xne0Cq1LXYrb0/DpeRsrFAeGbUysSbEdSSRG1O8ZrMs=
Subject key identifier: 99:0A:C7:68:F1:11:10:66:47:B1:42:7A:75:EE:A6:F9:06:62:70:ED
Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Certificate serial: 2B987759D7081C9DFAA2B6AF50186DCF1AF0698D
Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa
Signing time: Wed 27 Nov 2024 08:00:01 +0000
ROA not before: Wed 27 Nov 2024 07:55:01 +0000
ROA not after: Wed 26 Nov 2025 08:00:01 +0000
asID: 38524
IP address blocks: 103.191.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:98:77:59:d7:08:1c:9d:fa:a2:b6:af:50:18:6d:cf:1a:f0:69:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Validity
Not Before: Nov 27 07:55:01 2024 GMT
Not After : Nov 26 08:00:01 2025 GMT
Subject: CN=990AC768F111106647B1427A75EEA6F9066270ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:ec:32:56:d7:ff:cd:50:45:6b:78:91:89:
b8:d8:26:ce:00:2f:4c:7a:e7:af:0f:d2:0f:a6:1a:
68:30:43:ec:2c:da:a2:ec:39:33:de:ca:43:e8:94:
3a:30:24:bb:53:1a:fb:1b:9a:22:be:fc:ac:9b:68:
09:79:60:ef:88:0f:b5:1c:06:e0:c6:06:1a:bf:c8:
3f:66:57:4a:09:b0:59:b5:33:90:2f:d9:62:00:90:
14:77:04:4a:a9:6d:e2:4a:9f:6d:be:03:51:03:99:
15:d1:b6:e5:26:17:6c:50:ae:38:e3:83:1c:a3:f6:
5b:52:fd:8f:c5:13:5f:9c:f4:65:a8:8d:e3:f1:4c:
f2:72:9a:70:33:83:47:12:2e:3c:f7:98:bb:19:18:
59:c5:4a:1e:9a:86:d6:9e:ce:2e:58:da:cd:3a:e7:
c0:a2:76:c0:cb:85:cb:12:be:a4:ab:2d:49:2e:e5:
7d:c7:80:0e:73:c7:48:36:ec:cd:26:08:8f:f7:8c:
b8:d6:31:46:55:b0:e3:40:fe:86:79:5e:4d:9e:70:
6d:07:cc:b0:c6:99:ff:f1:53:01:5b:9d:92:cb:a8:
b2:d1:19:59:c5:2f:af:a4:32:35:d9:32:05:9f:e2:
39:57:c4:fd:b6:fc:68:28:99:0b:17:f1:f2:a4:a8:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:C7:68:F1:11:10:66:47:B1:42:7A:75:EE:A6:F9:06:62:70:ED
X509v3 Authority Key Identifier:
keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e203338353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.152.0/23
Signature Algorithm: sha256WithRSAEncryption
13:e0:27:e4:ac:96:9a:9a:56:6d:8b:62:d9:34:71:9c:60:dc:
2d:5a:bf:74:ba:14:06:40:47:c3:6d:b2:8a:1b:45:3f:9d:c8:
18:40:e6:fa:c7:a2:41:e4:15:0f:03:58:cf:28:bb:12:52:3b:
db:d5:b2:9a:01:fc:8e:78:79:87:dd:f7:3f:2f:5c:a7:5e:54:
2d:91:32:40:41:2f:6e:f5:11:0f:cc:73:08:fd:30:46:9c:c3:
21:64:5b:db:80:fa:ed:bf:59:3f:b7:f1:2f:4f:e4:5e:77:8f:
75:8a:11:2e:34:b5:5c:9f:47:4b:0f:4f:5c:fa:33:91:ab:50:
64:34:a8:2f:7c:04:18:3c:de:76:56:33:d9:9d:09:ce:36:eb:
20:9d:18:31:27:d1:b0:36:4a:bb:7a:3a:33:56:15:e8:76:49:
f1:03:25:6e:2e:b7:be:44:17:5c:6d:aa:7f:1a:74:52:11:89:
dc:15:c5:c0:75:f2:9e:89:49:e0:ca:8f:47:ae:5e:e7:ee:03:
3f:f8:23:29:9c:44:43:e4:e0:b4:24:d9:f0:cf:e1:dd:1c:a2:
c7:90:f3:a7:61:42:8c:72:9e:23:55:af:bf:ac:df:30:17:93:
44:42:44:e6:0b:c3:34:2e:bd:06:1f:e4:d7:a2:5f:a9:00:f3:
8e:78:c4:5c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUK5h3WdcIHJ36oravUBhtzxrwaY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0
MzFGMEY0NzAeFw0yNDExMjcwNzU1MDFaFw0yNTExMjYwODAwMDFaMDMxMTAvBgNV
BAMTKDk5MEFDNzY4RjExMTEwNjY0N0IxNDI3QTc1RUVBNkY5MDY2MjcwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KewyVtf/zVBFa3iRibjYJs4A
L0x6568P0g+mGmgwQ+ws2qLsOTPeykPolDowJLtTGvsbmiK+/KybaAl5YO+ID7Uc
BuDGBhq/yD9mV0oJsFm1M5Av2WIAkBR3BEqpbeJKn22+A1EDmRXRtuUmF2xQrjjj
gxyj9ltS/Y/FE1+c9GWojePxTPJymnAzg0cSLjz3mLsZGFnFSh6ahtaezi5Y2s06
58CidsDLhcsSvqSrLUku5X3HgA5zx0g27M0mCI/3jLjWMUZVsONA/oZ5Xk2ecG0H
zLDGmf/xUwFbnZLLqLLRGVnFL6+kMjXZMgWf4jlXxP22/GgomQsX8fKkqDvFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUmQrHaPEREGZHsUJ6de6m+QZicO0wHwYDVR0j
BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB
NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG
MEY0Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2YTZjYTEyLWIyODctNGFjNy04
N2I4LTZjZDczMzUzZTY3Zi8wLzMxMzAzMzJlMzEzOTMxMmUzMTM1MzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7+YMA0GCSqG
SIb3DQEBCwUAA4IBAQAT4CfkrJaamlZti2LZNHGcYNwtWr90uhQGQEfDbbKKG0U/
ncgYQOb6x6JB5BUPA1jPKLsSUjvb1bKaAfyOeHmH3fc/L1ynXlQtkTJAQS9u9REP
zHMI/TBGnMMhZFvbgPrtv1k/t/EvT+Red491ihEuNLVcn0dLD09c+jORq1BkNKgv
fAQYPN52VjPZnQnONusgnRgxJ9GwNkq7ejozVhXodknxAyVuLre+RBdcbap/GnRS
EYncFcXAdfKeiUngyo9Hrl7n7gM/+CMpnERD5OC0JNnwz+HdHKLHkPOnYUKMcp4j
Va+/rN8wF5NEQkTmC8M0Lr0GH+TXol+pAPOOeMRc
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:28 2025 by rpki-client