Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa
File: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (raw, json)
Hash identifier: R+IkOnhEEkrZOxf8Y3xufcx4Q4z9+2sI/l2mQF5vKrU=
Subject key identifier: 43:48:AF:4E:6D:9D:40:78:59:30:F5:1A:35:5F:CA:0B:AD:24:C3:27
Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Certificate serial: 665BB9BB89619EF8D7FABDAED378B5DA4D5C07D4
Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa
Signing time: Fri 27 Dec 2024 14:00:31 +0000
ROA not before: Fri 27 Dec 2024 13:55:31 +0000
ROA not after: Fri 26 Dec 2025 14:00:31 +0000
asID: 138821
IP address blocks: 103.136.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:5b:b9:bb:89:61:9e:f8:d7:fa:bd:ae:d3:78:b5:da:4d:5c:07:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Validity
Not Before: Dec 27 13:55:31 2024 GMT
Not After : Dec 26 14:00:31 2025 GMT
Subject: CN=4348AF4E6D9D40785930F51A355FCA0BAD24C327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:04:95:c6:de:24:09:a1:b5:25:59:c0:a8:
a7:f2:b3:00:9a:d6:ce:ac:57:f4:a8:00:af:ff:86:
ef:cc:46:fc:bc:e1:01:9d:ae:21:bb:2a:6e:de:0f:
5e:5e:59:b3:71:22:fe:93:b3:c5:51:d8:8c:41:cb:
78:23:c0:44:94:b1:17:ae:82:f0:88:5e:a4:16:12:
5f:4c:fb:76:9c:67:f1:2d:75:c2:f1:94:ac:2d:d6:
dc:47:11:d9:75:3b:1b:04:5d:77:9c:b6:af:24:36:
44:3b:2b:39:34:9c:8d:0d:09:56:8c:7c:24:f5:21:
55:06:c2:68:cc:30:7d:17:21:cb:91:b1:fd:f5:b2:
f1:db:9f:73:32:5c:fa:73:05:cf:27:a9:57:a8:4f:
37:c1:57:c5:a7:a6:90:bd:b3:03:38:c4:12:5c:33:
e5:1b:15:12:ed:68:3d:63:e9:60:36:af:05:c6:a2:
e4:af:95:bb:70:bc:fa:49:8d:87:ba:12:36:f7:f9:
0b:58:63:dd:e8:95:a7:dc:ad:bf:76:42:ff:ab:3e:
d2:fa:3e:74:5f:aa:78:b4:af:be:30:1e:d7:03:23:
ee:27:06:5a:31:2a:00:1e:14:8e:77:9b:0b:6f:93:
bb:e8:d8:4d:0b:c5:e3:c3:b5:2a:fb:16:68:80:f9:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:AF:4E:6D:9D:40:78:59:30:F5:1A:35:5F:CA:0B:AD:24:C3:27
X509v3 Authority Key Identifier:
keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:1b:34:be:91:ba:fe:16:a3:36:8c:5f:ae:16:ae:cc:df:76:
42:6a:1f:b1:7c:26:db:1f:b0:f4:3b:55:e4:a9:3d:53:d4:af:
bd:62:a5:73:93:4f:3b:14:e8:2b:a0:ef:94:b5:4b:48:8f:13:
df:d5:ca:80:20:23:87:71:14:94:3e:6a:9f:ae:17:bb:43:a6:
08:b8:1e:06:f1:0d:a9:50:7e:cc:05:fc:f1:21:27:ef:79:8f:
4f:1d:99:a1:f0:ce:35:6b:a0:aa:aa:6d:85:ef:43:6d:71:7c:
45:b8:37:22:14:9a:6a:bc:f5:bd:93:e1:e6:26:37:8f:10:a2:
0f:4c:1b:19:38:19:b0:cc:6d:b0:83:ae:d8:a3:b8:5a:32:27:
c9:a2:21:f6:79:19:51:a2:25:30:53:d2:16:11:94:8a:42:f3:
f2:69:c6:2b:02:fa:7e:f4:4e:91:15:59:76:2b:e3:c1:c2:e1:
0c:55:39:fe:58:bd:f0:41:6a:c5:cc:a4:63:cc:45:36:49:5f:
fa:55:e1:60:6a:73:9e:e9:70:2c:c2:d9:48:25:75:af:8c:3b:
a2:ee:06:a1:f3:9a:44:cf:de:64:a2:1c:f9:c0:70:94:ce:ba:
df:78:e9:46:d1:1c:66:c8:e7:5a:d3:70:18:38:83:59:1f:5c:
40:fd:ff:74
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZlu5u4lhnvjX+r2u03i12k1cB9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC
RkIzN0I1MzAeFw0yNDEyMjcxMzU1MzFaFw0yNTEyMjYxNDAwMzFaMDMxMTAvBgNV
BAMTKDQzNDhBRjRFNkQ5RDQwNzg1OTMwRjUxQTM1NUZDQTBCQUQyNEMzMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPawSVxt4kCaG1JVnAqKfyswCa
1s6sV/SoAK//hu/MRvy84QGdriG7Km7eD15eWbNxIv6Ts8VR2IxBy3gjwESUsReu
gvCIXqQWEl9M+3acZ/EtdcLxlKwt1txHEdl1OxsEXXectq8kNkQ7Kzk0nI0NCVaM
fCT1IVUGwmjMMH0XIcuRsf31svHbn3MyXPpzBc8nqVeoTzfBV8WnppC9swM4xBJc
M+UbFRLtaD1j6WA2rwXGouSvlbtwvPpJjYe6Ejb3+QtYY93olafcrb92Qv+rPtL6
PnRfqni0r74wHtcDI+4nBloxKgAeFI53mwtvk7vo2E0LxePDtSr7FmiA+fGhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUQ0ivTm2dQHhZMPUaNV/KC60kwycwHwYDVR0j
BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4
OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz
N0I1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWIxYzFiLTY1NmMtNDg5ZC05
ZWQzLWNjYzc3YzgzMDE4ZC8wLzMxMzAzMzJlMzEzMzM2MmUzMTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4gNMA0GCSqG
SIb3DQEBCwUAA4IBAQBeGzS+kbr+FqM2jF+uFq7M33ZCah+xfCbbH7D0O1XkqT1T
1K+9YqVzk087FOgroO+UtUtIjxPf1cqAICOHcRSUPmqfrhe7Q6YIuB4G8Q2pUH7M
BfzxISfveY9PHZmh8M41a6Cqqm2F70NtcXxFuDciFJpqvPW9k+HmJjePEKIPTBsZ
OBmwzG2wg67Yo7haMifJoiH2eRlRoiUwU9IWEZSKQvPyacYrAvp+9E6RFVl2K+PB
wuEMVTn+WL3wQWrFzKRjzEU2SV/6VeFganOe6XAswtlIJXWvjDui7gah85pEz95k
ohz5wHCUzrrfeOlG0RxmyOda03AYOINZH1xA/f90
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:41 2025 by rpki-client