Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3234203d3e203137343530.roa
File: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (raw, json)
Hash identifier: E/ANh8Obcj2c5y2FA6Ly1F0NL4tMRGMfZqDmckfRl5E=
Subject key identifier: 1D:1F:39:8C:2C:4E:C3:82:09:68:13:E2:3B:D9:2D:F9:00:91:56:07
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 62ACF4822C1DADE279F26E38CE813835DB142D50
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3234203d3e203137343530.roa
Signing time: Wed 11 Sep 2024 09:00:01 +0000
ROA not before: Wed 11 Sep 2024 08:55:01 +0000
ROA not after: Wed 10 Sep 2025 09:00:01 +0000
asID: 17450
IP address blocks: 103.8.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ac:f4:82:2c:1d:ad:e2:79:f2:6e:38:ce:81:38:35:db:14:2d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Sep 11 08:55:01 2024 GMT
Not After : Sep 10 09:00:01 2025 GMT
Subject: CN=1D1F398C2C4EC382096813E23BD92DF900915607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:e0:94:ab:b3:74:4f:53:11:9d:9e:a7:de:
71:54:8a:03:29:03:e4:ec:64:a9:6b:54:44:27:e7:
95:80:e4:72:ae:5e:b3:bc:11:bd:51:57:0d:45:6f:
b4:08:47:ed:ea:b5:4d:9d:ee:ab:e2:10:6e:2d:af:
98:a4:08:8b:82:76:63:b9:d5:85:14:63:81:67:0f:
fb:81:99:a8:a3:b9:09:9e:cb:26:8e:9e:fe:19:e4:
ee:a0:5d:c2:50:3f:20:0d:0c:19:89:07:55:95:c4:
2c:a4:9d:e5:0e:2c:cd:e4:ba:52:ee:76:a5:6c:75:
74:33:45:95:5a:21:39:1a:b6:1f:22:8b:4a:af:91:
23:fb:dd:0a:08:69:87:25:28:bc:95:d6:32:d2:8f:
67:e4:2a:7a:48:d5:00:0e:00:aa:f4:c9:4b:c5:ec:
71:6e:79:68:34:19:50:0d:22:11:48:63:15:62:a5:
0f:f0:c6:ff:55:b1:74:dc:ca:dc:c8:f1:8d:41:47:
dd:28:3b:86:91:6d:46:6c:5f:23:3f:d7:b0:8a:c2:
ac:df:7b:13:4c:e0:e5:00:38:2f:1a:2d:77:b5:a9:
64:be:cd:31:f4:b0:fd:d6:21:4b:7e:cc:91:a8:13:
5c:29:97:ca:c9:07:b7:fc:53:c2:98:bc:f9:99:b0:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:39:8C:2C:4E:C3:82:09:68:13:E2:3B:D9:2D:F9:00:91:56:07
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32322d3234203d3e203137343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.96.0/22
Signature Algorithm: sha256WithRSAEncryption
92:85:9a:b3:a9:05:62:70:27:2f:70:0f:37:47:0a:03:d5:8e:
6e:07:45:2b:d8:95:dc:3e:c9:9e:71:f4:b1:d0:d8:b6:3c:22:
b0:f3:14:ef:32:a7:1f:71:4e:14:dd:42:48:1a:f1:35:9d:c9:
ae:63:05:f0:50:6d:26:de:33:9b:42:3b:c7:78:c0:cf:f2:3b:
eb:57:0c:70:fa:1f:02:c7:24:dd:e3:9d:e0:99:b6:88:59:b5:
cf:1e:8d:09:cf:03:b4:8a:cd:d7:09:52:00:42:ba:6b:dc:f5:
3f:7a:84:75:51:44:0a:50:1f:26:3c:3a:a5:5d:45:48:e9:f2:
64:00:d1:17:e0:5e:23:84:a5:a1:e2:46:44:0f:7a:20:c9:55:
12:99:8a:79:7a:90:a4:2a:ba:64:41:38:6f:68:26:24:1c:9b:
cc:6f:aa:e2:46:c9:9e:8c:1d:b1:68:a4:12:25:6a:b8:96:02:
ed:91:c2:89:a0:d4:6b:39:4d:06:b5:db:51:20:c4:b0:c9:0b:
2e:6e:81:71:e1:28:05:a3:29:61:f7:96:55:da:30:c1:87:ae:
4a:5c:a2:59:5d:dd:61:e2:c6:e7:9c:63:49:b3:c5:c3:62:20:
94:49:27:90:fd:38:c5:50:87:37:96:aa:d0:f3:d2:47:df:f3:
66:d8:d4:cc
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUYqz0giwdreJ58m44zoE4NdsULVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx
NjM4QTcwNzAeFw0yNDA5MTEwODU1MDFaFw0yNTA5MTAwOTAwMDFaMDMxMTAvBgNV
BAMTKDFEMUYzOThDMkM0RUMzODIwOTY4MTNFMjNCRDkyREY5MDA5MTU2MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2uCUq7N0T1MRnZ6n3nFUigMp
A+TsZKlrVEQn55WA5HKuXrO8Eb1RVw1Fb7QIR+3qtU2d7qviEG4tr5ikCIuCdmO5
1YUUY4FnD/uBmaijuQmeyyaOnv4Z5O6gXcJQPyANDBmJB1WVxCykneUOLM3kulLu
dqVsdXQzRZVaITkath8ii0qvkSP73QoIaYclKLyV1jLSj2fkKnpI1QAOAKr0yUvF
7HFueWg0GVANIhFIYxVipQ/wxv9VsXTcytzI8Y1BR90oO4aRbUZsXyM/17CKwqzf
exNM4OUAOC8aLXe1qWS+zTH0sP3WIUt+zJGoE1wpl8rJB7f8U8KYvPmZsGoTAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUHR85jCxOw4IJaBPiO9kt+QCRVgcwHwYDVR0j
BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC
MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4
QTcwNy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx
YTAtMmVjNjcwODM2YzQyLzAvMzEzMDMzMmUzODJlMzkzNjJlMzAyZjMyMzIyZDMy
MzQyMDNkM2UyMDMxMzczNDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnCGAwDQYJKoZIhvcNAQEL
BQADggEBAJKFmrOpBWJwJy9wDzdHCgPVjm4HRSvYldw+yZ5x9LHQ2LY8IrDzFO8y
px9xThTdQkga8TWdya5jBfBQbSbeM5tCO8d4wM/yO+tXDHD6HwLHJN3jneCZtohZ
tc8ejQnPA7SKzdcJUgBCumvc9T96hHVRRApQHyY8OqVdRUjp8mQA0RfgXiOEpaHi
RkQPeiDJVRKZinl6kKQqumRBOG9oJiQcm8xvquJGyZ6MHbFopBIlariWAu2Rwomg
1Gs5TQa121EgxLDJCy5ugXHhKAWjKWH3llXaMMGHrkpcolld3WHixuecY0mzxcNi
IJRJJ5D9OMVQhzeWqtDz0kff82bY1Mw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:58 2025 by rpki-client