Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/3130332e38372e3134382e302f32332d3234203d3e203435333035.roa
File: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier: 1ZkUeeyzSqD5X/4v5W9zMPdNTSAUHdo1L38gVf4lA6o=
Subject key identifier: E4:6B:37:FB:83:2C:A0:C8:6A:34:7C:B1:27:00:BB:AC:A8:D1:85:97
Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860
Certificate serial: 431628B87002B57CA8CBEDDACAC0E936E143C034
Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/3130332e38372e3134382e302f32332d3234203d3e203435333035.roa
Signing time: Thu 16 Jan 2025 07:02:32 +0000
ROA not before: Thu 16 Jan 2025 06:57:32 +0000
ROA not after: Thu 15 Jan 2026 07:02:32 +0000
asID: 45305
IP address blocks: 103.87.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:16:28:b8:70:02:b5:7c:a8:cb:ed:da:ca:c0:e9:36:e1:43:c0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860
Validity
Not Before: Jan 16 06:57:32 2025 GMT
Not After : Jan 15 07:02:32 2026 GMT
Subject: CN=E46B37FB832CA0C86A347CB12700BBACA8D18597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:de:22:24:50:2f:2c:db:99:ee:b9:a7:23:
09:3b:b2:c5:d7:f4:ce:c8:ee:f1:cc:8c:53:6a:59:
51:41:7c:3e:12:e7:1d:4c:45:5d:10:99:45:2b:63:
78:c2:07:8c:d3:f4:70:09:93:ec:53:a8:82:71:2b:
57:58:a3:ee:a3:ea:9b:e3:7b:26:80:7d:bd:7e:fe:
91:17:37:df:80:71:0e:0f:00:c7:82:ad:0a:24:58:
2b:1b:93:93:bf:26:2b:7b:4b:8b:65:dd:b1:e5:f6:
01:6b:ce:be:20:8d:b0:7b:5b:07:c6:f5:36:30:d6:
f2:01:57:5f:8c:fe:10:ad:42:2f:ce:ea:aa:27:80:
80:0f:c1:c9:02:b3:c4:05:73:1b:14:9d:da:0b:e5:
8d:a6:e9:20:31:25:f5:2e:47:ac:bd:54:a2:db:48:
e5:b6:57:70:77:26:2d:71:95:08:11:41:9d:69:9a:
6e:92:87:a2:b9:a4:eb:40:f9:db:36:e2:fa:2b:07:
ca:64:84:79:b8:ac:2b:17:a5:4d:a3:05:59:53:ac:
d5:4f:0d:6c:0b:9a:fe:5e:9b:cc:82:b0:dd:b3:29:
5b:3e:53:b4:36:36:c8:7a:63:64:d2:dd:33:bc:fb:
20:3f:c3:84:da:84:e7:85:bd:76:f9:0b:7d:e2:b5:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:37:FB:83:2C:A0:C8:6A:34:7C:B1:27:00:BB:AC:A8:D1:85:97
X509v3 Authority Key Identifier:
keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/3130332e38372e3134382e302f32332d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.148.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:23:84:ee:75:21:0b:11:17:9c:0e:ce:d4:4a:48:c6:2f:37:
f1:73:88:9f:23:66:8e:d7:52:07:83:c7:8c:49:2b:31:85:13:
1d:57:6f:cb:a9:9d:5c:5f:dc:d1:c3:57:20:fa:bd:58:e7:62:
ab:be:b3:37:3f:e2:cd:60:7b:a4:21:24:c8:2f:9b:72:06:1f:
30:cf:a8:60:02:a8:57:14:e7:8b:bc:5a:22:9d:5e:7b:a3:b6:
ec:bb:4f:2b:77:95:ea:39:a0:9e:d4:26:29:5c:be:3a:82:05:
35:37:55:62:1f:6c:70:8e:90:07:fc:b3:6e:17:1f:9d:db:d3:
4a:e8:da:6f:47:af:c8:8d:62:9a:60:d0:b5:4f:9c:5c:e2:da:
34:e1:9c:0b:b6:7f:a1:72:b8:e6:42:7d:67:51:01:22:2c:be:
83:0a:e9:9a:9f:97:43:98:8c:97:33:fe:71:c4:63:03:5f:e0:
ad:30:a7:f3:00:91:9e:74:ed:c9:88:22:06:21:98:ba:22:9d:
7f:92:f2:60:e1:fb:fa:12:5b:c2:06:79:f1:ba:a4:aa:a3:59:
e6:cf:1a:b6:0e:3b:45:4f:94:f6:f8:08:54:38:96:49:bf:6c:
86:30:69:29:31:be:d4:e6:32:bd:9b:31:af:66:93:fe:9c:2d:
fc:3c:a9:bf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQxYouHACtXyoy+3aysDpNuFDwDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG
QkNGMzg2MDAeFw0yNTAxMTYwNjU3MzJaFw0yNjAxMTUwNzAyMzJaMDMxMTAvBgNV
BAMTKEU0NkIzN0ZCODMyQ0EwQzg2QTM0N0NCMTI3MDBCQkFDQThEMTg1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRtt4iJFAvLNuZ7rmnIwk7ssXX
9M7I7vHMjFNqWVFBfD4S5x1MRV0QmUUrY3jCB4zT9HAJk+xTqIJxK1dYo+6j6pvj
eyaAfb1+/pEXN9+AcQ4PAMeCrQokWCsbk5O/Jit7S4tl3bHl9gFrzr4gjbB7WwfG
9TYw1vIBV1+M/hCtQi/O6qongIAPwckCs8QFcxsUndoL5Y2m6SAxJfUuR6y9VKLb
SOW2V3B3Ji1xlQgRQZ1pmm6Sh6K5pOtA+ds24vorB8pkhHm4rCsXpU2jBVlTrNVP
DWwLmv5em8yCsN2zKVs+U7Q2Nsh6Y2TS3TO8+yA/w4TahOeFvXb5C33itRmxAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5Gs3+4MsoMhqNHyxJwC7rKjRhZcwHwYDVR0j
BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1
NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG
Mzg2MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzZGRiNzlmLTJjMzctNDdhZi1i
OTVkLTE1MzExNDYzYjM0My8wLzMxMzAzMzJlMzgzNzJlMzEzNDM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdXlDANBgkqhkiG
9w0BAQsFAAOCAQEAbSOE7nUhCxEXnA7O1EpIxi838XOInyNmjtdSB4PHjEkrMYUT
HVdvy6mdXF/c0cNXIPq9WOdiq76zNz/izWB7pCEkyC+bcgYfMM+oYAKoVxTni7xa
Ip1ee6O27LtPK3eV6jmgntQmKVy+OoIFNTdVYh9scI6QB/yzbhcfndvTSujab0ev
yI1immDQtU+cXOLaNOGcC7Z/oXK45kJ9Z1EBIiy+gwrpmp+XQ5iMlzP+ccRjA1/g
rTCn8wCRnnTtyYgiBiGYuiKdf5LyYOH7+hJbwgZ58bqkqqNZ5s8atg47RU+U9vgI
VDiWSb9shjBpKTG+1OYyvZsxr2aT/pwt/Dypvw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:21 2025 by rpki-client