Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa
File: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (raw, json)
Hash identifier: B82wfhLkFG26Wgxhbhj75gasKnE7y0LTbhfYXiDw4Lc=
Subject key identifier: E3:82:97:EE:5B:B4:B2:BA:0A:8D:CF:16:8A:44:C6:DF:1D:31:B8:6C
Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
Certificate serial: 7D805F1131E52A219AAC00A6A0C347B0E9C8751B
Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa
Signing time: Mon 30 Dec 2024 09:02:34 +0000
ROA not before: Mon 30 Dec 2024 08:57:34 +0000
ROA not after: Mon 29 Dec 2025 09:02:34 +0000
asID: 59151
IP address blocks: 103.131.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:80:5f:11:31:e5:2a:21:9a:ac:00:a6:a0:c3:47:b0:e9:c8:75:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
Validity
Not Before: Dec 30 08:57:34 2024 GMT
Not After : Dec 29 09:02:34 2025 GMT
Subject: CN=E38297EE5BB4B2BA0A8DCF168A44C6DF1D31B86C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:91:f3:84:95:17:3b:5e:82:0c:ea:99:e9:
df:87:0f:1f:0e:6a:b4:d3:69:49:61:31:70:cc:75:
ea:1a:62:51:99:a5:fe:11:59:59:8f:34:e9:66:4d:
7f:3d:a0:20:d2:41:e6:e0:8e:2e:b2:05:3e:c5:80:
b1:95:18:d1:72:56:db:b2:a1:45:75:9b:65:ad:71:
0b:10:29:fd:94:90:a7:c9:94:77:b4:ae:f1:86:90:
12:5e:a8:c9:b3:70:16:be:24:e1:c6:c0:10:88:7d:
d5:f2:5d:6c:6b:f3:e8:79:e6:17:65:03:08:41:f4:
5d:69:32:e8:a0:25:9f:6b:3b:a2:47:62:d2:af:a4:
50:fa:cb:2f:b7:6e:9f:79:32:a5:d5:9f:68:7f:a3:
ba:80:e0:f6:cc:74:ba:90:1f:91:cc:31:6f:42:df:
96:b8:c7:2b:ad:e6:db:c8:0d:41:28:ff:82:19:57:
f0:de:14:ec:76:ec:9d:87:98:dd:95:8f:68:9c:e5:
1b:2a:55:c1:af:61:09:8e:ce:f5:01:0f:a6:d1:85:
10:36:99:20:b1:8e:e9:9c:9a:ff:a4:a8:b0:e8:c3:
0d:be:aa:67:42:2d:e6:a5:77:66:fc:b4:f0:96:7a:
e0:ed:8e:58:63:91:7b:f3:33:09:71:cb:b6:9c:67:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:97:EE:5B:B4:B2:BA:0A:8D:CF:16:8A:44:C6:DF:1D:31:B8:6C
X509v3 Authority Key Identifier:
keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.104.0/23
Signature Algorithm: sha256WithRSAEncryption
04:4d:95:43:da:ba:1b:17:48:36:ea:31:f6:af:74:13:6d:b9:
bd:06:77:d4:8e:1f:27:47:1f:59:da:8e:49:1d:e0:ae:1d:fa:
ea:d6:a6:f5:65:b2:98:43:f9:47:c4:1c:71:08:12:f4:7c:c7:
2f:fb:38:1b:a6:4c:64:ee:52:18:a0:0c:ef:1d:da:06:a2:1d:
5a:91:eb:0a:c2:d7:21:b3:07:5e:ed:52:11:0f:a4:95:57:6d:
d1:82:d5:95:7b:36:75:2a:48:9a:03:8e:7c:c2:70:e5:f3:11:
20:ed:36:19:d0:4c:20:5e:69:91:cc:53:b6:25:b8:a5:58:cb:
71:a2:04:65:78:6a:f0:78:41:d4:0f:77:5b:9b:22:58:5e:4d:
7d:37:63:65:b7:4f:44:21:b2:61:93:55:49:f5:27:eb:64:bd:
21:0c:70:d7:fc:24:85:d5:a3:f3:15:47:e7:dd:68:27:40:02:
be:e2:81:74:d7:ba:7e:56:cc:64:d0:52:75:a4:a4:ce:6f:81:
5b:df:d7:7a:1a:bc:96:4c:b5:f5:ca:b4:4b:d6:ec:1e:1c:aa:
7a:16:45:88:8f:0f:cf:eb:b3:f1:c9:50:0f:cb:6a:8c:27:7c:
eb:9a:91:2c:47:df:20:4e:1d:96:39:da:72:e6:ea:35:b9:eb:
dd:d9:f1:23
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfYBfETHlKiGarACmoMNHsOnIdRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JD
RjY2QjgwMTAeFw0yNDEyMzAwODU3MzRaFw0yNTEyMjkwOTAyMzRaMDMxMTAvBgNV
BAMTKEUzODI5N0VFNUJCNEIyQkEwQThEQ0YxNjhBNDRDNkRGMUQzMUI4NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFpHzhJUXO16CDOqZ6d+HDx8O
arTTaUlhMXDMdeoaYlGZpf4RWVmPNOlmTX89oCDSQebgji6yBT7FgLGVGNFyVtuy
oUV1m2WtcQsQKf2UkKfJlHe0rvGGkBJeqMmzcBa+JOHGwBCIfdXyXWxr8+h55hdl
AwhB9F1pMuigJZ9rO6JHYtKvpFD6yy+3bp95MqXVn2h/o7qA4PbMdLqQH5HMMW9C
35a4xyut5tvIDUEo/4IZV/DeFOx27J2HmN2Vj2ic5RsqVcGvYQmOzvUBD6bRhRA2
mSCxjumcmv+kqLDoww2+qmdCLeald2b8tPCWeuDtjlhjkXvzMwlxy7acZ9/nAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU44KX7lu0sroKjc8WikTG3x0xuGwwHwYDVR0j
BBgwFoAUa15nfppHEzq183s+LBEZO89muAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ODc2NmQ2Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC82QjVFNjc3RTlB
NDcxMzNBQjVGMzdCM0UyQzExMTkzQkNGNjZCODAxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JDRjY2
QjgwMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NzY2ZDY2LTI5MjMtNGNlMC1h
YTg1LTljNDk4OGNjOGJhMS8wLzMxMzAzMzJlMzEzMzMxMmUzMTMwMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNTM5MzEzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4NoMA0GCSqG
SIb3DQEBCwUAA4IBAQAETZVD2robF0g26jH2r3QTbbm9BnfUjh8nRx9Z2o5JHeCu
Hfrq1qb1ZbKYQ/lHxBxxCBL0fMcv+zgbpkxk7lIYoAzvHdoGoh1akesKwtchswde
7VIRD6SVV23RgtWVezZ1KkiaA458wnDl8xEg7TYZ0EwgXmmRzFO2JbilWMtxogRl
eGrweEHUD3dbmyJYXk19N2Nlt09EIbJhk1VJ9SfrZL0hDHDX/CSF1aPzFUfn3Wgn
QAK+4oF017p+Vsxk0FJ1pKTOb4Fb39d6GryWTLX1yrRL1uweHKp6FkWIjw/P67Px
yVAPy2qMJ3zrmpEsR98gTh2WOdpy5uo1uevd2fEj
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:14 2025 by rpki-client