Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa
File: 3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa (raw, json)
Hash identifier: iRZXCDlLv0igia0Lk/WxM1oJP6cq9J+UPskJIy0xfv8=
Subject key identifier: FE:8F:DB:18:F3:15:37:8B:78:CF:2A:CB:1E:C0:D3:74:C2:1E:69:6C
Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72
Certificate serial: 50B4E4D85741EDEF0B91FC441F89D1E8F352AC00
Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa
Signing time: Fri 10 Jan 2025 06:48:27 +0000
ROA not before: Fri 10 Jan 2025 06:43:27 +0000
ROA not after: Fri 09 Jan 2026 06:48:27 +0000
asID: 139440
IP address blocks: 103.31.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b4:e4:d8:57:41:ed:ef:0b:91:fc:44:1f:89:d1:e8:f3:52:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72
Validity
Not Before: Jan 10 06:43:27 2025 GMT
Not After : Jan 9 06:48:27 2026 GMT
Subject: CN=FE8FDB18F315378B78CF2ACB1EC0D374C21E696C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9c:f9:c4:57:bb:da:77:0a:7b:dc:56:95:b1:
70:78:41:a3:a4:dd:fb:99:32:82:8e:6f:dc:92:c9:
08:75:9f:a4:86:bf:a5:39:b0:cf:d5:5e:21:3d:be:
3d:a2:38:6c:66:d9:78:ce:0a:bd:09:3e:f5:2b:ae:
dc:d8:8d:d9:d5:2e:76:4d:12:8a:ec:39:f8:32:77:
7f:81:af:35:e6:80:5d:3d:83:92:6d:ea:a7:69:94:
17:10:64:6e:b6:03:d7:c7:29:ee:b9:10:d5:25:e5:
75:9e:8a:a0:f6:eb:df:10:e3:3f:81:95:0e:a6:f2:
95:be:3c:0a:bf:34:08:25:eb:31:08:27:8e:76:3b:
a5:c7:48:71:27:d9:85:20:65:3d:56:75:af:94:13:
24:2d:6d:9f:8e:35:a1:eb:be:19:b3:29:66:ee:44:
e1:d3:4d:cf:27:59:51:f3:f2:fc:7c:74:58:ba:c8:
dd:bd:e8:7f:ef:63:e1:a6:12:fa:1d:f7:82:80:a3:
08:99:3f:98:2c:63:f8:2c:01:4b:85:68:40:66:05:
67:78:18:83:30:ec:96:d2:b6:67:ab:90:73:8d:10:
10:7f:4c:4f:9c:2a:e1:69:7a:b7:af:4d:b8:db:fd:
6e:76:cb:d0:87:e1:18:c7:00:cf:72:e2:11:d2:ec:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8F:DB:18:F3:15:37:8B:78:CF:2A:CB:1E:C0:D3:74:C2:1E:69:6C
X509v3 Authority Key Identifier:
keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.109.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:28:b3:16:a5:83:9a:19:36:39:48:2b:09:a7:af:8c:36:eb:
ce:be:c3:a5:f5:e9:4e:4e:76:5d:dd:a4:83:13:9f:dc:7a:e1:
07:12:27:ac:c7:d8:c7:70:1e:ed:2b:7f:fb:65:cd:95:83:9e:
3f:09:8f:ec:25:7f:79:79:5f:fe:00:53:03:28:cb:c2:ae:1e:
3c:ff:0d:4e:83:3d:07:d0:42:35:69:85:59:6c:01:50:ce:e2:
1b:85:f7:9f:06:b3:3e:a0:fb:28:b3:ab:45:db:e5:ff:12:c9:
4f:16:90:31:16:d5:bc:90:35:3a:3e:84:cf:27:ee:0a:48:77:
3a:35:38:20:cd:df:38:22:0d:c4:4e:42:62:c0:13:82:4c:3c:
ab:ba:30:16:8c:89:ac:7c:59:ad:b7:85:77:26:27:92:21:ee:
63:57:7c:5c:1a:bd:b1:13:4e:04:11:ca:2d:9d:da:07:5e:35:
3d:6a:24:26:e1:c0:47:ac:6d:e6:a5:24:9e:86:25:09:4f:ee:
cc:fd:fb:fb:d4:e8:87:26:05:e5:06:b4:3b:81:a8:36:be:fc:
0c:0a:d6:1e:fb:9a:36:d8:d0:9c:a7:c2:92:71:dc:a3:56:7a:
71:b8:d7:b7:2d:00:a6:8a:9c:ec:0e:e9:f5:88:62:1e:f1:9c:
2d:43:85:55
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUULTk2FdB7e8LkfxEH4nR6PNSrAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0
QzdCQ0U3MjAeFw0yNTAxMTAwNjQzMjdaFw0yNjAxMDkwNjQ4MjdaMDMxMTAvBgNV
BAMTKEZFOEZEQjE4RjMxNTM3OEI3OENGMkFDQjFFQzBEMzc0QzIxRTY5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3nPnEV7vadwp73FaVsXB4QaOk
3fuZMoKOb9ySyQh1n6SGv6U5sM/VXiE9vj2iOGxm2XjOCr0JPvUrrtzYjdnVLnZN
EorsOfgyd3+BrzXmgF09g5Jt6qdplBcQZG62A9fHKe65ENUl5XWeiqD2698Q4z+B
lQ6m8pW+PAq/NAgl6zEIJ452O6XHSHEn2YUgZT1Wda+UEyQtbZ+ONaHrvhmzKWbu
ROHTTc8nWVHz8vx8dFi6yN296H/vY+GmEvod94KAowiZP5gsY/gsAUuFaEBmBWd4
GIMw7JbStmerkHONEBB/TE+cKuFperevTbjb/W52y9CH4RjHAM9y4hHS7KWTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/o/bGPMVN4t4zyrLHsDTdMIeaWwwHwYDVR0j
BBgwFoAU/J2hp2JbJ/20ZrHYppA3fkx7znIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZjZhYTMxYS1kZDBkLTRjMTAtYjVkZC1iMWE4M2ZhNTc3NjMvMC9GQzlEQTFBNzYy
NUIyN0ZEQjQ2NkIxRDhBNjkwMzc3RTRDN0JDRTcyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0QzdC
Q0U3Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNmFhMzFhLWRkMGQtNGMxMC1i
NWRkLWIxYTgzZmE1Nzc2My8wLzMxMzAzMzJlMzMzMTJlMzEzMDM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx9tMA0GCSqG
SIb3DQEBCwUAA4IBAQBfKLMWpYOaGTY5SCsJp6+MNuvOvsOl9elOTnZd3aSDE5/c
euEHEiesx9jHcB7tK3/7Zc2Vg54/CY/sJX95eV/+AFMDKMvCrh48/w1Ogz0H0EI1
aYVZbAFQzuIbhfefBrM+oPsos6tF2+X/EslPFpAxFtW8kDU6PoTPJ+4KSHc6NTgg
zd84Ig3ETkJiwBOCTDyrujAWjImsfFmtt4V3JieSIe5jV3xcGr2xE04EEcotndoH
XjU9aiQm4cBHrG3mpSSehiUJT+7M/fv71OiHJgXlBrQ7gag2vvwMCtYe+5o22NCc
p8KScdyjVnpxuNe3LQCmipzsDun1iGIe8ZwtQ4VV
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:19 2025 by rpki-client