Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa
File: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier: H2vMbusg9cc7KJr3RTfXCg88poNhf1lCs+Xogw0psfI=
Subject key identifier: C9:2C:EE:12:38:25:91:CB:0E:18:69:FF:22:5C:98:4D:47:D1:A1:55
Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Certificate serial: 1E3C83F42F877D49D68EEFBD5F95254BE3042590
Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa
Signing time: Mon 02 Dec 2024 14:39:45 +0000
ROA not before: Mon 02 Dec 2024 14:34:45 +0000
ROA not after: Mon 01 Dec 2025 14:39:45 +0000
asID: 136087
IP address blocks: 103.87.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3c:83:f4:2f:87:7d:49:d6:8e:ef:bd:5f:95:25:4b:e3:04:25:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Validity
Not Before: Dec 2 14:34:45 2024 GMT
Not After : Dec 1 14:39:45 2025 GMT
Subject: CN=C92CEE12382591CB0E1869FF225C984D47D1A155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:97:bb:31:65:4a:3b:5c:35:42:29:1b:08:
4c:a0:65:fe:25:bd:0d:69:e5:1c:4a:31:8b:d3:41:
99:90:bb:a9:14:99:64:55:d0:9a:22:9a:9a:1c:ea:
a7:2c:9f:98:ad:e5:39:2a:11:4c:68:dd:49:ca:48:
bf:88:9e:b4:07:8d:21:d6:e2:d6:e7:52:72:fa:d3:
73:d5:dd:c0:5c:20:16:bd:e4:60:24:34:2e:1b:65:
07:67:65:08:c1:f0:dc:9f:bc:b5:1e:f4:f3:f6:09:
c0:d2:f6:47:d2:ac:45:8d:54:34:68:65:78:4b:6b:
a1:7a:a5:43:0b:7e:77:1e:e5:f0:76:f4:70:13:0e:
6d:18:99:57:a5:a9:b8:70:2e:50:22:11:06:8a:16:
66:21:f9:8e:1f:da:cc:b3:9a:03:9f:7f:11:52:95:
b2:14:d3:c2:46:74:cd:c2:3b:22:63:3f:56:97:8a:
9b:a2:91:fe:2e:26:2b:fb:39:3e:d3:9f:21:93:24:
fa:72:65:30:77:07:e1:df:1d:fe:61:28:01:50:cd:
86:c4:5a:b3:56:df:ec:52:cb:e8:fb:ef:3b:79:aa:
22:03:75:3e:47:57:dd:cc:0c:63:a0:e9:4b:cc:2f:
22:24:18:7f:20:b6:27:01:bf:16:fb:37:1f:5f:36:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2C:EE:12:38:25:91:CB:0E:18:69:FF:22:5C:98:4D:47:D1:A1:55
X509v3 Authority Key Identifier:
keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:08:d5:1d:a2:a3:78:4c:27:74:83:df:53:df:cb:17:ff:fe:
9c:a2:84:d2:a9:cc:27:f7:61:19:89:4d:84:bc:e3:db:a7:6b:
02:fd:d2:79:51:cf:5d:e3:6b:25:9b:94:98:8b:bf:90:24:3d:
81:53:16:ec:c8:7b:38:56:cd:e2:41:ef:21:3c:1d:2c:7d:d0:
54:3a:44:39:05:a6:53:ce:83:bc:d4:1c:c9:3d:dd:b8:3f:8a:
e0:61:55:7b:02:82:2a:87:5f:54:f4:6f:c0:95:9a:10:1c:65:
eb:1d:88:11:f0:45:56:ea:46:14:20:28:e0:98:9a:03:74:de:
67:6f:4b:77:a2:39:55:a7:20:5b:37:97:86:0f:4a:ee:43:14:
fd:73:1c:07:c6:5a:1e:8e:94:cc:14:77:72:2c:3c:06:67:27:
9d:67:c2:a8:89:c5:20:c5:02:a4:98:f8:b1:a0:a0:f4:04:48:
b6:1d:ee:fb:5c:68:ac:d9:72:8d:69:7d:18:a3:d5:6b:56:6c:
34:9e:43:dc:37:db:b1:f8:ea:7a:72:1a:ee:db:22:97:24:d0:
a3:7e:cd:0a:f2:1f:00:1f:d0:79:d3:90:25:66:19:b6:ae:eb:
10:64:78:bd:bc:37:a4:65:32:2f:3d:75:74:9f:ba:7e:e7:6b:
22:49:51:43
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHjyD9C+HfUnWju+9X5UlS+MEJZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx
MjY3MDZFNDAeFw0yNDEyMDIxNDM0NDVaFw0yNTEyMDExNDM5NDVaMDMxMTAvBgNV
BAMTKEM5MkNFRTEyMzgyNTkxQ0IwRTE4NjlGRjIyNUM5ODRENDdEMUExNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLApe7MWVKO1w1QikbCEygZf4l
vQ1p5RxKMYvTQZmQu6kUmWRV0Joimpoc6qcsn5it5TkqEUxo3UnKSL+InrQHjSHW
4tbnUnL603PV3cBcIBa95GAkNC4bZQdnZQjB8NyfvLUe9PP2CcDS9kfSrEWNVDRo
ZXhLa6F6pUMLfnce5fB29HATDm0YmVelqbhwLlAiEQaKFmYh+Y4f2syzmgOffxFS
lbIU08JGdM3COyJjP1aXipuikf4uJiv7OT7TnyGTJPpyZTB3B+HfHf5hKAFQzYbE
WrNW3+xSy+j77zt5qiIDdT5HV93MDGOg6UvMLyIkGH8gticBvxb7Nx9fNoivAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUySzuEjglkcsOGGn/IlyYTUfRoVUwHwYDVR0j
BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2
OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3
MDZFNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2ZTYzY2QyLWZiM2MtNDFiMi1i
OTZiLWFiMjM0NDIwYTIxMS8wLzMxMzAzMzJlMzgzNzJlMzEzOTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1fHMA0GCSqG
SIb3DQEBCwUAA4IBAQBqCNUdoqN4TCd0g99T38sX//6cooTSqcwn92EZiU2EvOPb
p2sC/dJ5Uc9d42slm5SYi7+QJD2BUxbsyHs4Vs3iQe8hPB0sfdBUOkQ5BaZTzoO8
1BzJPd24P4rgYVV7AoIqh19U9G/AlZoQHGXrHYgR8EVW6kYUICjgmJoDdN5nb0t3
ojlVpyBbN5eGD0ruQxT9cxwHxloejpTMFHdyLDwGZyedZ8KoicUgxQKkmPixoKD0
BEi2He77XGis2XKNaX0Yo9VrVmw0nkPcN9ux+Op6chru2yKXJNCjfs0K8h8AH9B5
05AlZhm2rusQZHi9vDekZTIvPXV0n7p+52siSVFD
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:52:36 2025 by rpki-client