Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa
File: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (raw, json)
Hash identifier: vFQZ6zJmin+go144K352IonoJjOf81LutMdjmKX7MCM=
Subject key identifier: F5:61:48:AA:C3:0A:6B:FB:A7:50:FA:79:C0:39:6B:CF:3E:79:A0:F3
Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281
Certificate serial: 33D397520ABF6F8892D3FA601B1DD67D91CAF26A
Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa
Signing time: Sat 12 Oct 2024 07:00:00 +0000
ROA not before: Sat 12 Oct 2024 06:55:00 +0000
ROA not after: Sat 11 Oct 2025 07:00:00 +0000
asID: 149319
IP address blocks: 103.178.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d3:97:52:0a:bf:6f:88:92:d3:fa:60:1b:1d:d6:7d:91:ca:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281
Validity
Not Before: Oct 12 06:55:00 2024 GMT
Not After : Oct 11 07:00:00 2025 GMT
Subject: CN=F56148AAC30A6BFBA750FA79C0396BCF3E79A0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8a:e0:73:4c:ed:ea:29:52:88:7c:a0:fe:9d:
bd:5b:17:07:91:dc:a9:e8:6c:96:c4:7d:0c:31:e3:
aa:13:de:3d:8f:10:52:05:10:94:a5:6d:bf:e8:d7:
d9:c9:e1:c6:4b:f8:81:a9:31:2f:0d:e5:a5:48:2a:
b3:59:a1:d9:3c:38:f5:c4:b4:dc:18:e5:cd:71:6d:
01:1b:5e:a7:60:c9:b6:39:a0:f1:31:5c:5b:93:6e:
d4:53:d1:4c:db:ae:2d:2f:64:2d:f0:21:9f:98:49:
fc:e9:e6:a9:7a:96:f9:6c:e7:e4:6e:26:d9:a7:45:
5f:0a:53:01:76:e3:b6:c1:94:88:54:01:5b:1c:70:
25:4c:29:c5:57:80:71:5b:15:f3:70:f3:69:11:1d:
40:90:d4:de:f5:56:18:5b:5d:0a:0a:9c:25:2e:bc:
c8:17:cb:00:e8:36:c4:9f:96:d9:44:c6:3c:56:16:
d6:14:39:97:9e:89:70:54:2a:7e:b3:1d:ca:db:50:
e2:fe:2c:8d:fb:cc:51:c9:4a:72:a6:4e:96:79:41:
ee:4e:bf:f3:43:0b:42:5b:5b:0f:f9:60:ab:01:55:
a6:77:f2:48:e8:13:83:f4:7a:b0:67:6d:e1:a5:8b:
b7:9e:91:1a:43:de:2c:65:56:da:45:18:fa:c5:89:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:48:AA:C3:0A:6B:FB:A7:50:FA:79:C0:39:6B:CF:3E:79:A0:F3
X509v3 Authority Key Identifier:
keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.178.20.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:0b:8f:14:bd:75:41:2e:0d:8f:e5:65:94:20:06:37:c4:57:
63:a7:77:b7:36:fc:39:03:2f:1d:53:11:13:c3:7f:c5:bc:e7:
dd:5f:43:2d:93:63:22:51:5c:c7:29:d9:1d:20:dc:7a:12:a9:
da:b0:52:44:48:1e:6a:22:0c:3f:7a:b9:ff:96:21:7f:5a:af:
3e:89:0b:53:a0:5a:be:ac:da:a6:b5:ef:44:2f:bf:cc:30:ce:
bf:88:91:1b:2b:2f:93:93:42:94:7f:70:1a:74:b0:26:ef:43:
31:8f:2b:11:ed:13:14:75:52:92:4a:47:5e:82:e5:98:28:87:
1a:fa:a7:55:9a:0d:73:9e:2f:cd:9e:69:35:00:3f:7a:de:d0:
91:ac:72:5a:b3:4f:a1:64:e2:c7:64:bd:ec:62:a6:5c:13:0f:
d7:e2:52:78:6e:35:c3:0a:d6:08:f7:01:0f:e4:ae:3c:3f:c5:
38:10:67:9f:88:b3:6e:48:3a:46:96:31:95:61:a2:75:6a:86:
81:7c:53:a7:a6:e3:e1:fd:a8:77:15:fe:b6:ad:ac:3d:cc:c6:
2b:bb:34:2e:4f:36:8b:2e:6c:43:1c:e6:5a:23:3f:cb:84:08:
6b:dc:21:68:87:56:4d:31:41:ac:c7:3c:db:96:8d:ae:07:8f:
17:70:eb:d1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUM9OXUgq/b4iS0/pgGx3WfZHK8mowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy
MjE4NjI4MTAeFw0yNDEwMTIwNjU1MDBaFw0yNTEwMTEwNzAwMDBaMDMxMTAvBgNV
BAMTKEY1NjE0OEFBQzMwQTZCRkJBNzUwRkE3OUMwMzk2QkNGM0U3OUEwRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDziuBzTO3qKVKIfKD+nb1bFweR
3KnobJbEfQwx46oT3j2PEFIFEJSlbb/o19nJ4cZL+IGpMS8N5aVIKrNZodk8OPXE
tNwY5c1xbQEbXqdgybY5oPExXFuTbtRT0Uzbri0vZC3wIZ+YSfzp5ql6lvls5+Ru
JtmnRV8KUwF247bBlIhUAVsccCVMKcVXgHFbFfNw82kRHUCQ1N71VhhbXQoKnCUu
vMgXywDoNsSfltlExjxWFtYUOZeeiXBUKn6zHcrbUOL+LI37zFHJSnKmTpZ5Qe5O
v/NDC0JbWw/5YKsBVaZ38kjoE4P0erBnbeGli7eekRpD3ixlVtpFGPrFiXJdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU9WFIqsMKa/unUPp5wDlrzz55oPMwHwYDVR0j
BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC
MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4
NjI4MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2ZmQ5YTU4LWE5MDYtNDAyOS05
MmUyLWFkY2I1NmFlMThiZC8wLzMxMzAzMzJlMzEzNzM4MmUzMjMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzMzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7IUMA0GCSqG
SIb3DQEBCwUAA4IBAQC1C48UvXVBLg2P5WWUIAY3xFdjp3e3Nvw5Ay8dUxETw3/F
vOfdX0Mtk2MiUVzHKdkdINx6EqnasFJESB5qIgw/ern/liF/Wq8+iQtToFq+rNqm
te9EL7/MMM6/iJEbKy+Tk0KUf3AadLAm70MxjysR7RMUdVKSSkdeguWYKIca+qdV
mg1zni/Nnmk1AD963tCRrHJas0+hZOLHZL3sYqZcEw/X4lJ4bjXDCtYI9wEP5K48
P8U4EGefiLNuSDpGljGVYaJ1aoaBfFOnpuPh/ah3Ff62raw9zMYruzQuTzaLLmxD
HOZaIz/LhAhr3CFoh1ZNMUGsxzzblo2uB48XcOvR
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:15 2025 by rpki-client