Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=
Subject key identifier: 8F:AB:17:16:20:53:10:06:E5:BC:83:49:07:5A:EF:7A:96:4B:45:20
Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
Certificate serial: 6ECAC636E567FC4B0883463A0C49595CEDB16C36
Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa
Signing time: Wed 04 Dec 2024 09:03:03 +0000
ROA not before: Wed 04 Dec 2024 08:58:03 +0000
ROA not after: Wed 03 Dec 2025 09:03:03 +0000
asID: 135478
IP address blocks: 103.129.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ca:c6:36:e5:67:fc:4b:08:83:46:3a:0c:49:59:5c:ed:b1:6c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
Validity
Not Before: Dec 4 08:58:03 2024 GMT
Not After : Dec 3 09:03:03 2025 GMT
Subject: CN=8FAB171620531006E5BC8349075AEF7A964B4520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:9b:d5:9f:3e:ae:d1:d5:91:43:57:98:28:
d6:48:3e:50:b6:27:e3:51:20:6b:d3:0d:21:5c:47:
6f:15:10:1e:06:90:86:d5:fb:82:ba:7f:55:6d:0b:
11:5d:f8:5d:c7:20:ab:51:d6:87:b4:5f:93:a7:9e:
5e:28:be:36:56:0b:8a:82:45:91:60:fc:7c:22:97:
bb:63:22:7d:83:b4:1b:6a:a9:fc:9f:4a:f3:35:46:
ff:bd:56:5b:c9:93:66:c7:c3:38:db:ce:f5:e4:b9:
e9:3d:9c:48:cf:18:6e:da:0e:4d:30:11:57:da:46:
79:a7:e6:e5:ef:03:a6:d5:fe:90:f2:a7:cc:a7:98:
88:3c:e3:d4:38:fb:f3:a2:85:e4:5b:a2:ec:3d:c9:
3b:4c:28:e8:3e:2d:dc:65:36:c1:66:85:c4:53:df:
32:44:33:80:c9:0b:5e:47:e2:20:df:ea:1f:16:6f:
5a:22:bc:5d:c9:a8:30:bd:41:32:39:0d:06:99:14:
c6:d6:07:64:8c:ae:49:c1:20:a7:f8:1f:51:e9:fb:
5e:b4:4d:36:d1:d0:85:93:73:89:bf:8c:d4:91:f5:
2e:40:e7:87:5e:12:6a:63:a9:cb:ec:08:dd:5c:cd:
40:0b:ba:51:1a:e1:d8:4c:78:12:5f:12:a3:46:e0:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:17:16:20:53:10:06:E5:BC:83:49:07:5A:EF:7A:96:4B:45:20
X509v3 Authority Key Identifier:
keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.70.0/23
Signature Algorithm: sha256WithRSAEncryption
53:23:de:4a:85:0f:d8:62:f6:42:a2:96:1d:b6:5e:73:3c:83:
85:11:bf:00:4a:a0:ee:e0:16:45:a3:78:e4:2c:0b:9f:01:d3:
18:8f:72:5d:13:33:a3:80:37:f9:67:70:98:5e:58:b1:9d:f7:
af:8e:45:1f:97:e2:56:92:a8:0b:93:ae:01:ce:50:f8:c5:64:
29:59:45:d4:39:2d:1b:50:c0:96:d6:b2:f8:5c:82:89:f1:61:
df:40:42:ef:cf:0e:1c:25:9a:69:9d:52:e9:32:ac:a5:96:62:
d5:af:0d:18:df:c0:cd:b9:71:fe:03:c5:75:9c:a7:a7:6f:24:
09:a6:56:0e:b1:6e:2e:f8:7d:84:52:c9:03:7a:68:70:98:01:
e8:dd:2f:e9:82:18:06:3a:d7:b9:d3:95:7e:aa:87:b7:fd:11:
75:1c:bd:b5:62:cc:57:cd:0c:b1:32:3c:71:6b:00:e9:e9:9a:
d6:f4:2b:64:0c:8d:0c:95:d6:11:6e:94:a7:17:ff:2c:32:e5:
67:c5:8c:ee:38:a2:b2:12:49:db:e4:2f:d9:38:01:ec:10:dc:
c1:5a:f7:6c:9c:88:3f:85:02:f8:11:e0:4f:58:10:0a:57:84:
91:18:3e:28:5c:f1:38:67:db:20:40:7b:61:72:f7:fd:c8:2b:
b7:2c:d0:27
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbsrGNuVn/EsIg0Y6DElZXO2xbDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0
RjBDNUE3QTAeFw0yNDEyMDQwODU4MDNaFw0yNTEyMDMwOTAzMDNaMDMxMTAvBgNV
BAMTKDhGQUIxNzE2MjA1MzEwMDZFNUJDODM0OTA3NUFFRjdBOTY0QjQ1MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwJvVnz6u0dWRQ1eYKNZIPlC2
J+NRIGvTDSFcR28VEB4GkIbV+4K6f1VtCxFd+F3HIKtR1oe0X5Onnl4ovjZWC4qC
RZFg/Hwil7tjIn2DtBtqqfyfSvM1Rv+9VlvJk2bHwzjbzvXkuek9nEjPGG7aDk0w
EVfaRnmn5uXvA6bV/pDyp8ynmIg849Q4+/OiheRbouw9yTtMKOg+LdxlNsFmhcRT
3zJEM4DJC15H4iDf6h8Wb1oivF3JqDC9QTI5DQaZFMbWB2SMrknBIKf4H1Hp+160
TTbR0IWTc4m/jNSR9S5A54deEmpjqcvsCN1czUALulEa4dhMeBJfEqNG4P3nAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUj6sXFiBTEAblvINJB1rvepZLRSAwHwYDVR0j
BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5
OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD
NUE3QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3ZjZlNTdiLTRjMjYtNDQyYi04
YWZjLTAzMjllZWRhZmI3Mi8wLzMxMzAzMzJlMzEzMjM5MmUzNzMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4FGMA0GCSqG
SIb3DQEBCwUAA4IBAQBTI95KhQ/YYvZCopYdtl5zPIOFEb8ASqDu4BZFo3jkLAuf
AdMYj3JdEzOjgDf5Z3CYXlixnfevjkUfl+JWkqgLk64BzlD4xWQpWUXUOS0bUMCW
1rL4XIKJ8WHfQELvzw4cJZppnVLpMqyllmLVrw0Y38DNuXH+A8V1nKenbyQJplYO
sW4u+H2EUskDemhwmAHo3S/pghgGOte505V+qoe3/RF1HL21YsxXzQyxMjxxawDp
6ZrW9CtkDI0MldYRbpSnF/8sMuVnxYzuOKKyEknb5C/ZOAHsENzBWvdsnIg/hQL4
EeBPWBAKV4SRGD4oXPE4Z9sgQHthcvf9yCu3LNAn
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:07 2025 by rpki-client