Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/3130332e332e3233322e302f32342d3234203d3e20313531353238.roa
File: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (raw, json)
Hash identifier: 4fYMDhNgrNIZqkjhtJ963SmEKS19mRy8ZlZYdvTh4Vc=
Subject key identifier: AD:E1:36:F5:52:BA:59:0C:C3:66:F6:71:EE:DA:3A:A7:F7:29:F8:39
Certificate issuer: /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F
Certificate serial: 05A73B1D52A2F5EC5977590C43E0A7EE3A3D44B9
Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/3130332e332e3233322e302f32342d3234203d3e20313531353238.roa
Signing time: Wed 04 Dec 2024 14:58:20 +0000
ROA not before: Wed 04 Dec 2024 14:53:20 +0000
ROA not after: Wed 03 Dec 2025 14:58:20 +0000
asID: 151528
IP address blocks: 103.3.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a7:3b:1d:52:a2:f5:ec:59:77:59:0c:43:e0:a7:ee:3a:3d:44:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F
Validity
Not Before: Dec 4 14:53:20 2024 GMT
Not After : Dec 3 14:58:20 2025 GMT
Subject: CN=ADE136F552BA590CC366F671EEDA3AA7F729F839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:c8:a3:c8:92:75:d2:48:f4:16:ee:17:ce:
8a:ca:a3:08:a7:5b:1e:ed:5f:64:44:40:e3:4d:f0:
62:7c:64:2c:db:c9:7b:c4:9b:4d:97:c0:58:b4:93:
05:e0:e0:59:ae:4a:73:a8:2f:1c:83:77:59:1e:52:
6c:1b:e8:dd:98:85:c4:07:12:da:6b:81:1b:0d:8d:
0b:18:85:a9:74:6d:84:59:91:b8:f6:17:d8:a1:50:
df:d2:84:18:1d:10:ed:a6:f0:89:99:ad:fe:11:70:
b3:72:a2:f3:2d:b5:4f:bd:a1:f9:7c:4c:73:c1:f4:
1c:a0:8d:f1:35:d8:07:36:dd:cb:da:f1:dd:4d:69:
43:56:f4:dd:47:65:b2:83:8f:28:bc:d1:ee:4b:52:
73:72:47:d1:fb:40:98:f8:44:f9:89:65:11:39:6d:
a6:d4:96:be:62:c7:32:05:98:82:8b:ee:fe:6c:cd:
2e:87:a9:4f:1a:b3:12:b6:a0:08:ae:12:5b:4d:79:
80:33:66:e2:62:14:97:30:d3:42:57:30:cb:07:61:
ad:5b:a2:4b:68:cf:9f:c8:55:a2:60:88:46:a9:f7:
46:07:2f:0e:21:a8:0e:d5:75:91:b1:1e:ff:53:eb:
26:00:47:b9:78:5a:d7:5b:8a:fd:c0:6f:da:8b:6c:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E1:36:F5:52:BA:59:0C:C3:66:F6:71:EE:DA:3A:A7:F7:29:F8:39
X509v3 Authority Key Identifier:
keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/3130332e332e3233322e302f32342d3234203d3e20313531353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.3.232.0/24
Signature Algorithm: sha256WithRSAEncryption
31:8e:7f:b0:67:49:c4:e3:13:e9:46:2c:1a:5b:d2:cd:a8:c8:
5a:5c:e3:c1:f3:6a:22:94:05:98:ce:63:0d:17:06:97:b2:69:
a2:31:44:26:ae:c8:7c:0a:df:c3:11:a3:b3:20:47:aa:2d:3e:
a3:50:6b:49:0d:34:7a:61:9d:b4:2d:18:a8:89:82:79:ec:fb:
10:f8:e3:5e:04:53:72:29:b0:15:76:69:28:53:7f:93:ff:cd:
99:f5:6a:60:34:4f:a4:d6:0f:91:71:05:eb:33:be:8b:57:42:
52:f4:36:0c:a7:d3:d0:d0:cd:eb:e6:e5:d6:b5:27:a6:21:8f:
c4:79:49:fe:d1:4d:f6:26:b0:0f:34:7a:ff:4b:6b:d5:4b:f0:
4d:d0:68:ba:af:dd:f1:a1:a2:d3:eb:37:0c:b8:78:58:6c:fe:
46:82:dc:07:01:ed:9d:bd:a8:1b:da:ec:93:3d:63:40:5e:8d:
63:39:a1:54:bf:e1:a0:0b:ef:c1:e1:42:d2:3d:6d:cd:16:24:
8d:89:20:29:59:a1:73:df:91:de:cc:03:62:2c:36:c1:a3:82:
b8:b7:ac:d0:8a:50:c4:54:13:38:c9:69:b2:44:c8:11:a9:fb:
2f:81:d3:d8:06:0e:fd:d2:a7:ac:83:52:a9:a0:bd:77:d8:89:
bf:0b:a3:1d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBac7HVKi9exZd1kMQ+Cn7jo9RLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5
NTk1M0ExRjAeFw0yNDEyMDQxNDUzMjBaFw0yNTEyMDMxNDU4MjBaMDMxMTAvBgNV
BAMTKEFERTEzNkY1NTJCQTU5MENDMzY2RjY3MUVFREEzQUE3RjcyOUY4MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ58ijyJJ10kj0Fu4XzorKowin
Wx7tX2REQONN8GJ8ZCzbyXvEm02XwFi0kwXg4FmuSnOoLxyDd1keUmwb6N2YhcQH
EtprgRsNjQsYhal0bYRZkbj2F9ihUN/ShBgdEO2m8ImZrf4RcLNyovMttU+9ofl8
THPB9BygjfE12Ac23cva8d1NaUNW9N1HZbKDjyi80e5LUnNyR9H7QJj4RPmJZRE5
babUlr5ixzIFmIKL7v5szS6HqU8asxK2oAiuEltNeYAzZuJiFJcw00JXMMsHYa1b
oktoz5/IVaJgiEap90YHLw4hqA7VdZGxHv9T6yYAR7l4Wtdbiv3Ab9qLbDc7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUreE29VK6WQzDZvZx7to6p/cp+DkwHwYDVR0j
BBgwFoAU5TzdIEpdW/eIOgQ4v8IXlJWVOh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OWU3Y2EzOS04ZGJjLTQyODItYTBkMy04NDgwMjM3MjY4NjIvMC9FNTNDREQyMDRB
NUQ1QkY3ODgzQTA0MzhCRkMyMTc5NDk1OTUzQTFGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5NTk1
M0ExRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZTdjYTM5LThkYmMtNDI4Mi1h
MGQzLTg0ODAyMzcyNjg2Mi8wLzMxMzAzMzJlMzMyZTMyMzMzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMTM1MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcD6DANBgkqhkiG
9w0BAQsFAAOCAQEAMY5/sGdJxOMT6UYsGlvSzajIWlzjwfNqIpQFmM5jDRcGl7Jp
ojFEJq7IfArfwxGjsyBHqi0+o1BrSQ00emGdtC0YqImCeez7EPjjXgRTcimwFXZp
KFN/k//NmfVqYDRPpNYPkXEF6zO+i1dCUvQ2DKfT0NDN6+bl1rUnpiGPxHlJ/tFN
9iawDzR6/0tr1UvwTdBouq/d8aGi0+s3DLh4WGz+RoLcBwHtnb2oG9rskz1jQF6N
YzmhVL/hoAvvweFC0j1tzRYkjYkgKVmhc9+R3swDYiw2waOCuLes0IpQxFQTOMlp
skTIEan7L4HT2AYO/dKnrINSqaC9d9iJvwujHQ==
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:48:57 2025 by rpki-client