Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa
File: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (raw, json)
Hash identifier: bnY3Rdf5tjyvjTmTZpR60TzQq/Y/scdeVckhMsSJm4w=
Subject key identifier: 78:80:A9:02:B5:C7:1A:F2:21:08:17:B1:C4:25:D9:83:F8:1D:32:37
Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512
Certificate serial: 0F0AF391B6D6495A2A3B9A64420FEC077C8ED732
Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa
Signing time: Wed 14 Aug 2024 05:11:30 +0000
ROA not before: Wed 14 Aug 2024 05:06:30 +0000
ROA not after: Wed 13 Aug 2025 05:11:30 +0000
asID: 137384
IP address blocks: 103.120.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0a:f3:91:b6:d6:49:5a:2a:3b:9a:64:42:0f:ec:07:7c:8e:d7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512
Validity
Not Before: Aug 14 05:06:30 2024 GMT
Not After : Aug 13 05:11:30 2025 GMT
Subject: CN=7880A902B5C71AF2210817B1C425D983F81D3237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:1f:c9:a9:ca:31:6a:50:d3:32:de:ec:16:
7a:1d:9f:57:bf:8c:e9:6f:5a:b0:9d:94:eb:dc:c8:
44:62:b7:06:5c:2c:71:cf:21:dc:68:ab:f2:44:85:
07:e8:29:09:b1:96:6c:e4:a6:13:e8:5d:b5:cc:aa:
60:82:a5:29:e8:b8:b1:97:55:2a:3f:ce:72:36:8f:
23:f3:ad:be:4e:cd:1d:8f:42:3f:22:9f:39:99:83:
2c:4c:94:97:5c:15:d8:2f:98:51:a9:42:69:26:5e:
c9:8d:cc:bc:bc:f6:0d:68:64:e1:45:3a:bf:8b:aa:
d9:7b:93:07:24:f8:d7:77:69:2c:f7:37:ad:83:ac:
b5:f8:5a:69:9a:a3:39:2a:7e:0e:a7:d5:c9:80:fb:
1a:c6:e3:f0:4f:81:cc:39:1a:81:0e:66:21:d3:08:
8a:f0:d9:d3:70:30:d0:31:e1:a0:86:87:0a:e6:db:
71:70:5e:57:42:a1:5b:9b:45:33:8f:67:22:09:77:
7a:8a:a3:52:39:3e:6a:54:7e:7d:ae:49:6b:6f:c1:
59:79:6d:26:a2:d2:eb:c9:7e:12:5d:ee:c4:4f:5a:
3c:51:fd:43:b6:99:6b:5e:04:03:08:1f:8c:a0:3b:
de:56:51:0d:2a:73:01:97:9e:78:a2:4e:35:e9:8b:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:A9:02:B5:C7:1A:F2:21:08:17:B1:C4:25:D9:83:F8:1D:32:37
X509v3 Authority Key Identifier:
keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a0:59:ac:fe:54:5e:2e:35:92:d2:00:18:9e:25:c4:19:0a:
e4:91:3c:2e:e4:3a:fe:4f:1c:59:97:c3:e8:b5:06:97:ed:5a:
1e:8b:55:53:1c:02:cb:0a:82:41:ea:33:11:e4:fa:f5:00:54:
11:0e:48:e3:70:e0:16:19:be:67:2f:a2:f3:44:43:55:04:2c:
41:e1:bd:c7:48:0b:1f:20:5a:7f:28:01:08:a3:e9:35:e0:fd:
87:78:86:c5:a8:75:33:87:e5:52:9d:8e:da:14:fb:ac:97:56:
85:85:e3:30:f7:98:df:05:02:04:11:d5:51:26:d6:23:c4:f3:
9e:ca:89:97:6a:21:2e:ef:5d:8c:fc:a6:c3:95:79:67:e6:2f:
b1:43:e7:94:5d:b6:c5:cc:f2:ed:9c:a9:00:a2:c8:e0:d3:79:
51:01:6e:cf:90:01:5c:57:9c:66:2d:f6:8d:95:0b:17:1e:a9:
d1:c6:63:05:6f:0a:3c:e0:25:d3:fc:e9:1f:16:7e:30:82:ec:
b6:9e:d1:c4:33:a0:8f:26:21:22:14:04:28:ca:43:c6:16:7e:
a0:d2:79:eb:2e:a8:52:ab:0c:ba:94:82:34:62:79:f6:3b:81:
f6:10:20:00:bc:03:18:df:c5:3e:9a:3e:00:40:47:5c:c8:04:
ba:05:30:92
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUDwrzkbbWSVoqO5pkQg/sB3yO1zIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw
NzNBNTUxMjAeFw0yNDA4MTQwNTA2MzBaFw0yNTA4MTMwNTExMzBaMDMxMTAvBgNV
BAMTKDc4ODBBOTAyQjVDNzFBRjIyMTA4MTdCMUM0MjVEOTgzRjgxRDMyMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbpR/JqcoxalDTMt7sFnodn1e/
jOlvWrCdlOvcyERitwZcLHHPIdxoq/JEhQfoKQmxlmzkphPoXbXMqmCCpSnouLGX
VSo/znI2jyPzrb5OzR2PQj8inzmZgyxMlJdcFdgvmFGpQmkmXsmNzLy89g1oZOFF
Or+Lqtl7kwck+Nd3aSz3N62DrLX4Wmmaozkqfg6n1cmA+xrG4/BPgcw5GoEOZiHT
CIrw2dNwMNAx4aCGhwrm23FwXldCoVubRTOPZyIJd3qKo1I5PmpUfn2uSWtvwVl5
bSai0uvJfhJd7sRPWjxR/UO2mWteBAMIH4ygO95WUQ0qcwGXnniiTjXpi0oZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUeICpArXHGvIhCBexxCXZg/gdMjcwHwYDVR0j
BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5
QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB
NTUxMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyYzAwZjc5LTQ5ZWItNDUyNS05
MDI2LWEyMzhmZjQ0ODA3MC8wLzMxMzAzMzJlMzEzMjMwMmUzMjMzMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzM4MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneOgwDQYJ
KoZIhvcNAQELBQADggEBAI2gWaz+VF4uNZLSABieJcQZCuSRPC7kOv5PHFmXw+i1
BpftWh6LVVMcAssKgkHqMxHk+vUAVBEOSONw4BYZvmcvovNEQ1UELEHhvcdICx8g
Wn8oAQij6TXg/Yd4hsWodTOH5VKdjtoU+6yXVoWF4zD3mN8FAgQR1VEm1iPE857K
iZdqIS7vXYz8psOVeWfmL7FD55RdtsXM8u2cqQCiyODTeVEBbs+QAVxXnGYt9o2V
CxceqdHGYwVvCjzgJdP86R8WfjCC7Lae0cQzoI8mISIUBCjKQ8YWfqDSeesuqFKr
DLqUgjRiefY7gfYQIAC8AxjfxT6aPgBAR1zIBLoFMJI=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:10 2025 by rpki-client