Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313530313835.roa
File: 3130332e34312e3234382e302f32342d3234203d3e20313530313835.roa (raw, json)
Hash identifier: hyAN4VQBFL+6Qsple8qWz9PJHI/XwPa18Yzm8J6FcRc=
Subject key identifier: 19:A5:8A:A2:D1:4D:F6:58:19:A7:04:E4:62:B7:AE:A3:06:C4:7C:B9
Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial: 044766B89EE0FD3211A789121B28AC78F585BA33
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313530313835.roa
Signing time: Wed 20 Nov 2024 05:33:23 +0000
ROA not before: Wed 20 Nov 2024 05:28:23 +0000
ROA not after: Wed 19 Nov 2025 05:33:23 +0000
asID: 150185
IP address blocks: 103.41.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:47:66:b8:9e:e0:fd:32:11:a7:89:12:1b:28:ac:78:f5:85:ba:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Validity
Not Before: Nov 20 05:28:23 2024 GMT
Not After : Nov 19 05:33:23 2025 GMT
Subject: CN=19A58AA2D14DF65819A704E462B7AEA306C47CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:b8:9e:cf:70:f2:c3:b5:c0:4f:b9:e4:b4:
a6:11:be:d2:61:71:49:e2:d9:8b:da:6b:b6:64:b2:
33:f1:34:87:57:c0:30:9f:58:36:4a:2c:b3:94:51:
da:6c:d7:e3:73:96:58:a2:f0:53:fe:03:26:f5:f9:
c9:5f:09:d2:96:0c:53:30:4e:cb:04:a7:d8:01:9a:
60:0b:e6:96:1e:b4:6f:6d:71:bc:02:a3:6c:25:6f:
07:ab:18:27:eb:a7:94:23:36:ab:73:cb:54:d0:da:
0d:d9:88:9d:c4:4c:18:2d:d1:7c:b9:7e:b9:21:39:
a5:81:26:c7:ce:8d:ce:1c:a5:12:00:b1:a2:17:02:
db:e2:d9:82:9f:5d:f6:c5:89:22:00:2a:9f:05:c7:
c4:59:32:b2:85:f2:e5:9f:60:5d:4a:b0:cb:84:e6:
45:e6:96:09:15:e3:af:57:07:b6:88:62:19:ec:7d:
99:4c:a3:c2:09:5c:e8:2e:11:96:99:6d:16:fa:17:
2f:61:79:45:74:72:75:74:ea:6f:3f:b3:d6:b2:4c:
bc:c0:a6:48:06:3e:c2:0e:63:1b:fc:60:28:70:4b:
8e:a7:16:b4:a2:91:e8:7c:3f:5c:71:fd:b6:48:71:
02:c5:8b:45:55:a5:b1:db:a9:b7:69:1e:92:0d:d6:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:8A:A2:D1:4D:F6:58:19:A7:04:E4:62:B7:AE:A3:06:C4:7C:B9
X509v3 Authority Key Identifier:
keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313530313835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:66:15:03:20:4b:5a:df:a3:b6:28:d4:fc:f8:38:eb:dc:af:
38:cc:46:b9:ab:60:57:1a:74:33:51:71:c4:d5:26:d4:17:8b:
85:da:f5:32:dc:74:92:f1:e7:01:22:99:43:4c:1f:11:7b:8a:
35:bc:1b:5e:8f:4e:05:0b:fa:b6:7f:b4:14:dc:92:f3:fe:a2:
b5:69:9e:7f:75:3e:74:e0:24:95:3e:0f:80:15:ca:a1:65:c6:
18:53:1a:df:dd:6b:bf:49:27:87:fb:04:91:e7:df:bd:63:37:
87:eb:e6:dd:3b:b4:c7:36:dc:a0:30:01:be:3f:aa:58:19:b1:
1e:99:27:12:a5:22:04:82:9c:72:53:d4:3e:12:71:7a:14:dd:
00:71:8d:30:1c:f2:d9:c4:0b:d9:d8:77:f9:8f:47:b3:6b:75:
5b:2b:00:60:71:ba:45:fb:16:7b:c0:5a:26:26:d0:25:6a:68:
d5:12:f1:d7:e2:1b:f8:15:9c:62:17:15:a5:b9:6b:10:26:08:
e7:73:f3:2f:89:80:f0:cb:69:b3:64:5f:db:c5:c9:cd:c8:a1:
4f:c4:57:e5:bd:0c:67:95:eb:39:e4:ec:4e:cd:d8:bf:4d:2f:
60:2d:77:df:14:c6:50:b7:37:e8:d1:b9:f5:e2:62:91:36:87:
63:f6:4c:59
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBEdmuJ7g/TIRp4kSGyisePWFujMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG
QkM0QjFGQTAeFw0yNDExMjAwNTI4MjNaFw0yNTExMTkwNTMzMjNaMDMxMTAvBgNV
BAMTKDE5QTU4QUEyRDE0REY2NTgxOUE3MDRFNDYyQjdBRUEzMDZDNDdDQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuriez3Dyw7XAT7nktKYRvtJh
cUni2Yvaa7ZksjPxNIdXwDCfWDZKLLOUUdps1+Nzllii8FP+Ayb1+clfCdKWDFMw
TssEp9gBmmAL5pYetG9tcbwCo2wlbwerGCfrp5QjNqtzy1TQ2g3ZiJ3ETBgt0Xy5
frkhOaWBJsfOjc4cpRIAsaIXAtvi2YKfXfbFiSIAKp8Fx8RZMrKF8uWfYF1KsMuE
5kXmlgkV469XB7aIYhnsfZlMo8IJXOguEZaZbRb6Fy9heUV0cnV06m8/s9ayTLzA
pkgGPsIOYxv8YChwS46nFrSikeh8P1xx/bZIcQLFi0VVpbHbqbdpHpIN1nTRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUGaWKotFN9lgZpwTkYreuowbEfLkwHwYDVR0j
BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw
MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0
QjFGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NTI3N2U4LTdkMGYtNDE4NC05
YzI4LWE2NjM1ZWZlZjI5Yy8wLzMxMzAzMzJlMzQzMTJlMzIzNDM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzEzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyn4MA0GCSqG
SIb3DQEBCwUAA4IBAQALZhUDIEta36O2KNT8+Djr3K84zEa5q2BXGnQzUXHE1SbU
F4uF2vUy3HSS8ecBIplDTB8Re4o1vBtej04FC/q2f7QU3JLz/qK1aZ5/dT504CSV
Pg+AFcqhZcYYUxrf3Wu/SSeH+wSR59+9YzeH6+bdO7THNtygMAG+P6pYGbEemScS
pSIEgpxyU9Q+EnF6FN0AcY0wHPLZxAvZ2Hf5j0eza3VbKwBgcbpF+xZ7wFomJtAl
amjVEvHX4hv4FZxiFxWluWsQJgjnc/MviYDwy2mzZF/bxcnNyKFPxFflvQxnles5
5OxOzdi/TS9gLXffFMZQtzfo0bn14mKRNodj9kxZ
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:19 2025 by rpki-client