Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa
File: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (raw, json)
Hash identifier: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=
Subject key identifier: 54:FF:04:E1:2B:9E:27:24:1F:82:EE:21:B5:35:8C:43:DB:9A:85:DC
Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Certificate serial: 21D92F542C890F270920D70D4EAF002957389AB4
Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa
Signing time: Fri 13 Dec 2024 03:01:17 +0000
ROA not before: Fri 13 Dec 2024 02:56:17 +0000
ROA not after: Fri 12 Dec 2025 03:01:17 +0000
asID: 142321
IP address blocks: 103.168.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d9:2f:54:2c:89:0f:27:09:20:d7:0d:4e:af:00:29:57:38:9a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Validity
Not Before: Dec 13 02:56:17 2024 GMT
Not After : Dec 12 03:01:17 2025 GMT
Subject: CN=54FF04E12B9E27241F82EE21B5358C43DB9A85DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:f9:b9:a1:89:d8:cf:7d:65:5e:f7:65:dd:
61:d3:31:5a:31:cf:22:df:58:79:8f:2f:52:ab:01:
1f:0d:52:45:25:45:29:03:c3:72:e1:a6:ba:d3:48:
dd:15:b1:cb:99:a5:ce:6f:5f:2b:5c:14:19:e4:ee:
86:e5:d0:09:24:5e:46:f8:70:2d:9c:50:18:cc:5d:
11:f6:f0:b5:b7:5a:c6:e5:bb:d4:87:ba:96:c8:b0:
67:0e:0f:e9:81:62:d9:77:04:f1:12:d6:16:59:ea:
e6:e6:1a:47:2d:65:9d:b8:b0:1b:1a:e4:4b:04:bc:
eb:b9:06:d1:5f:01:16:31:75:df:95:2f:82:f2:4d:
2c:17:87:41:1f:f8:ea:ae:35:36:ff:eb:f4:9d:56:
8a:1a:f8:d4:b4:e6:a7:af:d5:16:93:fb:1a:2f:c2:
97:a4:10:f6:bd:d3:c9:1e:16:90:46:2d:f2:62:04:
59:dc:9c:b3:3a:59:9a:61:ac:38:f5:fd:fb:33:80:
6b:8a:43:10:bb:07:ef:49:6e:ec:bc:7d:42:ea:cd:
e6:c6:b0:66:ba:0c:1f:2d:07:88:e7:e5:02:f3:48:
12:e9:4e:16:a9:f9:59:4b:18:11:fa:e9:c9:b0:c1:
b1:87:e1:a3:64:4c:52:86:3c:53:e6:b1:34:bf:6d:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FF:04:E1:2B:9E:27:24:1F:82:EE:21:B5:35:8C:43:DB:9A:85:DC
X509v3 Authority Key Identifier:
keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.184.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4f:76:b7:be:ca:d0:cd:34:bf:a1:8a:9f:14:8b:b4:98:ee:
89:18:b8:b7:be:16:47:85:cf:cc:76:55:c5:36:cc:0e:66:d0:
2c:24:8b:12:9e:01:b0:15:bf:f5:01:2b:63:3c:00:0d:d9:3e:
4c:48:a4:48:6d:56:5b:99:4c:db:73:23:78:21:8f:78:5f:ce:
3f:60:15:81:ff:b7:ae:ba:aa:7b:4f:2f:74:34:0d:a1:ad:53:
96:de:df:31:92:95:9b:04:0d:0e:10:d9:39:84:10:79:f0:d9:
76:37:aa:11:69:74:69:60:00:74:e2:d4:2e:02:eb:10:33:f4:
62:c3:91:80:8c:bf:cc:64:ad:96:f8:9a:ed:7b:fc:2e:c0:a4:
73:fc:96:0f:2a:e9:60:bb:59:df:64:fa:78:7b:43:33:ce:01:
ef:d4:6c:c1:32:dd:55:2b:41:d1:34:e6:7f:eb:e6:08:cd:3a:
f8:08:86:72:f6:ee:5b:1b:9e:b5:01:a2:34:06:b0:99:7e:cd:
fe:98:1c:db:ba:d1:e4:e4:ac:84:15:00:e3:5d:48:f6:45:13:
1c:20:a5:aa:d8:d4:88:e5:7a:8e:b9:e0:b6:02:3a:15:6c:c0:
7f:95:ca:d2:f3:c5:47:a1:28:45:2f:c7:28:47:ab:c3:b4:7a:
b3:fa:18:bc
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUIdkvVCyJDycJINcNTq8AKVc4mrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC
OTgzMzRGMTAeFw0yNDEyMTMwMjU2MTdaFw0yNTEyMTIwMzAxMTdaMDMxMTAvBgNV
BAMTKDU0RkYwNEUxMkI5RTI3MjQxRjgyRUUyMUI1MzU4QzQzREI5QTg1REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVefm5oYnYz31lXvdl3WHTMVox
zyLfWHmPL1KrAR8NUkUlRSkDw3LhprrTSN0VscuZpc5vXytcFBnk7obl0AkkXkb4
cC2cUBjMXRH28LW3Wsblu9SHupbIsGcOD+mBYtl3BPES1hZZ6ubmGkctZZ24sBsa
5EsEvOu5BtFfARYxdd+VL4LyTSwXh0Ef+OquNTb/6/SdVooa+NS05qev1RaT+xov
wpekEPa908keFpBGLfJiBFncnLM6WZphrDj1/fszgGuKQxC7B+9Jbuy8fULqzebG
sGa6DB8tB4jn5QLzSBLpThap+VlLGBH66cmwwbGH4aNkTFKGPFPmsTS/bfLXAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUVP8E4SueJyQfgu4htTWMQ9uahdwwHwYDVR0j
BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC
RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz
MzRGMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4ZTc4ZWUwLTAwMDItNGE2Ny1h
NzM5LTMwMzNkNWI1YmE2MS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM4MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqLgwDQYJ
KoZIhvcNAQELBQADggEBAK1Pdre+ytDNNL+hip8Ui7SY7okYuLe+FkeFz8x2VcU2
zA5m0CwkixKeAbAVv/UBK2M8AA3ZPkxIpEhtVluZTNtzI3ghj3hfzj9gFYH/t666
qntPL3Q0DaGtU5be3zGSlZsEDQ4Q2TmEEHnw2XY3qhFpdGlgAHTi1C4C6xAz9GLD
kYCMv8xkrZb4mu17/C7ApHP8lg8q6WC7Wd9k+nh7QzPOAe/UbMEy3VUrQdE05n/r
5gjNOvgIhnL27lsbnrUBojQGsJl+zf6YHNu60eTkrIQVAONdSPZFExwgparY1Ijl
eo654LYCOhVswH+VytLzxUehKEUvxyhHq8O0erP6GLw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:15 2025 by rpki-client