Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa
File: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (raw, json)
Hash identifier: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=
Subject key identifier: FF:47:ED:74:5B:BB:41:C8:3A:99:BC:B6:46:F0:42:13:2B:02:A3:EF
Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D
Certificate serial: 5642681615E9B0E1A9D7B5AA4EF63550EAE24F0F
Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa
Signing time: Thu 27 Feb 2025 15:02:20 +0000
ROA not before: Thu 27 Feb 2025 14:57:20 +0000
ROA not after: Thu 26 Feb 2026 15:02:20 +0000
asID: 149718
IP address blocks: 103.187.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:42:68:16:15:e9:b0:e1:a9:d7:b5:aa:4e:f6:35:50:ea:e2:4f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D
Validity
Not Before: Feb 27 14:57:20 2025 GMT
Not After : Feb 26 15:02:20 2026 GMT
Subject: CN=FF47ED745BBB41C83A99BCB646F042132B02A3EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:5b:3a:7c:3f:36:e8:f4:ee:0b:89:54:7c:
eb:13:65:0d:8e:b3:47:bb:23:56:1a:91:95:c5:5d:
7c:ee:9d:8f:f0:78:94:78:d6:49:04:3d:4f:e0:d8:
99:40:fa:23:c8:c7:b1:ea:43:30:3b:b7:a6:30:87:
fd:cf:13:1c:d0:dc:03:e0:d2:88:bd:07:4c:57:49:
18:22:ec:17:fa:41:2b:aa:c2:85:48:94:03:b1:ed:
0a:93:85:22:01:a7:76:57:e1:9a:77:86:6e:83:21:
b5:b9:98:54:4e:8f:65:b0:c3:70:96:60:4e:f7:11:
69:b6:43:c2:ed:87:c0:aa:28:3a:a0:a4:e5:8e:ff:
3b:94:84:eb:af:04:51:86:81:c2:9e:a9:70:3e:c4:
f5:01:28:49:19:64:d8:24:42:3a:2c:ba:5d:0e:94:
0d:ec:ae:c7:c8:45:e1:6f:d4:15:3c:4a:67:cc:24:
8e:6b:5c:46:45:3a:6b:43:80:64:b0:28:77:07:ed:
9a:a3:ca:8c:7d:79:fa:46:b2:73:85:ab:19:b2:d9:
c2:8f:8c:76:55:f0:83:0c:7f:f7:73:c1:8e:ae:1d:
13:7b:ef:77:57:d6:47:ad:5d:0a:d1:2e:21:86:d8:
52:a6:17:aa:ec:9f:44:e5:fc:1f:28:b5:e9:15:c8:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:ED:74:5B:BB:41:C8:3A:99:BC:B6:46:F0:42:13:2B:02:A3:EF
X509v3 Authority Key Identifier:
keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.86.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:88:0f:93:e4:df:6c:9b:e0:32:f7:e6:9b:7c:6e:b7:43:ed:
7a:b8:f9:bb:9e:4a:b0:d4:cc:7e:8a:39:36:38:75:33:88:bd:
db:ff:5d:1d:0e:b9:4a:08:55:21:2e:83:6b:d2:ae:72:f6:67:
a8:ee:59:f1:f3:ad:aa:20:2e:b9:ae:4b:11:b3:66:b9:b2:5b:
3e:04:48:7d:6c:0d:a8:a3:42:f4:f0:3c:37:7a:54:12:72:d8:
07:0d:8b:fb:3e:75:7e:ec:22:15:eb:f4:b8:b2:93:f6:d0:d0:
b6:dc:04:fd:99:18:8c:34:44:12:05:0d:a7:64:b8:71:80:88:
25:dc:db:13:37:a0:d3:d8:0f:0c:9c:bc:15:6b:33:b7:72:f2:
cd:26:69:63:a2:7a:d5:a4:06:da:36:f4:bd:c5:7a:d0:a8:66:
0f:5d:37:78:4f:0e:49:de:19:15:f5:3e:c3:af:7c:06:f9:a8:
e2:37:e9:2c:19:4b:77:8c:02:cf:b9:3a:03:7c:2b:0f:d5:b1:
c2:c3:90:59:77:a4:21:37:3c:04:c4:7a:0a:b7:b7:20:a3:57:
da:36:04:e2:94:6b:57:11:49:45:df:9a:9e:db:63:e8:8f:f6:
c8:1c:75:ff:9c:65:6a:51:b5:78:bf:cd:34:cb:f3:11:d4:d8:
a3:94:82:ce
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVkJoFhXpsOGp17WqTvY1UOriTw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2
NTM5QjA1RDAeFw0yNTAyMjcxNDU3MjBaFw0yNjAyMjYxNTAyMjBaMDMxMTAvBgNV
BAMTKEZGNDdFRDc0NUJCQjQxQzgzQTk5QkNCNjQ2RjA0MjEzMkIwMkEzRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0ls6fD826PTuC4lUfOsTZQ2O
s0e7I1YakZXFXXzunY/weJR41kkEPU/g2JlA+iPIx7HqQzA7t6Ywh/3PExzQ3APg
0oi9B0xXSRgi7Bf6QSuqwoVIlAOx7QqThSIBp3ZX4Zp3hm6DIbW5mFROj2Www3CW
YE73EWm2Q8Lth8CqKDqgpOWO/zuUhOuvBFGGgcKeqXA+xPUBKEkZZNgkQjosul0O
lA3srsfIReFv1BU8SmfMJI5rXEZFOmtDgGSwKHcH7Zqjyox9efpGsnOFqxmy2cKP
jHZV8IMMf/dzwY6uHRN773dX1ketXQrRLiGG2FKmF6rsn0Tl/B8otekVyDifAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/0ftdFu7Qcg6mby2RvBCEysCo+8wHwYDVR0j
BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4
NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5
QjA1RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiN2VmNTE1LTg1NjQtNDFlOC05
ZDIwLTJkMzNkNDVjY2JkNi8wLzMxMzAzMzJlMzEzODM3MmUzODM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7tWMA0GCSqG
SIb3DQEBCwUAA4IBAQAsiA+T5N9sm+Ay9+abfG63Q+16uPm7nkqw1Mx+ijk2OHUz
iL3b/10dDrlKCFUhLoNr0q5y9meo7lnx862qIC65rksRs2a5sls+BEh9bA2oo0L0
8Dw3elQSctgHDYv7PnV+7CIV6/S4spP20NC23AT9mRiMNEQSBQ2nZLhxgIgl3NsT
N6DT2A8MnLwVazO3cvLNJmljonrVpAbaNvS9xXrQqGYPXTd4Tw5J3hkV9T7Dr3wG
+ajiN+ksGUt3jALPuToDfCsP1bHCw5BZd6QhNzwExHoKt7cgo1faNgTilGtXEUlF
35qe22Poj/bIHHX/nGVqUbV4v800y/MR1NijlILO
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:35 2025 by rpki-client