Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa
File: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (raw, json)
Hash identifier: YFqBunOn7BAxcRO9kxvgzIpLLgn70FZ5dEIXUOseJlA=
Subject key identifier: 9B:4F:FF:92:0A:16:46:E3:37:21:4E:F6:64:85:00:B0:64:31:09:73
Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Certificate serial: 0CD834918D9875C69B2821C4E17B6CA2738B2E4B
Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa
Signing time: Thu 28 Nov 2024 13:00:00 +0000
ROA not before: Thu 28 Nov 2024 12:55:00 +0000
ROA not after: Thu 27 Nov 2025 13:00:00 +0000
asID: 211407
IP address blocks: 103.195.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d8:34:91:8d:98:75:c6:9b:28:21:c4:e1:7b:6c:a2:73:8b:2e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Validity
Not Before: Nov 28 12:55:00 2024 GMT
Not After : Nov 27 13:00:00 2025 GMT
Subject: CN=9B4FFF920A1646E337214EF6648500B064310973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:bb:01:82:c1:db:54:80:c3:a2:b7:95:4f:
92:4d:04:27:ca:53:68:59:83:9b:dc:1b:ff:35:19:
3b:ba:c6:d7:36:5a:03:28:5c:df:b6:c4:c9:4e:8b:
d5:80:29:4b:d6:a5:d2:dd:a9:0c:aa:5c:25:71:56:
01:0d:bc:60:27:32:1e:72:45:87:6c:9d:10:bd:d8:
5f:bc:c7:62:70:98:1b:d2:10:c8:81:d1:33:14:70:
4c:a3:25:ab:f2:c9:ec:a8:92:63:16:48:7a:ff:e2:
d1:12:5d:02:c7:00:da:0b:23:35:a7:4c:d8:d1:0c:
4b:da:9f:8e:76:6a:55:23:1a:d6:85:7d:44:62:97:
a7:8e:7c:03:34:ef:a1:2e:e5:63:dd:21:15:a3:31:
39:ac:fb:4f:93:f6:bf:c0:1d:83:89:ad:87:38:da:
4e:97:61:8b:d2:0a:14:6a:0b:93:b7:87:38:a8:c5:
21:a1:02:39:fd:52:fd:c1:bd:ba:9d:b2:12:e3:ae:
eb:d7:25:11:9f:15:05:7b:47:18:0f:b7:97:ac:bd:
8b:3f:95:ff:94:51:0a:1e:13:41:97:0c:7f:7c:74:
11:bd:45:8e:b6:57:79:d5:9c:89:5f:20:ef:8d:df:
ae:f2:53:d5:5d:69:e2:e6:15:25:06:24:f7:a6:e6:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:FF:92:0A:16:46:E3:37:21:4E:F6:64:85:00:B0:64:31:09:73
X509v3 Authority Key Identifier:
keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.195.65.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a4:50:b3:86:f3:0a:55:b3:a8:da:a6:51:52:24:5b:a0:31:
28:63:f5:9b:bf:21:32:da:b9:0f:8d:1e:ea:a5:f6:5e:d0:70:
c4:71:6a:5b:66:af:37:2e:18:47:d3:69:0c:c9:50:4a:a9:55:
6c:be:37:16:8a:39:6c:3c:4c:e7:e2:09:c6:07:95:0a:be:30:
f6:47:4c:7d:d5:e1:71:5e:19:6d:25:18:46:f1:ef:8d:9b:54:
9a:46:e8:4d:2c:51:96:2b:f5:81:ee:52:7d:ee:1d:c1:6a:16:
fa:8e:79:18:c1:68:9c:d8:cb:a0:23:45:08:a2:04:51:b2:b1:
65:73:31:9a:9c:81:dd:d8:5a:d3:cc:c9:38:63:3c:c9:d4:e8:
7f:49:e4:e5:ce:dd:f6:c9:ba:25:b7:76:5d:cd:c0:5e:ec:7f:
a1:25:19:fb:e7:d5:91:d7:f8:78:4f:5c:f7:41:56:c0:33:08:
5a:5e:b1:a0:50:15:d1:9e:6e:dd:c3:13:c7:e6:bb:5a:13:b9:
0f:83:16:d3:94:52:93:f0:23:87:75:ae:9e:f0:e8:54:2d:91:
e0:da:5b:e2:5b:51:06:64:0d:00:0e:79:1c:fc:5d:f5:c2:d2:
8b:bc:65:da:5f:57:9b:56:14:90:7e:b2:f0:52:72:76:c2:0f:
cd:13:25:66
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDNg0kY2YdcabKCHE4XtsonOLLkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw
MkZDMjFFQTAeFw0yNDExMjgxMjU1MDBaFw0yNTExMjcxMzAwMDBaMDMxMTAvBgNV
BAMTKDlCNEZGRjkyMEExNjQ2RTMzNzIxNEVGNjY0ODUwMEIwNjQzMTA5NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgvrsBgsHbVIDDoreVT5JNBCfK
U2hZg5vcG/81GTu6xtc2WgMoXN+2xMlOi9WAKUvWpdLdqQyqXCVxVgENvGAnMh5y
RYdsnRC92F+8x2JwmBvSEMiB0TMUcEyjJavyyeyokmMWSHr/4tESXQLHANoLIzWn
TNjRDEvan452alUjGtaFfURil6eOfAM076Eu5WPdIRWjMTms+0+T9r/AHYOJrYc4
2k6XYYvSChRqC5O3hzioxSGhAjn9Uv3BvbqdshLjruvXJRGfFQV7RxgPt5esvYs/
lf+UUQoeE0GXDH98dBG9RY62V3nVnIlfIO+N367yU9VdaeLmFSUGJPem5qKxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUm0//kgoWRuM3IU72ZIUAsGQxCXMwHwYDVR0j
BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz
M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD
MjFFQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwY2U0Nzk2LTQ5ZGUtNDNiMS1h
MTUyLWIxOGQxMWFkYTUyOS8wLzMxMzAzMzJlMzEzOTM1MmUzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMTMxMzQzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8NBMA0GCSqG
SIb3DQEBCwUAA4IBAQBypFCzhvMKVbOo2qZRUiRboDEoY/WbvyEy2rkPjR7qpfZe
0HDEcWpbZq83LhhH02kMyVBKqVVsvjcWijlsPEzn4gnGB5UKvjD2R0x91eFxXhlt
JRhG8e+Nm1SaRuhNLFGWK/WB7lJ97h3Bahb6jnkYwWic2MugI0UIogRRsrFlczGa
nIHd2FrTzMk4YzzJ1Oh/SeTlzt32ybolt3ZdzcBe7H+hJRn759WR1/h4T1z3QVbA
MwhaXrGgUBXRnm7dwxPH5rtaE7kPgxbTlFKT8COHda6e8OhULZHg2lviW1EGZA0A
Dnkc/F31wtKLvGXaX1ebVhSQfrLwUnJ2wg/NEyVm
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:40:26 2025 by rpki-client