Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
File: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (raw, json)
Hash identifier: O6HbZbnpwvJlF71+0v/AvXMqBhHi9/+bK/SRCDPbapk=
Subject key identifier: 7F:C9:01:51:48:6C:88:CD:DB:14:6D:64:BC:2E:45:E6:B1:6D:94:61
Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Certificate serial: 306FA245F1EB50D5726111AE8A1A53493F242708
Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
Signing time: Wed 01 Jan 2025 10:00:00 +0000
ROA not before: Wed 01 Jan 2025 09:55:00 +0000
ROA not after: Wed 31 Dec 2025 10:00:00 +0000
asID: 24312
IP address blocks: 103.195.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:6f:a2:45:f1:eb:50:d5:72:61:11:ae:8a:1a:53:49:3f:24:27:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Validity
Not Before: Jan 1 09:55:00 2025 GMT
Not After : Dec 31 10:00:00 2025 GMT
Subject: CN=7FC90151486C88CDDB146D64BC2E45E6B16D9461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1e:b1:3b:3f:18:34:bf:f4:e6:19:d5:61:45:
c0:8f:78:a8:de:6f:2d:28:86:cb:22:6e:6e:c3:40:
aa:6a:6b:2b:13:9e:0c:ed:16:cd:bb:ee:6b:86:4b:
d1:26:8d:5c:d6:6f:3d:64:e2:5a:4a:85:12:cb:34:
62:57:b9:29:10:62:4f:38:74:ef:49:56:73:24:b4:
ce:d7:40:24:4e:97:f0:6c:f9:66:d2:ba:d9:25:52:
94:18:3f:6e:c2:26:9b:d5:68:58:05:44:7e:b1:96:
be:cf:9e:5e:e4:75:6d:86:d1:04:d9:45:63:c3:03:
98:31:11:7f:68:c4:8b:20:c1:28:cf:f7:48:c6:cb:
0e:e5:2c:76:89:23:7c:81:06:0d:8b:9a:5e:4c:35:
85:b6:93:9f:86:d6:7d:35:9d:be:b2:a3:b5:bb:bb:
71:27:e4:f6:83:37:f8:93:74:33:10:24:95:12:26:
08:32:14:ae:49:9b:f6:8c:00:79:84:68:a2:0e:83:
58:c8:4b:d1:10:c5:08:c8:b2:6a:49:f7:c5:0f:0a:
d6:90:32:bb:ab:c3:46:66:46:e1:24:a5:90:33:92:
ee:78:9a:8f:19:76:bf:58:aa:cc:bc:c9:93:17:f0:
b0:6f:4f:7c:93:ac:2e:03:4e:0d:b7:80:85:c3:e1:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:01:51:48:6C:88:CD:DB:14:6D:64:BC:2E:45:E6:B1:6D:94:61
X509v3 Authority Key Identifier:
keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e203234333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.195.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ca:cd:20:6a:13:fa:a8:c7:79:83:93:52:23:01:57:21:02:
25:6e:0e:9e:da:7f:c5:6a:9c:b2:8f:4a:6a:4d:ee:6c:39:e4:
1b:34:59:dc:d2:90:41:a4:59:d1:b8:8e:e9:e1:29:b5:cb:c5:
02:c6:96:9c:74:66:11:cc:c1:33:dc:bf:08:d1:53:d2:a9:00:
48:ae:ed:fc:10:05:77:44:65:5c:50:42:e8:c2:f9:6f:2a:d8:
53:7d:74:e7:9a:73:92:88:32:3a:0a:fa:8b:c5:73:3e:53:88:
88:59:1f:c1:e7:95:04:04:53:63:1c:fb:87:44:20:3f:12:dd:
e3:51:b6:32:0c:ce:03:20:a9:bc:14:0a:c4:c6:99:88:da:51:
86:d7:6a:65:2e:84:19:f5:63:4c:4b:74:66:71:c3:be:96:47:
42:10:0d:4e:7a:ea:57:01:29:fc:8e:6a:1a:2a:32:df:fc:e4:
54:b7:7b:7a:f7:83:82:de:2e:75:79:b9:8f:0d:6e:91:da:a1:
76:1a:58:44:fd:69:67:3e:7f:be:83:99:1d:00:6e:8f:4f:6a:
cd:1d:ea:50:36:b5:8b:20:cb:cf:95:25:41:d1:75:13:66:eb:
53:76:30:64:83:e4:71:32:c3:a5:ac:9b:08:ae:8c:35:4e:6f:
c2:79:be:41
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMG+iRfHrUNVyYRGuihpTST8kJwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw
MkZDMjFFQTAeFw0yNTAxMDEwOTU1MDBaFw0yNTEyMzExMDAwMDBaMDMxMTAvBgNV
BAMTKDdGQzkwMTUxNDg2Qzg4Q0REQjE0NkQ2NEJDMkU0NUU2QjE2RDk0NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvHrE7Pxg0v/TmGdVhRcCPeKje
by0ohssibm7DQKpqaysTngztFs277muGS9EmjVzWbz1k4lpKhRLLNGJXuSkQYk84
dO9JVnMktM7XQCROl/Bs+WbSutklUpQYP27CJpvVaFgFRH6xlr7Pnl7kdW2G0QTZ
RWPDA5gxEX9oxIsgwSjP90jGyw7lLHaJI3yBBg2Lml5MNYW2k5+G1n01nb6yo7W7
u3En5PaDN/iTdDMQJJUSJggyFK5Jm/aMAHmEaKIOg1jIS9EQxQjIsmpJ98UPCtaQ
Mrurw0ZmRuEkpZAzku54mo8Zdr9Yqsy8yZMX8LBvT3yTrC4DTg23gIXD4eapAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUf8kBUUhsiM3bFG1kvC5F5rFtlGEwHwYDVR0j
BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz
M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD
MjFFQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwY2U0Nzk2LTQ5ZGUtNDNiMS1h
MTUyLWIxOGQxMWFkYTUyOS8wLzMxMzAzMzJlMzEzOTM1MmUzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfDQTANBgkqhkiG
9w0BAQsFAAOCAQEAoMrNIGoT+qjHeYOTUiMBVyECJW4Ontp/xWqcso9Kak3ubDnk
GzRZ3NKQQaRZ0biO6eEptcvFAsaWnHRmEczBM9y/CNFT0qkASK7t/BAFd0RlXFBC
6ML5byrYU31055pzkogyOgr6i8VzPlOIiFkfweeVBARTYxz7h0QgPxLd41G2MgzO
AyCpvBQKxMaZiNpRhtdqZS6EGfVjTEt0ZnHDvpZHQhANTnrqVwEp/I5qGioy3/zk
VLd7eveDgt4udXm5jw1ukdqhdhpYRP1pZz5/voOZHQBuj09qzR3qUDa1iyDLz5Ul
QdF1E2brU3YwZIPkcTLDpaybCK6MNU5vwnm+QQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:03 2025 by rpki-client