Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa
File: 3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (raw, json)
Hash identifier: rR7bpk/0yOPyaFxZxG4YURIJYceUP6YuTxyTXIFALC0=
Subject key identifier: 46:1F:8B:62:FE:CC:6F:FA:93:F2:8F:C4:47:CB:DF:10:B3:5D:5D:5E
Certificate issuer: /CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF
Certificate serial: 579A7A140470FEA8A2ACBA0830CFDB302E005B05
Authority key identifier: 8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa
Signing time: Fri 19 Jul 2024 06:28:56 +0000
ROA not before: Fri 19 Jul 2024 06:23:56 +0000
ROA not after: Fri 18 Jul 2025 06:28:56 +0000
asID: 138139
IP address blocks: 103.133.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9a:7a:14:04:70:fe:a8:a2:ac:ba:08:30:cf:db:30:2e:00:5b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF
Validity
Not Before: Jul 19 06:23:56 2024 GMT
Not After : Jul 18 06:28:56 2025 GMT
Subject: CN=461F8B62FECC6FFA93F28FC447CBDF10B35D5D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:c1:1e:42:68:54:fb:40:de:f7:1a:23:45:
96:a3:b6:c8:48:6b:2b:6e:21:28:87:a9:a4:3c:85:
7c:fa:9f:34:75:ab:c2:dd:ea:35:ed:09:9c:d7:55:
6d:1d:0e:1c:85:bc:59:76:25:87:a4:7d:31:4b:12:
04:5b:0e:f8:99:c4:ae:3a:29:78:b3:35:69:79:4e:
67:a7:17:e9:c0:0f:28:2d:90:47:9e:7c:cc:99:29:
7d:15:ba:d4:ba:81:46:3c:0a:02:8c:f3:8e:47:d0:
fa:e0:66:24:15:41:3e:74:2a:56:6a:33:cb:eb:21:
ee:62:16:67:25:21:31:2f:67:19:71:dd:49:b5:23:
54:3c:12:87:c5:63:16:d0:85:37:06:3b:74:60:a0:
e5:59:46:be:e6:ce:0e:b4:df:b8:91:6f:47:6d:b5:
b2:4d:c1:31:48:56:e8:c2:a0:ab:c4:94:39:91:24:
91:05:84:cf:03:07:df:02:e0:05:37:89:b6:ac:6a:
5d:f7:89:72:02:17:cf:db:79:4c:b3:be:54:19:ac:
e9:6d:06:72:25:fb:29:46:be:9d:c1:82:c2:c6:ef:
c5:9d:d8:1b:00:bc:98:ca:b1:25:cd:f5:78:47:e9:
fd:32:7a:d5:2f:81:fb:d5:18:cd:93:ab:41:7f:96:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:8B:62:FE:CC:6F:FA:93:F2:8F:C4:47:CB:DF:10:B3:5D:5D:5E
X509v3 Authority Key Identifier:
keyid:8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:fe:1b:d4:45:93:87:8c:40:c6:aa:30:a7:53:c3:4d:11:b1:
9f:65:a6:d9:50:f9:f8:f8:32:1d:ff:df:e6:37:84:5c:e3:cf:
b1:e4:bc:86:2a:9c:9b:13:31:3c:07:d5:6a:34:07:35:a6:8e:
79:a0:f3:2c:99:9f:78:6b:02:ba:64:e8:14:55:98:f2:a4:33:
53:6c:e7:b5:86:12:a8:ce:4c:4e:a8:82:9c:27:dd:38:4e:93:
73:cc:35:14:82:4c:b6:82:40:5d:53:d6:a7:66:2f:0e:12:6c:
13:b9:c4:5c:56:b6:e9:1f:2e:06:01:21:2f:5b:82:bb:b9:44:
09:c8:75:d7:ae:18:0b:b3:e2:fd:b9:33:c9:20:7e:69:c9:8d:
13:55:e3:03:e2:d0:b1:6c:14:31:f6:63:d5:ce:7e:ec:23:e7:
95:11:bf:3d:54:0a:7d:88:83:ed:a0:36:5c:25:07:bc:3d:5b:
d3:3e:79:80:f0:01:4b:40:74:2a:c4:65:33:dd:63:25:22:89:
65:c1:24:3f:f7:16:72:1c:48:e1:00:5c:05:f9:37:16:8d:0a:
97:4e:f2:1f:d9:11:8b:5b:65:6a:db:a4:83:85:c4:9b:57:ce:
83:32:67:0b:f3:6e:d5:19:74:16:8c:c8:81:32:9a:43:52:65:
c5:88:4e:f6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUV5p6FARw/qiirLoIMM/bMC4AWwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJBMkI1RTA3RkFENTcyOEM3REVGQkY0RkMxMEJEMDQ0
MzUzRjZGRjAeFw0yNDA3MTkwNjIzNTZaFw0yNTA3MTgwNjI4NTZaMDMxMTAvBgNV
BAMTKDQ2MUY4QjYyRkVDQzZGRkE5M0YyOEZDNDQ3Q0JERjEwQjM1RDVENUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Y8EeQmhU+0De9xojRZajtshI
aytuISiHqaQ8hXz6nzR1q8Ld6jXtCZzXVW0dDhyFvFl2JYekfTFLEgRbDviZxK46
KXizNWl5TmenF+nADygtkEeefMyZKX0VutS6gUY8CgKM845H0PrgZiQVQT50KlZq
M8vrIe5iFmclITEvZxlx3Um1I1Q8EofFYxbQhTcGO3RgoOVZRr7mzg6037iRb0dt
tbJNwTFIVujCoKvElDmRJJEFhM8DB98C4AU3ibasal33iXICF8/beUyzvlQZrOlt
BnIl+ylGvp3BgsLG78Wd2BsAvJjKsSXN9XhH6f0yetUvgfvVGM2Tq0F/luqrAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQURh+LYv7Mb/qT8o/ER8vfELNdXV4wHwYDVR0j
BBgwFoAUi6K14H+tVyjH3vv0/BC9BENT9v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Yzc2Yzg1Zi05YTRmLTRhZmMtOTY5Yi04ZGEyNTM2YzVjMjQvMC84QkEyQjVFMDdG
QUQ1NzI4QzdERUZCRjRGQzEwQkQwNDQzNTNGNkZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEJBMkI1RTA3RkFENTcyOEM3REVGQkY0RkMxMEJEMDQ0MzUz
RjZGRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjNzZjODVmLTlhNGYtNGFmYy05
NjliLThkYTI1MzZjNWMyNC8wLzMxMzAzMzJlMzEzMzMzMmUzMTM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnhZIwDQYJ
KoZIhvcNAQELBQADggEBALn+G9RFk4eMQMaqMKdTw00RsZ9lptlQ+fj4Mh3/3+Y3
hFzjz7HkvIYqnJsTMTwH1Wo0BzWmjnmg8yyZn3hrArpk6BRVmPKkM1Ns57WGEqjO
TE6ogpwn3ThOk3PMNRSCTLaCQF1T1qdmLw4SbBO5xFxWtukfLgYBIS9bgru5RAnI
ddeuGAuz4v25M8kgfmnJjRNV4wPi0LFsFDH2Y9XOfuwj55URvz1UCn2Ig+2gNlwl
B7w9W9M+eYDwAUtAdCrEZTPdYyUiiWXBJD/3FnIcSOEAXAX5NxaNCpdO8h/ZEYtb
ZWrbpIOFxJtXzoMyZwvzbtUZdBaMyIEymkNSZcWITvY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:43 2025 by rpki-client