Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa
File:                     3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (raw, json)
Hash identifier:          wfB/tzQBppuc1HMLNKZS8DgmDxNdzRsLM2dhnwxSWec=
Subject key identifier:   6F:FE:21:EE:F0:D5:C7:F6:9E:B0:33:7C:BD:67:11:72:DC:46:0A:19
Certificate issuer:       /CN=2FD08E6755CF1CCAAF9D5834449797848A706B57
Certificate serial:       07C6930EDC4D22F530566B830A68480C549BEAC7
Authority key identifier: 2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa
Signing time:             Sat 06 Jul 2024 06:00:01 +0000
ROA not before:           Sat 06 Jul 2024 05:55:01 +0000
ROA not after:            Sat 05 Jul 2025 06:00:01 +0000
asID:                     141895
IP address blocks:        103.163.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c6:93:0e:dc:4d:22:f5:30:56:6b:83:0a:68:48:0c:54:9b:ea:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD08E6755CF1CCAAF9D5834449797848A706B57
        Validity
            Not Before: Jul  6 05:55:01 2024 GMT
            Not After : Jul  5 06:00:01 2025 GMT
        Subject: CN=6FFE21EEF0D5C7F69EB0337CBD671172DC460A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:cd:17:99:6e:79:02:dc:99:5f:d1:af:ff:
                    5d:6b:fa:4c:26:b1:37:6b:06:0d:f9:e3:67:ad:1b:
                    84:fd:09:5d:e8:84:59:9b:d9:f7:fb:6e:f1:6f:90:
                    d2:15:7d:40:30:2e:1c:3b:8d:f4:a8:d1:a1:7d:98:
                    99:73:36:50:f3:6c:38:24:46:07:94:a6:51:d0:8a:
                    12:64:d9:b1:da:60:ab:36:8e:67:ef:c0:6b:5f:4a:
                    48:35:96:ad:90:b9:f9:ff:82:0e:f6:80:5c:aa:00:
                    a0:da:ab:20:9b:54:97:49:e7:0f:35:9f:b5:6e:51:
                    fa:1a:ab:78:64:57:b9:32:30:6b:0c:ca:e6:d7:10:
                    70:93:81:d7:de:be:f9:c8:3c:8e:6b:c5:2e:f3:df:
                    ee:23:ac:01:8b:e9:ec:75:99:91:08:e0:03:2c:75:
                    57:b7:aa:08:d1:e4:ea:af:de:8d:47:ad:84:b9:63:
                    38:35:7b:c3:a1:13:4f:86:d6:65:6a:ac:1b:71:15:
                    60:a5:fd:89:4b:a0:db:89:30:a0:58:e5:11:a2:7c:
                    95:3b:90:c1:7b:70:31:cb:78:05:cc:53:70:b0:7e:
                    26:b2:13:65:98:a6:b7:43:59:f2:d1:a4:92:91:82:
                    ca:97:19:64:96:66:7a:8e:ac:40:cf:bb:3a:27:7f:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FE:21:EE:F0:D5:C7:F6:9E:B0:33:7C:BD:67:11:72:DC:46:0A:19
            X509v3 Authority Key Identifier:
                keyid:2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:46:70:30:4f:7f:46:78:85:61:3d:19:4c:76:b4:67:27:e9:
         0f:86:e0:14:c7:d2:41:cc:6c:d0:32:22:86:af:aa:ae:9c:f2:
         09:e7:34:52:f4:da:67:de:aa:56:5c:04:c2:87:30:79:a8:67:
         f4:0e:97:e9:14:3a:3b:37:8b:e8:bd:69:b7:bd:aa:39:41:05:
         58:9f:84:0f:46:92:35:34:e6:5f:41:a3:50:8d:24:f8:e0:29:
         66:81:1d:a1:42:eb:01:83:5a:32:d3:75:0b:6c:33:e9:80:b1:
         40:94:6c:60:24:45:3f:f2:4e:26:3f:23:02:21:59:ef:70:6e:
         04:84:65:d4:f2:eb:ba:ba:97:d5:83:4c:67:fb:a1:74:f7:d2:
         51:a9:ba:8c:ba:8e:a7:cf:f3:94:f7:95:bd:04:5a:48:fc:dd:
         c7:90:6d:3d:b1:75:70:4a:4a:e9:12:e3:6a:c5:26:d8:39:16:
         31:7d:15:6f:8e:96:95:1e:db:9a:24:cf:2c:dc:66:dd:e5:8a:
         03:30:ac:25:4c:c0:b9:ea:01:38:ee:92:c5:4e:ea:54:ef:6c:
         90:1f:30:b4:88:ef:81:3f:b9:e1:02:09:32:2c:27:92:c4:ee:
         3e:b6:87:85:52:0c:ce:f6:4a:c6:32:30:08:53:6c:0b:d3:c2:
         5c:19:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:46 2025 by rpki-client