Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa
File: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (raw, json)
Hash identifier: RbezRzshmathyV4EoiQ/5deOypXsD7H6MYLkfw1/pRw=
Subject key identifier: 72:7F:4B:B8:42:1A:AA:BE:F3:F5:22:02:3B:0D:23:F7:BE:AF:23:72
Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Certificate serial: 30B44F5CCC3E73161CC0E02EE8EEAFD02E2718EA
Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa
Signing time: Sun 29 Dec 2024 08:00:47 +0000
ROA not before: Sun 29 Dec 2024 07:55:47 +0000
ROA not after: Sun 28 Dec 2025 08:00:47 +0000
asID: 138102
IP address blocks: 103.125.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b4:4f:5c:cc:3e:73:16:1c:c0:e0:2e:e8:ee:af:d0:2e:27:18:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Validity
Not Before: Dec 29 07:55:47 2024 GMT
Not After : Dec 28 08:00:47 2025 GMT
Subject: CN=727F4BB8421AAABEF3F522023B0D23F7BEAF2372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:93:35:50:0c:c7:d9:ab:3a:02:bd:3c:dd:
7d:eb:ca:4a:54:d5:6f:77:21:f0:9f:40:56:2f:40:
d9:7f:85:e7:96:2c:eb:a1:9a:fb:ae:41:0f:01:db:
74:31:f9:b7:b5:21:a6:d9:80:14:67:b0:f7:df:90:
85:19:b0:f3:29:2d:78:af:ea:ed:85:70:f1:52:67:
19:01:e3:cd:c9:a0:09:fa:9a:98:44:64:da:c1:25:
82:c1:70:30:65:a1:34:02:f1:5d:51:4c:14:cb:8c:
1a:c1:ba:d8:86:28:77:2e:e6:46:11:06:51:41:a6:
f4:6d:0f:d2:1f:00:55:2f:51:4b:b4:32:bf:87:78:
93:d0:6b:c9:08:74:74:b4:76:70:ee:33:93:1c:df:
22:f1:0b:78:32:45:87:db:c3:fc:cc:66:4f:93:92:
00:83:1c:82:42:da:f1:98:e7:fe:20:35:79:01:c6:
9d:13:b0:6d:6a:0b:14:79:61:d0:2d:91:4b:3a:a1:
28:82:98:0d:4f:73:e8:73:98:4f:21:77:6b:4e:07:
bb:0c:ee:9c:f8:94:a1:7a:14:a1:3f:54:a3:07:1a:
17:d1:50:09:82:b1:b3:a4:c0:45:4a:8e:64:8d:94:
83:d3:63:a9:e4:55:11:5d:1f:28:5a:a6:5b:69:d7:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:4B:B8:42:1A:AA:BE:F3:F5:22:02:3B:0D:23:F7:BE:AF:23:72
X509v3 Authority Key Identifier:
keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:64:34:ab:4a:67:ad:4b:61:90:e3:00:27:93:91:40:50:9c:
1a:e1:59:ef:ea:b2:cd:1a:cf:7d:22:96:67:03:7f:de:17:95:
d9:ec:86:b9:bb:22:0e:3a:52:78:e4:47:ed:4b:04:9d:7c:1b:
a1:57:8f:41:32:ab:dc:5e:02:48:7d:e0:2d:6a:1d:81:8e:6d:
ed:00:5b:51:6f:6f:f0:80:bf:65:e0:87:66:ac:80:89:6a:a4:
30:47:cb:29:cc:b6:7c:95:19:62:8c:18:91:90:39:91:2f:c8:
66:fd:5e:75:a7:eb:06:f3:11:50:54:e9:87:5a:25:bd:2c:37:
ce:1d:db:f8:58:6b:21:41:ac:99:dd:e7:31:03:a7:75:a3:b2:
a0:62:5c:92:02:93:57:43:cb:52:b1:6a:1f:9a:b2:1b:31:de:
15:6b:95:3b:e9:af:04:12:31:04:cf:74:69:24:b3:5a:12:b5:
a7:17:99:0c:a4:69:a0:71:f7:94:65:00:53:ba:34:0f:10:68:
e6:30:b5:66:2a:1b:bf:d2:eb:74:16:94:a9:1d:c2:b2:0b:20:
cb:1c:a2:11:d7:c3:a3:18:52:fb:c6:b8:70:5d:5c:bb:ba:50:
23:a4:e6:f6:f4:18:ae:2a:17:e5:f0:06:fc:1d:9b:6c:b8:08:
2a:fa:4a:9d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMLRPXMw+cxYcwOAu6O6v0C4nGOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNF
RTZBRDFGOTAeFw0yNDEyMjkwNzU1NDdaFw0yNTEyMjgwODAwNDdaMDMxMTAvBgNV
BAMTKDcyN0Y0QkI4NDIxQUFBQkVGM0Y1MjIwMjNCMEQyM0Y3QkVBRjIzNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+pM1UAzH2as6Ar083X3rykpU
1W93IfCfQFYvQNl/heeWLOuhmvuuQQ8B23Qx+be1IabZgBRnsPffkIUZsPMpLXiv
6u2FcPFSZxkB483JoAn6mphEZNrBJYLBcDBloTQC8V1RTBTLjBrButiGKHcu5kYR
BlFBpvRtD9IfAFUvUUu0Mr+HeJPQa8kIdHS0dnDuM5Mc3yLxC3gyRYfbw/zMZk+T
kgCDHIJC2vGY5/4gNXkBxp0TsG1qCxR5YdAtkUs6oSiCmA1Pc+hzmE8hd2tOB7sM
7pz4lKF6FKE/VKMHGhfRUAmCsbOkwEVKjmSNlIPTY6nkVRFdHyhapltp19SHAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUcn9LuEIaqr7z9SICOw0j976vI3IwHwYDVR0j
BBgwFoAUTe+92YVL6NHij3MwoLgCw+5q0fkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MGRlMjMxZi1mYjhhLTQyN2EtYWEzNi0wYTNmYzk3MjMyOGQvMC80REVGQkREOTg1
NEJFOEQxRTI4RjczMzBBMEI4MDJDM0VFNkFEMUY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNFRTZB
RDFGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwZGUyMzFmLWZiOGEtNDI3YS1h
YTM2LTBhM2ZjOTcyMzI4ZC8wLzMxMzAzMzJlMzEzMjM1MmUzMTMxMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMwMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfXQwDQYJ
KoZIhvcNAQELBQADggEBACtkNKtKZ61LYZDjACeTkUBQnBrhWe/qss0az30ilmcD
f94Xldnshrm7Ig46UnjkR+1LBJ18G6FXj0Eyq9xeAkh94C1qHYGObe0AW1Fvb/CA
v2Xgh2asgIlqpDBHyynMtnyVGWKMGJGQOZEvyGb9XnWn6wbzEVBU6YdaJb0sN84d
2/hYayFBrJnd5zEDp3WjsqBiXJICk1dDy1Kxah+ashsx3hVrlTvprwQSMQTPdGkk
s1oStacXmQykaaBx95RlAFO6NA8QaOYwtWYqG7/S63QWlKkdwrILIMscohHXw6MY
UvvGuHBdXLu6UCOk5vb0GK4qF+XwBvwdm2y4CCr6Sp0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:02:44 2025 by rpki-client