Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
File: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier: eTh0CqTq4szRPvt3my3xjw4JR5HFcuMid471JmF7C4c=
Subject key identifier: AF:E7:BF:05:6E:F8:D6:8F:B8:90:96:DA:22:0F:26:C4:05:E8:27:0B
Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial: 634B5DFB966C1D3FAC84AD2D281929C68CD54608
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
Signing time: Fri 13 Dec 2024 15:21:37 +0000
ROA not before: Fri 13 Dec 2024 15:16:37 +0000
ROA not after: Fri 12 Dec 2025 15:21:37 +0000
asID: 138818
IP address blocks: 103.103.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:4b:5d:fb:96:6c:1d:3f:ac:84:ad:2d:28:19:29:c6:8c:d5:46:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Validity
Not Before: Dec 13 15:16:37 2024 GMT
Not After : Dec 12 15:21:37 2025 GMT
Subject: CN=AFE7BF056EF8D68FB89096DA220F26C405E8270B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:83:26:5c:16:b1:d5:ae:bb:9b:d2:f4:c4:
5c:fe:6d:57:0f:e6:47:bc:37:f1:fe:cf:57:af:d9:
13:8b:a4:55:59:a1:59:e8:1d:2c:43:c2:23:49:dc:
2e:ad:c8:e4:68:31:b8:05:bc:1d:44:48:95:d1:a2:
ef:68:d4:fa:73:4c:67:59:c7:a5:60:62:ac:b8:49:
48:01:96:73:da:4c:82:ee:db:3d:ea:8d:96:23:41:
2b:43:af:b2:fd:11:c1:8a:d3:20:0c:6e:44:8c:33:
ec:f6:dc:06:b2:ba:22:0e:60:19:0f:e2:12:e5:8c:
b1:a6:91:0b:b3:9c:5a:21:6b:f1:fb:17:7f:20:0d:
ef:29:59:7d:ec:d4:00:70:bf:41:1b:c5:6c:3b:aa:
e2:9b:79:61:86:6e:f6:ad:a2:93:7f:d8:92:47:3a:
73:21:f0:66:ba:7b:ac:86:6c:31:37:64:87:5e:7f:
a9:43:8f:5f:08:55:44:00:60:5e:c9:b8:41:25:97:
61:6d:b5:db:35:27:59:84:5b:18:71:d6:41:e4:f9:
8c:d9:81:c1:b6:de:7c:f8:c2:fc:1b:0c:e3:56:57:
59:88:ee:0f:e8:a8:c4:92:27:d8:fd:53:f1:5d:d3:
70:d9:0f:e9:b0:7b:0a:7d:51:4f:b5:02:b5:c2:37:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E7:BF:05:6E:F8:D6:8F:B8:90:96:DA:22:0F:26:C4:05:E8:27:0B
X509v3 Authority Key Identifier:
keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.103.136.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:51:bc:e2:92:d5:61:6e:57:9e:69:9e:d0:7b:4e:fd:1a:c9:
00:ea:f4:91:e6:b5:c3:65:ed:17:37:72:cb:7c:ab:3b:17:19:
38:49:89:c0:eb:7e:03:0a:70:23:7a:ce:0b:4e:85:36:7d:7d:
5f:34:fd:60:c4:e9:76:ce:3c:6c:80:e1:15:a7:0a:2b:84:7f:
84:ce:1f:af:a0:d5:44:6e:3e:60:4f:7e:64:4b:8b:08:40:2e:
00:17:8a:c9:20:16:33:f7:72:1d:6a:1a:fd:2b:ad:02:0c:22:
ca:ed:62:02:18:bd:22:02:98:02:5a:6b:2f:05:e5:bd:74:b0:
54:d7:e6:b2:0d:8a:9e:36:05:09:a0:6a:da:0f:60:2f:79:d7:
e0:40:d9:62:87:e0:29:9f:53:9b:1b:47:0c:4f:c3:00:56:88:
15:b5:64:72:85:22:99:22:5e:42:4c:a7:9a:26:48:69:c0:9f:
ac:82:34:e7:70:2f:ce:00:06:ff:91:0b:b8:fa:e4:48:b3:b2:
28:8d:76:12:62:88:47:29:b2:15:41:00:0b:e7:ce:e2:c2:fc:
bb:96:0b:76:39:29:8d:57:65:5e:ef:0b:6d:26:ea:ca:b4:1f:
55:62:58:98:86:d7:88:92:82:6d:fc:04:b1:ef:01:34:68:8e:
37:c1:2b:6b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUY0td+5ZsHT+shK0tKBkpxozVRggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC
NTlCRjkxRTAeFw0yNDEyMTMxNTE2MzdaFw0yNTEyMTIxNTIxMzdaMDMxMTAvBgNV
BAMTKEFGRTdCRjA1NkVGOEQ2OEZCODkwOTZEQTIyMEYyNkM0MDVFODI3MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQb4MmXBax1a67m9L0xFz+bVcP
5ke8N/H+z1ev2ROLpFVZoVnoHSxDwiNJ3C6tyORoMbgFvB1ESJXRou9o1PpzTGdZ
x6VgYqy4SUgBlnPaTILu2z3qjZYjQStDr7L9EcGK0yAMbkSMM+z23AayuiIOYBkP
4hLljLGmkQuznFoha/H7F38gDe8pWX3s1ABwv0EbxWw7quKbeWGGbvatopN/2JJH
OnMh8Ga6e6yGbDE3ZIdef6lDj18IVUQAYF7JuEEll2Fttds1J1mEWxhx1kHk+YzZ
gcG23nz4wvwbDONWV1mI7g/oqMSSJ9j9U/Fd03DZD+mwewp9UU+1ArXCNzOxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUr+e/BW741o+4kJbaIg8mxAXoJwswHwYDVR0j
BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx
OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC
RjkxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04
N2YyLWQ4MTg0MTc4YzE0OS8wLzMxMzAzMzJlMzEzMDMzMmUzMTMzMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZ4gwDQYJ
KoZIhvcNAQELBQADggEBAI1RvOKS1WFuV55pntB7Tv0ayQDq9JHmtcNl7Rc3cst8
qzsXGThJicDrfgMKcCN6zgtOhTZ9fV80/WDE6XbOPGyA4RWnCiuEf4TOH6+g1URu
PmBPfmRLiwhALgAXiskgFjP3ch1qGv0rrQIMIsrtYgIYvSICmAJaay8F5b10sFTX
5rINip42BQmgatoPYC951+BA2WKH4CmfU5sbRwxPwwBWiBW1ZHKFIpkiXkJMp5om
SGnAn6yCNOdwL84ABv+RC7j65EizsiiNdhJiiEcpshVBAAvnzuLC/LuWC3Y5KY1X
ZV7vC20m6sq0H1ViWJiG14iSgm38BLHvATRojjfBK2s=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:03:19 2025 by rpki-client