Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
File: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (raw, json)
Hash identifier: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo=
Subject key identifier: B0:37:5C:05:DB:99:C8:F9:A0:0E:05:5C:A6:76:AC:BB:59:88:E1:13
Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999
Certificate serial: 2BCFF9A6DB23CC538E8781CDF125C778124928B5
Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
Signing time: Mon 20 Jan 2025 06:00:01 +0000
ROA not before: Mon 20 Jan 2025 05:55:01 +0000
ROA not after: Mon 19 Jan 2026 06:00:01 +0000
asID: 150951
IP address blocks: 103.196.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:cf:f9:a6:db:23:cc:53:8e:87:81:cd:f1:25:c7:78:12:49:28:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999
Validity
Not Before: Jan 20 05:55:01 2025 GMT
Not After : Jan 19 06:00:01 2026 GMT
Subject: CN=B0375C05DB99C8F9A00E055CA676ACBB5988E113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:c2:fd:12:1e:74:96:e6:ad:89:7b:06:1e:
0f:8c:0d:79:b2:aa:f2:58:63:28:db:61:9b:8e:dd:
fa:1b:85:65:ba:c4:4c:6f:94:1e:53:bc:7d:b4:a5:
12:31:67:09:86:e8:ca:56:41:60:78:ef:e7:20:d8:
7d:bf:ac:fb:14:55:ab:9c:ff:a7:45:46:47:3b:d3:
72:4b:36:84:de:95:c1:44:18:bf:89:dc:cd:5a:96:
b3:be:fd:7f:bf:0e:8b:cd:26:2a:d2:53:37:5b:f4:
02:14:76:c3:51:79:93:f3:e7:5f:d4:14:78:d7:75:
ee:78:33:49:d2:68:da:17:c5:c8:b5:c8:38:cf:35:
df:5f:c5:e7:ca:23:bd:92:be:56:13:89:2a:35:73:
cb:3a:73:a4:e1:ee:15:79:f2:8e:ea:ac:3f:81:3e:
40:0c:75:a4:13:7e:4e:67:2c:e4:2d:92:71:61:0a:
fa:a7:bf:cd:ca:58:11:21:ed:06:62:dd:1b:58:41:
f3:32:9a:da:71:56:14:d9:58:fc:09:36:9c:db:c8:
60:e9:53:a2:48:fd:3c:7e:5a:b8:ef:81:02:b9:d3:
85:84:59:71:df:59:63:f6:b1:17:80:64:56:92:9d:
f8:85:29:8a:ed:89:6d:53:8f:0f:8c:5c:37:7c:92:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:37:5C:05:DB:99:C8:F9:A0:0E:05:5C:A6:76:AC:BB:59:88:E1:13
X509v3 Authority Key Identifier:
keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.196.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:22:dc:e3:18:1e:59:5a:d0:8c:20:ef:fe:71:63:6d:c5:f8:
97:c9:8a:a0:05:d3:c0:e8:0c:2d:29:25:cd:b2:11:31:4c:b4:
98:4f:74:ea:64:6a:e2:43:52:db:80:ff:33:d3:de:e9:b2:e8:
8f:26:27:7d:4c:35:7b:e2:3e:ce:e2:ee:70:d0:6c:fa:d7:b3:
23:b6:a4:ac:d3:85:b6:4d:13:fd:82:86:8f:21:e4:1e:f1:d1:
1b:8b:8a:8a:d5:40:dd:50:dc:a5:8c:2d:ac:8d:58:8d:63:3f:
77:7b:26:92:f4:b3:18:00:44:29:69:03:73:18:b2:f2:dc:73:
ee:08:13:ce:2e:4d:4d:b7:32:d3:55:74:ba:9a:ae:94:dc:4c:
11:14:1a:68:e9:ea:10:58:75:98:52:3e:75:b0:53:65:9c:7c:
09:e7:19:c0:4c:8d:85:0a:6f:a6:47:f9:3a:bb:b8:e1:7e:45:
10:73:45:78:02:58:08:3c:a0:0c:55:6c:b4:31:5c:62:04:eb:
3b:85:ed:3a:2b:e8:9c:e4:01:68:ad:46:cd:b6:04:2e:d2:fc:
6e:0c:ba:5b:31:7c:62:e1:ba:be:d9:1d:3b:39:77:07:f1:11:
14:27:e3:20:41:f3:f0:37:2a:2e:00:62:41:1c:49:c0:ca:24:
7f:78:73:1c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUK8/5ptsjzFOOh4HN8SXHeBJJKLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz
RjE2Rjk5OTAeFw0yNTAxMjAwNTU1MDFaFw0yNjAxMTkwNjAwMDFaMDMxMTAvBgNV
BAMTKEIwMzc1QzA1REI5OUM4RjlBMDBFMDU1Q0E2NzZBQ0JCNTk4OEUxMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSsL9Eh50luatiXsGHg+MDXmy
qvJYYyjbYZuO3fobhWW6xExvlB5TvH20pRIxZwmG6MpWQWB47+cg2H2/rPsUVauc
/6dFRkc703JLNoTelcFEGL+J3M1alrO+/X+/DovNJirSUzdb9AIUdsNReZPz51/U
FHjXde54M0nSaNoXxci1yDjPNd9fxefKI72SvlYTiSo1c8s6c6Th7hV58o7qrD+B
PkAMdaQTfk5nLOQtknFhCvqnv83KWBEh7QZi3RtYQfMymtpxVhTZWPwJNpzbyGDp
U6JI/Tx+WrjvgQK504WEWXHfWWP2sReAZFaSnfiFKYrtiW1Tjw+MXDd8klSxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUsDdcBduZyPmgDgVcpnasu1mI4RMwHwYDVR0j
BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2
NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2
Rjk5OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxZTBkMTdjLWVkZDEtNDIwMi1i
NzM2LTNiNTI3ZWZhNmJhMi8wLzMxMzAzMzJlMzEzOTM2MmUzMTM1MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnxJwwDQYJ
KoZIhvcNAQELBQADggEBALIi3OMYHlla0Iwg7/5xY23F+JfJiqAF08DoDC0pJc2y
ETFMtJhPdOpkauJDUtuA/zPT3umy6I8mJ31MNXviPs7i7nDQbPrXsyO2pKzThbZN
E/2Cho8h5B7x0RuLiorVQN1Q3KWMLayNWI1jP3d7JpL0sxgARClpA3MYsvLcc+4I
E84uTU23MtNVdLqarpTcTBEUGmjp6hBYdZhSPnWwU2WcfAnnGcBMjYUKb6ZH+Tq7
uOF+RRBzRXgCWAg8oAxVbLQxXGIE6zuF7Tor6JzkAWitRs22BC7S/G4MulsxfGLh
ur7ZHTs5dwfxERQn4yBB8/A3Ki4AYkEcScDKJH94cxw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:46:16 2025 by rpki-client