Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa
File: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (raw, json)
Hash identifier: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=
Subject key identifier: F2:AB:A2:53:D3:15:8D:68:0A:BB:4A:D6:4E:23:7E:D2:CA:75:44:06
Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A
Certificate serial: 7C39DB34749AF42B12C42D16E1EF461B70FD8838
Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa
Signing time: Tue 04 Mar 2025 21:11:08 +0000
ROA not before: Tue 04 Mar 2025 21:06:08 +0000
ROA not after: Tue 03 Mar 2026 21:11:08 +0000
asID: 136116
IP address blocks: 103.93.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:39:db:34:74:9a:f4:2b:12:c4:2d:16:e1:ef:46:1b:70:fd:88:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A
Validity
Not Before: Mar 4 21:06:08 2025 GMT
Not After : Mar 3 21:11:08 2026 GMT
Subject: CN=F2ABA253D3158D680ABB4AD64E237ED2CA754406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:ee:2f:93:e7:7d:4b:4a:cd:17:8f:33:8b:
0a:12:41:bf:5d:5f:d2:fc:9c:58:10:39:70:63:c8:
30:07:22:d9:6b:25:e8:0a:be:d2:cf:07:34:56:2f:
75:68:9d:b3:c0:d0:7e:02:18:9f:d6:2e:cb:66:d2:
71:64:67:8e:f7:2c:15:eb:6a:24:87:99:1e:6e:58:
3a:e4:15:d1:e1:10:49:bb:3a:f3:14:be:d1:02:8f:
41:6c:ce:ef:04:a6:9c:49:c4:a8:56:47:ff:51:8b:
51:0b:ba:a6:ec:dc:f6:63:00:19:f1:5f:f2:e7:40:
90:1f:fe:18:90:0e:b2:f7:74:4e:40:cd:c5:d6:d8:
45:37:8f:75:97:49:67:ca:f4:29:15:8e:08:db:0d:
8c:27:d5:43:23:be:72:1e:e4:a5:da:38:9f:47:83:
ce:44:3c:4f:57:a8:e7:48:59:66:a0:d6:55:55:b6:
49:60:ee:bd:72:be:1c:38:cb:c5:80:48:2d:4d:d0:
42:e8:14:b2:3a:c7:35:ea:7f:50:67:57:ec:c3:68:
28:5c:9c:64:c2:62:86:09:6c:b0:86:a5:ef:79:94:
2a:cb:94:99:65:04:bf:d0:10:52:cc:7f:a3:16:7b:
57:fe:cf:b9:ce:0f:5d:76:f3:20:9d:cb:8d:a7:85:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AB:A2:53:D3:15:8D:68:0A:BB:4A:D6:4E:23:7E:D2:CA:75:44:06
X509v3 Authority Key Identifier:
keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.93.158.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:94:3a:43:fd:60:32:b1:b4:8e:27:28:9d:12:33:df:9d:68:
fa:7f:65:0e:93:7a:a1:ec:4b:5c:c5:95:3f:e4:a3:24:ff:15:
2e:f9:a1:b2:79:3d:d1:30:b1:1b:8e:b0:29:ad:11:e7:8a:34:
08:ab:ce:05:1c:49:9c:a5:33:6b:b6:11:ef:18:64:41:35:fd:
69:35:27:c7:a2:a4:13:41:dc:cc:7f:37:3a:3d:47:b3:56:48:
d8:05:86:72:b4:7f:78:bc:cb:d3:01:a7:4d:a0:af:c9:92:91:
f3:88:7d:f2:03:04:b2:1b:07:5f:38:5f:ee:7e:5a:f1:5c:6e:
4a:6b:64:7b:3c:1e:ae:23:d4:3a:f6:62:cd:a5:09:be:2e:bb:
65:98:79:2d:10:3c:ab:fd:10:dd:65:2a:5b:5d:7f:6b:99:f9:
e9:bc:91:e1:e4:0f:a6:1d:3d:82:30:e8:d7:c0:56:32:8d:40:
da:41:41:0b:e0:f4:0e:94:96:37:b7:c5:01:bc:c2:eb:f3:b2:
af:93:3f:97:88:a1:24:73:39:6f:22:c5:30:e5:9f:b1:83:31:
db:18:63:63:88:94:dd:d9:6f:46:de:81:4e:b5:5e:14:56:70:
49:99:74:41:54:c8:7e:0c:2d:83:25:00:0a:5c:e3:7e:66:ea:
1a:df:eb:51
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfDnbNHSa9CsSxC0W4e9GG3D9iDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy
RTkzMzA3QTAeFw0yNTAzMDQyMTA2MDhaFw0yNjAzMDMyMTExMDhaMDMxMTAvBgNV
BAMTKEYyQUJBMjUzRDMxNThENjgwQUJCNEFENjRFMjM3RUQyQ0E3NTQ0MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89O4vk+d9S0rNF48ziwoSQb9d
X9L8nFgQOXBjyDAHItlrJegKvtLPBzRWL3VonbPA0H4CGJ/WLstm0nFkZ473LBXr
aiSHmR5uWDrkFdHhEEm7OvMUvtECj0Fszu8EppxJxKhWR/9Ri1ELuqbs3PZjABnx
X/LnQJAf/hiQDrL3dE5AzcXW2EU3j3WXSWfK9CkVjgjbDYwn1UMjvnIe5KXaOJ9H
g85EPE9XqOdIWWag1lVVtklg7r1yvhw4y8WASC1N0ELoFLI6xzXqf1BnV+zDaChc
nGTCYoYJbLCGpe95lCrLlJllBL/QEFLMf6MWe1f+z7nOD1128yCdy42nhXUdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU8quiU9MVjWgKu0rWTiN+0sp1RAYwHwYDVR0j
BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0
MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz
MzA3QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliNmFlMmEyLWQ5M2YtNDljYS1i
YTRiLTE3MWZmOGQxZTU3Zi8wLzMxMzAzMzJlMzkzMzJlMzEzNTM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ12eMA0GCSqG
SIb3DQEBCwUAA4IBAQCjlDpD/WAysbSOJyidEjPfnWj6f2UOk3qh7EtcxZU/5KMk
/xUu+aGyeT3RMLEbjrAprRHnijQIq84FHEmcpTNrthHvGGRBNf1pNSfHoqQTQdzM
fzc6PUezVkjYBYZytH94vMvTAadNoK/JkpHziH3yAwSyGwdfOF/uflrxXG5Ka2R7
PB6uI9Q69mLNpQm+LrtlmHktEDyr/RDdZSpbXX9rmfnpvJHh5A+mHT2CMOjXwFYy
jUDaQUEL4PQOlJY3t8UBvMLr87Kvkz+XiKEkczlvIsUw5Z+xgzHbGGNjiJTd2W9G
3oFOtV4UVnBJmXRBVMh+DC2DJQAKXON+Zuoa3+tR
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:33 2025 by rpki-client