Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa
File: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (raw, json)
Hash identifier: 4Lx8wRUe0EBL5Vg6TnxJN2re2vfRXqdGwu0ff5l9s8U=
Subject key identifier: 38:26:C0:1D:D3:2C:8A:39:B7:E9:4C:AA:D2:A5:68:0E:C0:07:82:A3
Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433
Certificate serial: 5EA9E2951B13ECEF14B9BE339DB5BC6AFDC0F0EC
Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa
Signing time: Wed 11 Dec 2024 21:00:02 +0000
ROA not before: Wed 11 Dec 2024 20:55:02 +0000
ROA not after: Wed 10 Dec 2025 21:00:02 +0000
asID: 58485
IP address blocks: 103.173.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a9:e2:95:1b:13:ec:ef:14:b9:be:33:9d:b5:bc:6a:fd:c0:f0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433
Validity
Not Before: Dec 11 20:55:02 2024 GMT
Not After : Dec 10 21:00:02 2025 GMT
Subject: CN=3826C01DD32C8A39B7E94CAAD2A5680EC00782A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6a:1d:d0:e8:3e:8a:95:f5:2d:90:77:a2:49:
16:11:75:41:97:1f:37:87:73:91:be:09:a1:f8:94:
f2:a2:61:96:43:f3:66:01:52:88:f2:7c:f6:d4:50:
97:32:7a:97:99:41:ee:a3:e9:7a:1e:bc:d6:63:4d:
90:c6:79:46:4c:7a:21:a9:2c:53:b3:02:02:6c:e7:
0c:2c:b9:d4:e4:74:c6:18:53:31:0b:4b:e0:ad:44:
f3:cf:71:f0:c6:62:20:79:fa:0c:33:73:39:6d:23:
ce:93:c8:72:b7:e6:9c:1c:93:28:24:a7:26:51:f8:
7e:b1:cd:bd:d9:a2:a5:16:19:73:b2:7a:3f:dd:87:
7d:c2:2c:e5:b1:df:cc:8e:f5:f9:7b:07:c9:8e:41:
ef:97:4e:51:a7:1f:9b:b4:85:5e:ca:af:7b:2f:09:
d6:21:a8:64:41:9e:af:ad:47:06:11:7d:71:cc:9a:
47:66:4c:6a:1e:fc:13:2c:53:d7:8a:50:b8:ca:db:
52:11:ce:ef:ad:b2:f3:5b:1f:fb:6e:a6:5f:a4:01:
46:bf:b3:fb:8b:a1:a0:f8:fa:a3:f5:19:88:7c:ac:
5f:e4:45:05:9c:93:6b:49:f2:a8:e1:63:7b:e9:ef:
9e:8b:f3:3b:8b:be:c3:18:bb:1c:fc:fb:aa:d9:8c:
b1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:26:C0:1D:D3:2C:8A:39:B7:E9:4C:AA:D2:A5:68:0E:C0:07:82:A3
X509v3 Authority Key Identifier:
keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.141.0/24
Signature Algorithm: sha256WithRSAEncryption
22:15:e2:0e:cb:b3:95:4b:81:14:68:80:a4:4e:8f:92:27:7a:
ab:96:70:b2:5d:26:d0:b1:22:af:08:77:a8:e4:83:e3:04:67:
cf:7a:12:9a:ae:48:c4:0e:01:b9:2e:f3:d8:48:b0:9e:3a:6d:
b1:8d:f2:db:56:8e:6d:8d:93:32:bd:1c:d0:c0:b7:da:7a:f7:
fa:47:87:1f:da:c6:c5:e8:30:16:0d:09:ec:09:d3:98:a1:1d:
58:22:dd:b0:09:aa:46:ce:a7:64:c2:f7:dc:f7:9b:1d:d6:2b:
8f:2e:ca:08:64:2d:d4:22:9d:0c:8e:57:41:5a:dd:ea:40:35:
43:23:dd:4f:38:b6:d9:48:f9:11:82:dc:6f:fe:28:19:52:43:
ca:81:54:55:97:e6:95:2d:a5:7a:da:21:0a:5e:43:ea:83:33:
da:2a:d3:04:c6:62:dd:f5:26:03:74:d4:1f:80:1b:b7:f5:65:
12:31:bd:31:9f:07:6a:14:27:70:dc:95:00:06:49:81:51:5a:
50:e3:5c:b4:46:f7:cc:8c:5e:56:6d:54:e7:b5:fa:0a:6b:39:
d3:b7:71:4a:fc:c0:4b:c0:79:95:30:44:9e:b9:ca:6f:69:4b:
40:26:74:49:0e:24:a3:60:dd:aa:ce:cd:17:83:b9:74:da:6e:
8f:74:00:5b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXqnilRsT7O8Uub4znbW8av3A8OwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1
RTJFNDQzMzAeFw0yNDEyMTEyMDU1MDJaFw0yNTEyMTAyMTAwMDJaMDMxMTAvBgNV
BAMTKDM4MjZDMDFERDMyQzhBMzlCN0U5NENBQUQyQTU2ODBFQzAwNzgyQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ah3Q6D6KlfUtkHeiSRYRdUGX
HzeHc5G+CaH4lPKiYZZD82YBUojyfPbUUJcyepeZQe6j6XoevNZjTZDGeUZMeiGp
LFOzAgJs5wwsudTkdMYYUzELS+CtRPPPcfDGYiB5+gwzczltI86TyHK35pwckygk
pyZR+H6xzb3ZoqUWGXOyej/dh33CLOWx38yO9fl7B8mOQe+XTlGnH5u0hV7Kr3sv
CdYhqGRBnq+tRwYRfXHMmkdmTGoe/BMsU9eKULjK21IRzu+tsvNbH/tupl+kAUa/
s/uLoaD4+qP1GYh8rF/kRQWck2tJ8qjhY3vp756L8zuLvsMYuxz8+6rZjLFxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOCbAHdMsijm36Uyq0qVoDsAHgqMwHwYDVR0j
BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx
NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF
NDQzMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhYWJiNTc4LWI5ZGItNGE0Ny04
ZDdlLTExYTYzNDI4OTAxOC8wLzMxMzAzMzJlMzEzNzMzMmUzMTM0MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ62NMA0GCSqG
SIb3DQEBCwUAA4IBAQAiFeIOy7OVS4EUaICkTo+SJ3qrlnCyXSbQsSKvCHeo5IPj
BGfPehKarkjEDgG5LvPYSLCeOm2xjfLbVo5tjZMyvRzQwLfaevf6R4cf2sbF6DAW
DQnsCdOYoR1YIt2wCapGzqdkwvfc95sd1iuPLsoIZC3UIp0MjldBWt3qQDVDI91P
OLbZSPkRgtxv/igZUkPKgVRVl+aVLaV62iEKXkPqgzPaKtMExmLd9SYDdNQfgBu3
9WUSMb0xnwdqFCdw3JUABkmBUVpQ41y0RvfMjF5WbVTntfoKaznTt3FK/MBLwHmV
MESeucpvaUtAJnRJDiSjYN2qzs0Xg7l02m6PdABb
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:33:31 2025 by rpki-client