Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa
File: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (raw, json)
Hash identifier: LqlSb/utpUN3HVslP3/Zp5BxoyJnBFer5qWv03qLFmY=
Subject key identifier: 0A:90:68:A6:15:60:24:A8:52:BF:45:1D:F9:48:60:CC:D4:52:D0:52
Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F
Certificate serial: 6AB7572C874CED2E8BCE0B86010C54A25DC4C924
Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa
Signing time: Mon 01 Jul 2024 01:05:05 +0000
ROA not before: Mon 01 Jul 2024 01:00:05 +0000
ROA not after: Mon 30 Jun 2025 01:05:05 +0000
asID: 137332
IP address blocks: 103.112.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b7:57:2c:87:4c:ed:2e:8b:ce:0b:86:01:0c:54:a2:5d:c4:c9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F
Validity
Not Before: Jul 1 01:00:05 2024 GMT
Not After : Jun 30 01:05:05 2025 GMT
Subject: CN=0A9068A6156024A852BF451DF94860CCD452D052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:b9:02:4f:53:10:e5:af:bd:0f:f5:a8:84:
81:b8:81:dd:b2:2d:36:ac:e7:74:23:fe:3d:ef:02:
41:4b:00:c0:54:45:f5:11:8c:32:1c:0f:41:0f:b2:
f8:74:ea:f3:45:ab:bd:95:22:3c:41:36:30:9f:ce:
f7:53:b1:43:93:63:26:aa:67:8a:62:d5:07:2d:64:
19:ac:03:84:22:33:90:47:c1:b1:e8:b4:1f:6e:cd:
d3:00:ee:83:d7:4b:91:6d:e4:92:8d:2d:da:b5:08:
1c:12:a8:1a:54:c2:ee:6b:fe:74:f5:3e:6e:ea:42:
87:7b:2e:42:62:9a:52:b8:59:27:89:30:c8:38:f5:
02:76:2a:b7:90:37:65:d0:8a:f7:19:1e:a1:d2:e7:
44:0b:31:e3:cb:e7:f3:4e:76:a2:47:89:20:b2:52:
09:31:08:ba:8a:0c:5b:ab:08:de:53:78:07:da:c8:
36:80:97:13:73:c0:b9:45:91:b1:9f:9f:1f:61:9b:
32:29:ad:b7:a1:d7:fa:46:b2:b4:43:c1:55:35:5a:
04:82:f0:c1:b8:93:a7:59:38:a1:a2:a1:08:9d:d4:
aa:35:50:0b:3c:f2:f9:46:db:10:48:f4:9e:c6:2b:
2c:8e:ac:37:08:7f:7a:38:0b:a5:25:6c:6c:9d:38:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:90:68:A6:15:60:24:A8:52:BF:45:1D:F9:48:60:CC:D4:52:D0:52
X509v3 Authority Key Identifier:
keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.189.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5e:ba:15:c0:5a:94:fd:01:97:5f:d2:89:02:3d:56:b7:3f:
c8:0b:46:f2:30:21:4f:c0:9d:09:87:44:53:54:48:95:bd:4a:
81:e1:5a:c9:c5:93:14:68:79:e3:af:aa:9b:44:63:73:f6:67:
c7:3b:e1:c8:1a:0f:bb:9d:6b:b4:d2:ec:5b:05:1f:2a:e7:65:
35:c2:69:3b:21:3c:d5:eb:cc:75:02:29:62:58:34:a8:db:7e:
84:76:14:0e:64:f0:e9:41:34:4e:1a:ab:30:0f:c3:4c:95:b7:
3d:b4:76:df:18:b8:03:c9:38:c8:b6:b6:35:1c:f8:b1:f1:c0:
f1:1b:0d:4c:16:82:f2:0f:f0:2b:18:c0:99:69:fa:ee:74:60:
47:a0:0f:50:c0:ef:3e:a4:66:c9:ad:4c:cc:dc:e6:34:b6:a0:
9c:2a:80:be:8d:47:e0:a6:f9:1c:99:f7:9c:a1:66:5a:ca:ec:
33:1c:e2:49:e3:97:ec:f5:ae:23:95:44:52:83:ee:98:f2:5e:
48:9f:3d:eb:ac:49:1e:ee:bd:e4:59:c3:3a:43:f4:77:9d:c5:
fd:ee:c4:9e:77:5d:12:15:ad:dd:f6:4f:ce:07:e0:39:da:6c:
a9:20:ee:10:55:e9:5c:4b:f0:07:e7:1e:0c:b6:42:d2:b0:62:
f6:4f:bb:6f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUardXLIdM7S6LzguGAQxUol3EySQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG
OTI0MTg3RjAeFw0yNDA3MDEwMTAwMDVaFw0yNTA2MzAwMTA1MDVaMDMxMTAvBgNV
BAMTKDBBOTA2OEE2MTU2MDI0QTg1MkJGNDUxREY5NDg2MENDRDQ1MkQwNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8i7kCT1MQ5a+9D/WohIG4gd2y
LTas53Qj/j3vAkFLAMBURfURjDIcD0EPsvh06vNFq72VIjxBNjCfzvdTsUOTYyaq
Z4pi1QctZBmsA4QiM5BHwbHotB9uzdMA7oPXS5Ft5JKNLdq1CBwSqBpUwu5r/nT1
Pm7qQod7LkJimlK4WSeJMMg49QJ2KreQN2XQivcZHqHS50QLMePL5/NOdqJHiSCy
UgkxCLqKDFurCN5TeAfayDaAlxNzwLlFkbGfnx9hmzIprbeh1/pGsrRDwVU1WgSC
8MG4k6dZOKGioQid1Ko1UAs88vlG2xBI9J7GKyyOrDcIf3o4C6UlbGydOB4vAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUCpBophVgJKhSv0Ud+UhgzNRS0FIwHwYDVR0j
BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB
QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0
MTg3Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNWNmYmEzLWUwMTctNGU4YS05
YWM1LWYyZDMwNDMxNzM2NS8wLzMxMzAzMzJlMzEzMTMyMmUzMTM4MzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncL0wDQYJ
KoZIhvcNAQELBQADggEBAIReuhXAWpT9AZdf0okCPVa3P8gLRvIwIU/AnQmHRFNU
SJW9SoHhWsnFkxRoeeOvqptEY3P2Z8c74cgaD7uda7TS7FsFHyrnZTXCaTshPNXr
zHUCKWJYNKjbfoR2FA5k8OlBNE4aqzAPw0yVtz20dt8YuAPJOMi2tjUc+LHxwPEb
DUwWgvIP8CsYwJlp+u50YEegD1DA7z6kZsmtTMzc5jS2oJwqgL6NR+Cm+RyZ95yh
ZlrK7DMc4knjl+z1riOVRFKD7pjyXkifPeusSR7uveRZwzpD9Hedxf3uxJ53XRIV
rd32T84H4DnabKkg7hBV6VxL8AfnHgy2QtKwYvZPu28=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:24 2025 by rpki-client