Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa
File: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (raw, json)
Hash identifier: CZs1I8dUPWQDsBqpGNZkzGBe+O9Bk4R+3W5yaMyDGIY=
Subject key identifier: 8A:DD:E7:27:A1:6E:D7:60:97:9E:97:16:41:BA:4D:09:5C:F3:A3:1C
Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8
Certificate serial: 62AC71E5572A1FFBA3D1747C7762FB44BF84440E
Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa
Signing time: Sat 29 Mar 2025 10:00:01 +0000
ROA not before: Sat 29 Mar 2025 09:55:01 +0000
ROA not after: Sat 28 Mar 2026 10:00:01 +0000
asID: 138881
IP address blocks: 103.169.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ac:71:e5:57:2a:1f:fb:a3:d1:74:7c:77:62:fb:44:bf:84:44:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8
Validity
Not Before: Mar 29 09:55:01 2025 GMT
Not After : Mar 28 10:00:01 2026 GMT
Subject: CN=8ADDE727A16ED760979E971641BA4D095CF3A31C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:b1:62:15:bf:b3:3f:56:12:60:62:a2:56:
b1:87:7e:d8:21:ba:dc:e4:04:d1:38:0e:e7:e9:f9:
09:72:24:9a:ff:c3:ea:5f:02:d8:be:36:82:30:5c:
e1:ff:4e:b9:6f:59:b3:a0:97:4a:16:8b:fc:ba:6e:
a0:e6:c1:e7:a1:a1:62:9e:c4:9c:4b:32:f3:fb:01:
48:b9:a1:a5:2a:e2:b7:f0:fc:b0:bb:12:67:8f:7f:
fb:62:8a:09:42:f1:f9:24:7e:fd:62:59:c8:43:08:
b8:21:a6:a7:68:fc:9c:fb:17:55:80:40:07:94:c3:
ef:bf:7f:3e:a3:74:c2:c8:b7:29:51:70:1d:b0:01:
06:91:3a:77:d5:78:b9:0f:1d:cc:3b:4a:fc:e6:a6:
0b:3b:47:1c:ef:a8:cf:fa:af:11:af:6b:94:bb:39:
9d:e3:a6:21:c1:66:1d:e5:65:eb:1b:66:f7:7f:1d:
81:84:33:5b:2a:d2:63:2b:94:27:9a:da:20:dc:f2:
00:e1:78:41:af:83:74:7d:06:0e:14:4e:e6:b2:cb:
79:37:c6:2b:20:07:fb:14:09:6f:5e:6d:91:b0:4c:
84:d3:a3:3a:b9:c5:25:e3:36:a9:95:2c:f9:d8:56:
d1:05:dc:51:76:7a:6d:86:ca:be:14:9f:70:6e:8f:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:E7:27:A1:6E:D7:60:97:9E:97:16:41:BA:4D:09:5C:F3:A3:1C
X509v3 Authority Key Identifier:
keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.239.0/24
Signature Algorithm: sha256WithRSAEncryption
28:12:ce:85:10:e3:d7:6b:c9:73:ce:3a:b5:9a:f3:45:5b:d9:
a2:08:eb:64:45:c3:94:22:dc:62:87:a7:7b:8f:0e:be:5f:67:
e0:e0:99:72:87:a1:b6:26:39:4c:93:86:df:99:b3:02:04:9b:
bc:b1:f9:00:77:15:c3:3b:ea:2b:8a:83:96:ab:2f:50:b7:0d:
3b:d1:74:5b:39:01:6d:e9:24:34:b0:c1:e1:9d:f4:f0:4c:b7:
58:18:9d:31:a7:41:f6:f0:bd:4b:aa:39:0c:ca:e5:e2:22:68:
0d:2c:bf:ee:13:f6:96:ef:83:49:30:6c:1d:7e:8d:e3:ae:42:
3c:10:e5:a6:9a:71:0f:9c:56:81:9f:66:c2:84:80:6c:bf:36:
55:09:4d:9a:45:7b:c4:f8:4d:f5:a4:90:80:06:07:8a:5a:f5:
ab:96:3f:e0:f3:c0:9c:44:87:23:a2:ea:7b:1e:a9:ca:03:cd:
0e:a3:bb:55:03:6a:b8:88:71:46:72:c1:e9:8c:fd:bb:5a:1a:
94:fc:06:80:a4:c4:85:f7:a0:86:43:f8:bb:fe:6f:db:19:d8:
69:9a:8b:a0:08:66:4d:8f:dd:6c:bc:a4:c8:76:40:14:e4:ed:
c8:60:18:07:ee:f8:ec:f8:c7:8e:68:8a:c5:63:28:bd:9d:e0:
e6:3d:80:ea
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUYqxx5VcqH/uj0XR8d2L7RL+ERA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2
RTNENzNCODAeFw0yNTAzMjkwOTU1MDFaFw0yNjAzMjgxMDAwMDFaMDMxMTAvBgNV
BAMTKDhBRERFNzI3QTE2RUQ3NjA5NzlFOTcxNjQxQkE0RDA5NUNGM0EzMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXxrFiFb+zP1YSYGKiVrGHftgh
utzkBNE4Dufp+QlyJJr/w+pfAti+NoIwXOH/TrlvWbOgl0oWi/y6bqDmweehoWKe
xJxLMvP7AUi5oaUq4rfw/LC7EmePf/tiiglC8fkkfv1iWchDCLghpqdo/Jz7F1WA
QAeUw++/fz6jdMLItylRcB2wAQaROnfVeLkPHcw7Svzmpgs7RxzvqM/6rxGva5S7
OZ3jpiHBZh3lZesbZvd/HYGEM1sq0mMrlCea2iDc8gDheEGvg3R9Bg4UTuayy3k3
xisgB/sUCW9ebZGwTITTozq5xSXjNqmVLPnYVtEF3FF2em2Gyr4Un3BujxoBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUit3nJ6Fu12CXnpcWQbpNCVzzoxwwHwYDVR0j
BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw
QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE
NzNCOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxMWNhNjIwLWRhY2UtNGE5Zi1i
OGU4LWEzYTJlNTgxNTAwZS8wLzMxMzAzMzJlMzEzNjM5MmUzMjMzMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqe8wDQYJ
KoZIhvcNAQELBQADggEBACgSzoUQ49dryXPOOrWa80Vb2aII62RFw5Qi3GKHp3uP
Dr5fZ+DgmXKHobYmOUyTht+ZswIEm7yx+QB3FcM76iuKg5arL1C3DTvRdFs5AW3p
JDSwweGd9PBMt1gYnTGnQfbwvUuqOQzK5eIiaA0sv+4T9pbvg0kwbB1+jeOuQjwQ
5aaacQ+cVoGfZsKEgGy/NlUJTZpFe8T4TfWkkIAGB4pa9auWP+DzwJxEhyOi6nse
qcoDzQ6ju1UDariIcUZywemM/btaGpT8BoCkxIX3oIZD+Lv+b9sZ2Gmai6AIZk2P
3Wy8pMh2QBTk7chgGAfu+Oz4x45oisVjKL2d4OY9gOo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:22 2025 by rpki-client