Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa
File: 3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa (raw, json)
Hash identifier: wVNUf+VlURHvtPfJTdBPKqRmCoRq5tMqXCMVvLe41BI=
Subject key identifier: 9D:49:6A:8A:77:6C:33:A2:98:C9:A9:EE:67:1C:41:BF:1D:F6:97:DD
Certificate issuer: /CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492
Certificate serial: 6099DFC42E2B49EAE4C5E13674C16512A6B94FCA
Authority key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa
Signing time: Tue 17 Dec 2024 17:00:00 +0000
ROA not before: Tue 17 Dec 2024 16:55:00 +0000
ROA not after: Tue 16 Dec 2025 17:00:00 +0000
asID: 139391
IP address blocks: 103.143.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:99:df:c4:2e:2b:49:ea:e4:c5:e1:36:74:c1:65:12:a6:b9:4f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492
Validity
Not Before: Dec 17 16:55:00 2024 GMT
Not After : Dec 16 17:00:00 2025 GMT
Subject: CN=9D496A8A776C33A298C9A9EE671C41BF1DF697DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:2d:b1:d9:c0:59:c2:36:d2:1c:db:71:2b:
b9:0c:95:a2:c1:fe:61:2c:17:b9:92:10:45:c6:ea:
14:6d:14:f0:ae:98:19:cb:b2:3e:ba:b7:ef:33:40:
a1:14:1f:bf:d4:12:24:c0:6a:0e:a7:2a:28:a6:61:
df:bc:a6:78:2c:4d:1f:9a:07:c9:eb:92:5c:9c:8e:
45:67:74:99:18:76:97:e5:09:20:6a:23:a3:ae:10:
12:b6:91:5a:0d:15:0a:ee:94:cc:9c:2d:6c:22:12:
f8:4e:a7:87:0b:7e:f9:59:57:9b:77:9c:56:db:23:
6c:1f:2a:a9:1b:b8:e8:74:86:3a:55:e5:2f:a7:48:
d3:85:c1:e5:7e:c7:7c:a5:a1:98:48:39:c4:01:2d:
4e:8a:09:68:22:8f:db:64:a2:31:f0:d2:35:06:7e:
c3:e4:82:5f:4a:5c:bb:ee:5d:c9:92:3a:f2:19:0a:
6d:a2:ba:70:7c:92:9c:d8:c0:46:ec:f9:39:e7:b7:
94:07:12:42:2f:80:44:60:e4:e9:30:4a:ce:14:f1:
22:64:65:c1:15:55:ec:50:93:1f:6c:27:b6:79:1a:
ad:b8:c7:1b:3d:e2:14:db:4c:fd:49:f0:bd:62:19:
d6:8b:f9:43:51:43:46:47:49:5c:32:68:2c:22:dc:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:49:6A:8A:77:6C:33:A2:98:C9:A9:EE:67:1C:41:BF:1D:F6:97:DD
X509v3 Authority Key Identifier:
keyid:8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.68.0/24
Signature Algorithm: sha256WithRSAEncryption
21:88:f7:86:b6:6e:19:a1:50:ec:c5:60:8c:d6:1b:dc:23:70:
46:dc:6d:77:a6:e2:8d:d1:84:7e:00:3f:0a:90:6f:5e:10:d3:
d6:77:97:ea:5d:db:58:9b:fd:f9:c7:e0:fb:f2:e3:3e:d9:82:
d8:55:db:61:60:d1:95:c7:b7:7c:02:43:35:10:b3:d4:ab:34:
49:ea:c6:64:e9:b6:1e:96:bb:2b:f1:74:7c:50:73:6b:51:26:
c5:f5:6a:ff:c1:b8:b4:74:0d:3d:49:f9:3d:0b:9d:c3:28:92:
d6:30:f3:e5:a0:53:19:7c:ee:84:ba:3a:f5:28:4b:bb:c7:a7:
ae:a8:43:32:f2:d3:79:bb:1c:32:16:da:8e:f4:20:2e:69:b0:
06:a6:50:0e:99:bc:97:8a:af:df:b0:48:92:11:88:bd:a8:80:
aa:d9:34:31:72:e8:a2:f3:93:e7:f8:dc:cf:d0:86:db:40:de:
0d:85:52:51:92:10:fc:64:b1:36:9e:da:a7:7e:ed:8e:0f:04:
c3:61:ba:2a:ef:12:bb:78:64:af:74:5c:14:bf:ec:95:b1:74:
cd:e0:17:a0:2d:47:7d:a5:81:10:7b:bd:13:2b:f2:02:a4:30:
b8:a5:aa:f6:7e:76:e8:a4:d5:14:e3:70:b3:c9:49:34:93:db:
66:88:17:d0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUYJnfxC4rSerkxeE2dMFlEqa5T8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3
NURCQzQ5MjAeFw0yNDEyMTcxNjU1MDBaFw0yNTEyMTYxNzAwMDBaMDMxMTAvBgNV
BAMTKDlENDk2QThBNzc2QzMzQTI5OEM5QTlFRTY3MUM0MUJGMURGNjk3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPi2x2cBZwjbSHNtxK7kMlaLB
/mEsF7mSEEXG6hRtFPCumBnLsj66t+8zQKEUH7/UEiTAag6nKiimYd+8pngsTR+a
B8nrklycjkVndJkYdpflCSBqI6OuEBK2kVoNFQrulMycLWwiEvhOp4cLfvlZV5t3
nFbbI2wfKqkbuOh0hjpV5S+nSNOFweV+x3yloZhIOcQBLU6KCWgij9tkojHw0jUG
fsPkgl9KXLvuXcmSOvIZCm2iunB8kpzYwEbs+Tnnt5QHEkIvgERg5OkwSs4U8SJk
ZcEVVexQkx9sJ7Z5Gq24xxs94hTbTP1J8L1iGdaL+UNRQ0ZHSVwyaCwi3PkhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUnUlqindsM6KYyanuZxxBvx32l90wHwYDVR0j
BBgwFoAUi0oMEPiKC2755FEPD2EnrXXbxJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMC84QjRBMEMxMEY4
OEEwQjZFRjlFNDUxMEYwRjYxMjdBRDc1REJDNDkyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3NURC
QzQ5Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NDI0MjgwLTMzYmUtNGViNy04
ZGI5LWUwM2Q0MTdjNGQ5Ny8wLzMxMzAzMzJlMzEzNDMzMmUzNjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzMzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ49EMA0GCSqG
SIb3DQEBCwUAA4IBAQAhiPeGtm4ZoVDsxWCM1hvcI3BG3G13puKN0YR+AD8KkG9e
ENPWd5fqXdtYm/35x+D78uM+2YLYVdthYNGVx7d8AkM1ELPUqzRJ6sZk6bYelrsr
8XR8UHNrUSbF9Wr/wbi0dA09Sfk9C53DKJLWMPPloFMZfO6Eujr1KEu7x6euqEMy
8tN5uxwyFtqO9CAuabAGplAOmbyXiq/fsEiSEYi9qICq2TQxcuii85Pn+NzP0Ibb
QN4NhVJRkhD8ZLE2ntqnfu2ODwTDYboq7xK7eGSvdFwUv+yVsXTN4BegLUd9pYEQ
e70TK/ICpDC4par2fnbopNUU43CzyUk0k9tmiBfQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:22 2025 by rpki-client