Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa
File: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (raw, json)
Hash identifier: PnooExtXULQNtC7kT+QlUO9aWVZkNas5LdJZ6cSCIfo=
Subject key identifier: 17:24:E3:17:E3:C2:87:C5:7D:DE:D0:91:D8:75:2D:3B:80:76:CB:36
Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB
Certificate serial: 2169FCCB8C1FCEAB56EC5723052D05FE5D0952DE
Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa
Signing time: Thu 05 Sep 2024 11:00:02 +0000
ROA not before: Thu 05 Sep 2024 10:55:02 +0000
ROA not after: Thu 04 Sep 2025 11:00:02 +0000
asID: 140457
IP address blocks: 103.13.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:69:fc:cb:8c:1f:ce:ab:56:ec:57:23:05:2d:05:fe:5d:09:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB
Validity
Not Before: Sep 5 10:55:02 2024 GMT
Not After : Sep 4 11:00:02 2025 GMT
Subject: CN=1724E317E3C287C57DDED091D8752D3B8076CB36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:54:44:c1:b1:73:03:81:51:63:81:22:bc:
f2:a3:72:b7:9a:ce:e7:e1:0c:b4:80:ec:28:9d:cf:
8d:da:fe:24:2d:11:82:47:b2:48:26:ef:33:50:76:
75:e4:31:bb:53:82:58:28:f2:58:38:bb:90:86:70:
eb:ba:16:6f:11:ff:50:6a:57:3c:ba:63:c9:b6:7d:
49:c8:87:b6:b0:0f:a5:65:e6:d9:e6:84:21:6c:e8:
84:21:b5:62:3c:f4:30:4b:34:5f:a9:e5:8c:54:95:
08:8e:66:b5:5d:d7:d5:30:75:ba:29:42:74:47:cf:
ae:2c:01:45:69:13:70:a2:9e:4f:dc:e2:b3:4b:ee:
cf:9e:5b:ee:fd:0b:a8:9f:54:a5:c0:8d:95:47:1c:
3c:a8:4e:77:e2:37:f0:af:77:a4:39:d6:a2:3c:56:
e6:ce:78:86:77:fa:93:28:05:b6:0d:5d:1b:db:48:
41:a0:17:ad:17:ad:c0:c0:e8:e5:f6:ff:2e:37:53:
b1:c9:8d:bf:b4:98:d6:d7:f1:86:4c:2e:a9:91:18:
2a:4e:83:ed:e9:3b:78:c4:3b:f2:de:3e:1d:6d:e6:
b2:0b:31:a8:a2:18:cc:43:3f:0a:86:a6:8e:9f:60:
1d:31:4e:01:bb:83:55:06:72:ad:a2:98:7e:af:6b:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:24:E3:17:E3:C2:87:C5:7D:DE:D0:91:D8:75:2D:3B:80:76:CB:36
X509v3 Authority Key Identifier:
keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.136.0/24
Signature Algorithm: sha256WithRSAEncryption
78:71:0b:99:dc:61:33:32:cf:4e:fa:4b:a7:d2:7f:a8:d0:a0:
91:8f:73:7b:2a:f1:1e:31:3c:ba:59:ed:96:db:f4:94:23:23:
c3:0a:84:74:11:4a:f2:91:2a:18:10:f1:a0:a7:92:f7:3b:3f:
3a:d2:cf:a1:5d:41:33:33:6f:8c:df:d8:fb:d7:0a:e7:40:f7:
30:21:1b:ea:23:e7:5b:75:68:52:8a:3f:47:dd:4c:65:9a:29:
23:81:95:95:39:1c:1f:69:d1:e3:97:59:0a:0e:68:7e:3d:a4:
6e:e6:0a:49:8c:4b:3a:e0:4b:64:74:30:1c:be:3e:b4:28:dd:
e3:f0:af:41:f0:73:c5:3f:68:a8:dc:94:77:48:c7:65:0a:17:
3a:1e:eb:35:e6:01:64:b7:89:ed:be:78:6d:90:6a:cd:73:d2:
39:8b:5b:3a:e5:8b:29:f2:91:ae:3b:60:aa:33:5b:fb:38:a1:
97:5d:98:f3:90:3b:70:71:4d:43:b8:25:81:b0:b5:7e:30:2e:
98:af:9a:77:ec:9e:01:48:8c:6e:bf:18:8d:dc:25:06:6f:14:
ea:88:04:67:65:cb:45:ce:28:36:1c:7b:2e:e5:91:e0:d0:17:
02:bb:e3:95:a8:3a:6b:87:79:d7:f8:41:8b:91:be:be:b2:20:
73:90:43:4f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIWn8y4wfzqtW7FcjBS0F/l0JUt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2
OUFDMzBDQjAeFw0yNDA5MDUxMDU1MDJaFw0yNTA5MDQxMTAwMDJaMDMxMTAvBgNV
BAMTKDE3MjRFMzE3RTNDMjg3QzU3RERFRDA5MUQ4NzUyRDNCODA3NkNCMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTs1REwbFzA4FRY4EivPKjcrea
zufhDLSA7Cidz43a/iQtEYJHskgm7zNQdnXkMbtTglgo8lg4u5CGcOu6Fm8R/1Bq
Vzy6Y8m2fUnIh7awD6Vl5tnmhCFs6IQhtWI89DBLNF+p5YxUlQiOZrVd19Uwdbop
QnRHz64sAUVpE3Cink/c4rNL7s+eW+79C6ifVKXAjZVHHDyoTnfiN/Cvd6Q51qI8
VubOeIZ3+pMoBbYNXRvbSEGgF60XrcDA6OX2/y43U7HJjb+0mNbX8YZMLqmRGCpO
g+3pO3jEO/LePh1t5rILMaiiGMxDPwqGpo6fYB0xTgG7g1UGcq2imH6va8odAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUFyTjF+PCh8V93tCR2HUtO4B2yzYwHwYDVR0j
BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4
OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD
MzBDQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NWFmOGFmLWE0MGYtNDJjNy05
ZjRjLTE4ZTBjYTVjZDQ3ZS8wLzMxMzAzMzJlMzEzMzJlMzEzMzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw2IMA0GCSqG
SIb3DQEBCwUAA4IBAQB4cQuZ3GEzMs9O+kun0n+o0KCRj3N7KvEeMTy6We2W2/SU
IyPDCoR0EUrykSoYEPGgp5L3Oz860s+hXUEzM2+M39j71wrnQPcwIRvqI+dbdWhS
ij9H3UxlmikjgZWVORwfadHjl1kKDmh+PaRu5gpJjEs64EtkdDAcvj60KN3j8K9B
8HPFP2io3JR3SMdlChc6Hus15gFkt4ntvnhtkGrNc9I5i1s65Ysp8pGuO2CqM1v7
OKGXXZjzkDtwcU1DuCWBsLV+MC6Yr5p37J4BSIxuvxiN3CUGbxTqiARnZctFzig2
HHsu5ZHg0BcCu+OVqDprh3nX+EGLkb6+siBzkENP
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:10 2025 by rpki-client