Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa
File: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (raw, json)
Hash identifier: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk=
Subject key identifier: A5:C5:F4:07:BF:BE:F3:72:4B:E6:57:D5:72:95:FF:70:59:5C:D8:BC
Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2
Certificate serial: 6D4C2B9B74F626C33DE442F094D4B77D9BDACCE4
Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa
Signing time: Wed 30 Oct 2024 06:00:00 +0000
ROA not before: Wed 30 Oct 2024 05:55:00 +0000
ROA not after: Wed 29 Oct 2025 06:00:00 +0000
asID: 141645
IP address blocks: 103.162.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:4c:2b:9b:74:f6:26:c3:3d:e4:42:f0:94:d4:b7:7d:9b:da:cc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2
Validity
Not Before: Oct 30 05:55:00 2024 GMT
Not After : Oct 29 06:00:00 2025 GMT
Subject: CN=A5C5F407BFBEF3724BE657D57295FF70595CD8BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:4c:55:34:30:1f:0b:a0:5d:16:70:bc:16:
21:64:97:78:e6:29:80:67:68:ae:ee:e9:6a:76:e4:
32:7f:5d:3d:00:5e:ab:85:82:1d:2d:0e:28:8f:9e:
35:f3:1f:4c:76:d9:b8:73:da:4c:a5:2d:0e:e8:07:
79:8b:e3:92:56:2b:0b:1f:32:d8:50:4f:2a:eb:2a:
e4:fd:51:71:48:d8:0a:3d:4d:ad:96:33:5a:32:5b:
5a:93:5a:0a:20:db:e0:6f:85:43:a5:a8:b3:06:9c:
48:e3:fa:78:57:8a:40:fc:e3:7b:f6:cb:8f:91:b1:
81:22:41:62:41:e5:aa:35:4f:70:e2:f2:ed:ad:01:
5e:a0:4a:9c:40:8b:1e:6c:ef:7d:0c:43:04:62:41:
3e:6b:58:02:52:a5:da:b8:5e:33:dc:16:8a:bb:03:
6b:25:a7:17:e9:e8:5d:52:00:35:f9:45:77:99:3b:
83:1a:3f:5c:a1:19:b4:fb:9b:6c:b9:86:f8:eb:d2:
22:d6:6f:f9:9c:bf:84:1a:fd:4b:f2:83:a4:62:d7:
18:0b:18:74:9d:53:b1:f2:52:ea:98:2c:2e:d8:95:
76:a8:fc:fe:9e:42:41:d6:62:3e:15:fa:70:5f:4e:
c5:4c:2f:0e:63:a2:38:66:40:82:d7:de:95:59:bd:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C5:F4:07:BF:BE:F3:72:4B:E6:57:D5:72:95:FF:70:59:5C:D8:BC
X509v3 Authority Key Identifier:
keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.54.0/24
Signature Algorithm: sha256WithRSAEncryption
44:96:b2:0c:cc:4c:5a:db:aa:48:2e:4b:2b:0e:3d:1e:64:77:
c2:2d:85:fa:ae:70:68:51:f2:44:9e:ad:a5:84:3f:b1:79:38:
ea:d8:cb:d0:84:48:ea:8d:88:21:3d:cf:ba:4b:aa:54:2e:b8:
26:40:6c:54:5d:69:ce:17:f6:82:02:5e:98:55:0f:15:06:fa:
6d:52:e8:1f:05:10:c5:20:d6:56:eb:df:40:dd:96:7c:f5:32:
d6:0d:4c:58:e7:a7:6f:cb:20:29:dd:fe:fe:13:8e:20:e5:b2:
ac:69:ff:3c:9d:a1:3e:74:88:dd:3d:4c:ee:ed:92:02:1a:da:
6c:80:2e:12:40:f4:64:f5:df:47:81:ba:1b:16:d1:6a:60:d5:
a2:18:ac:45:f1:d4:1f:4c:3b:99:70:fc:c9:3d:94:21:dd:ec:
e1:10:0f:86:83:87:4f:31:d3:f1:e1:a8:ed:0b:ce:78:2f:4d:
49:f5:94:46:aa:ec:54:6e:32:e8:5c:5c:5b:d1:d2:e3:49:fd:
48:a6:47:57:17:e4:27:82:53:ff:01:f8:92:c8:8e:68:80:6b:
77:4f:b8:56:59:11:bc:ba:80:8c:0e:6d:56:4f:b7:bf:6a:9c:
49:d7:fc:26:07:fd:61:6c:3a:6d:8c:ab:55:7d:4c:5a:71:db:
9b:62:53:a1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbUwrm3T2JsM95ELwlNS3fZvazOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1
RDI4NUZBMjAeFw0yNDEwMzAwNTU1MDBaFw0yNTEwMjkwNjAwMDBaMDMxMTAvBgNV
BAMTKEE1QzVGNDA3QkZCRUYzNzI0QkU2NTdENTcyOTVGRjcwNTk1Q0Q4QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDkxVNDAfC6BdFnC8FiFkl3jm
KYBnaK7u6Wp25DJ/XT0AXquFgh0tDiiPnjXzH0x22bhz2kylLQ7oB3mL45JWKwsf
MthQTyrrKuT9UXFI2Ao9Ta2WM1oyW1qTWgog2+BvhUOlqLMGnEjj+nhXikD843v2
y4+RsYEiQWJB5ao1T3Di8u2tAV6gSpxAix5s730MQwRiQT5rWAJSpdq4XjPcFoq7
A2slpxfp6F1SADX5RXeZO4MaP1yhGbT7m2y5hvjr0iLWb/mcv4Qa/Uvyg6Ri1xgL
GHSdU7HyUuqYLC7YlXao/P6eQkHWYj4V+nBfTsVMLw5jojhmQILX3pVZvebtAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUpcX0B7++83JL5lfVcpX/cFlc2LwwHwYDVR0j
BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky
NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4
NUZBMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4NTNhZmRkLTJlMDktNDc3My04
YmU0LTZmZDBlZTkwYjA0MC8wLzMxMzAzMzJlMzEzNjMyMmUzNTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6I2MA0GCSqG
SIb3DQEBCwUAA4IBAQBElrIMzExa26pILksrDj0eZHfCLYX6rnBoUfJEnq2lhD+x
eTjq2MvQhEjqjYghPc+6S6pULrgmQGxUXWnOF/aCAl6YVQ8VBvptUugfBRDFINZW
699A3ZZ89TLWDUxY56dvyyAp3f7+E44g5bKsaf88naE+dIjdPUzu7ZICGtpsgC4S
QPRk9d9HgbobFtFqYNWiGKxF8dQfTDuZcPzJPZQh3ezhEA+Gg4dPMdPx4ajtC854
L01J9ZRGquxUbjLoXFxb0dLjSf1IpkdXF+QnglP/AfiSyI5ogGt3T7hWWRG8uoCM
Dm1WT7e/apxJ1/wmB/1hbDptjKtVfUxacdubYlOh
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:55:05 2025 by rpki-client