Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa
File: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (raw, json)
Hash identifier: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=
Subject key identifier: C2:37:AF:32:87:71:65:12:90:38:27:FC:28:B3:77:32:95:C0:AE:FC
Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497
Certificate serial: 576FEEF4924DBB8C3D88E8343FFD849A40DDD2B5
Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa
Signing time: Wed 29 Jan 2025 11:00:04 +0000
ROA not before: Wed 29 Jan 2025 10:55:04 +0000
ROA not after: Wed 28 Jan 2026 11:00:04 +0000
asID: 138843
IP address blocks: 103.138.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6f:ee:f4:92:4d:bb:8c:3d:88:e8:34:3f:fd:84:9a:40:dd:d2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497
Validity
Not Before: Jan 29 10:55:04 2025 GMT
Not After : Jan 28 11:00:04 2026 GMT
Subject: CN=C237AF3287716512903827FC28B3773295C0AEFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3b:85:89:6f:b5:06:1a:33:2a:a0:f0:24:fc:
27:f6:62:be:d2:59:94:94:bb:19:c6:a6:cd:59:ca:
e0:ab:af:03:af:09:8f:f7:5e:cf:d7:c6:5b:db:ea:
32:3d:f0:b7:05:47:25:3a:c4:38:37:9e:6e:87:99:
8b:5f:de:21:03:4e:52:c3:d7:b5:ef:03:c6:e1:45:
bf:c6:54:f5:77:fe:ae:cb:79:7b:f1:78:9e:67:d4:
f4:50:36:bb:59:88:94:35:5c:2b:10:fb:e2:75:ae:
83:96:92:4a:4e:81:51:65:6b:ae:77:00:d3:e5:7c:
39:08:6c:80:3f:d6:22:00:9e:0e:0e:f5:f9:bd:d1:
6d:4d:db:6b:94:c0:e5:69:aa:08:e7:8e:33:35:41:
a6:a0:f9:9a:9f:62:c7:24:b6:8b:9b:83:98:58:a2:
cc:87:d5:d0:45:ad:14:0d:a4:af:6c:e5:37:58:6d:
f0:39:da:4b:2e:82:ee:a3:74:f7:9b:2f:8a:f5:c5:
ed:25:bc:32:6c:e9:3b:b4:f1:cc:3b:92:cf:84:4f:
d6:0d:13:93:83:c3:46:bd:e1:b5:6e:58:99:ac:1b:
cd:a4:bb:09:de:69:0c:e5:74:2b:32:a0:98:18:eb:
0a:27:a0:9c:4e:6c:34:5c:ec:53:b6:ad:2d:ed:a4:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:37:AF:32:87:71:65:12:90:38:27:FC:28:B3:77:32:95:C0:AE:FC
X509v3 Authority Key Identifier:
keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.62.0/23
Signature Algorithm: sha256WithRSAEncryption
46:15:2d:4b:4a:18:08:42:7f:e8:bd:d6:2b:5c:7e:dd:3f:e5:
54:04:1d:47:29:b6:b4:da:8a:dc:24:92:5c:de:18:76:c5:3f:
14:13:7e:01:f7:99:31:62:e3:72:da:fb:97:44:ef:9b:c6:ae:
bd:d0:06:f1:31:a4:bd:4a:7d:20:53:da:37:34:45:d7:ed:f9:
a5:87:36:b1:92:2d:a5:06:a7:0b:a2:1e:f6:40:35:3f:49:6c:
8a:73:a3:a7:14:01:3f:83:40:bf:e5:e4:84:10:47:64:4d:6f:
e5:12:9e:53:9e:3f:dd:a5:a0:1e:79:0d:44:89:47:fa:1b:00:
0a:70:b4:07:16:c7:1c:1f:40:aa:60:52:58:ce:1c:60:f0:17:
3b:59:d9:a9:0b:69:22:0f:08:ae:a9:89:43:95:3b:0e:a0:cf:
5d:69:f0:c2:a7:a3:b8:4e:e8:36:95:8e:39:14:12:9c:f9:07:
05:53:01:b8:6c:81:75:19:04:fb:e6:2d:dd:c4:02:ce:60:4c:
e1:18:91:b1:f7:dd:1d:80:ce:3f:0b:1a:c6:a0:72:6b:7f:aa:
3f:fe:69:14:2c:40:99:a9:e0:e4:36:06:91:b1:9e:04:d7:f3:
f0:25:69:4c:27:44:82:cd:20:67:df:7d:84:83:3d:50:f7:ec:
47:f4:9d:1f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUV2/u9JJNu4w9iOg0P/2EmkDd0rUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG
QTAzRTQ5NzAeFw0yNTAxMjkxMDU1MDRaFw0yNjAxMjgxMTAwMDRaMDMxMTAvBgNV
BAMTKEMyMzdBRjMyODc3MTY1MTI5MDM4MjdGQzI4QjM3NzMyOTVDMEFFRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsO4WJb7UGGjMqoPAk/Cf2Yr7S
WZSUuxnGps1ZyuCrrwOvCY/3Xs/Xxlvb6jI98LcFRyU6xDg3nm6HmYtf3iEDTlLD
17XvA8bhRb/GVPV3/q7LeXvxeJ5n1PRQNrtZiJQ1XCsQ++J1roOWkkpOgVFla653
ANPlfDkIbIA/1iIAng4O9fm90W1N22uUwOVpqgjnjjM1Qaag+ZqfYscktoubg5hY
osyH1dBFrRQNpK9s5TdYbfA52ksugu6jdPebL4r1xe0lvDJs6Tu08cw7ks+ET9YN
E5ODw0a94bVuWJmsG82kuwneaQzldCsyoJgY6wonoJxObDRc7FO2rS3tpKs5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUwjevModxZRKQOCf8KLN3MpXArvwwHwYDVR0j
BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD
RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz
RTQ5Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JjNTg2N2Q4LTNkNmYtNDgxNi1i
ODRmLWZkZDVjNTAyYjYzNC8wLzMxMzAzMzJlMzEzMzM4MmUzNjMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4o+MA0GCSqG
SIb3DQEBCwUAA4IBAQBGFS1LShgIQn/ovdYrXH7dP+VUBB1HKba02orcJJJc3hh2
xT8UE34B95kxYuNy2vuXRO+bxq690AbxMaS9Sn0gU9o3NEXX7fmlhzaxki2lBqcL
oh72QDU/SWyKc6OnFAE/g0C/5eSEEEdkTW/lEp5Tnj/dpaAeeQ1EiUf6GwAKcLQH
FsccH0CqYFJYzhxg8Bc7WdmpC2kiDwiuqYlDlTsOoM9dafDCp6O4Tug2lY45FBKc
+QcFUwG4bIF1GQT75i3dxALOYEzhGJGx990dgM4/CxrGoHJrf6o//mkULECZqeDk
NgaRsZ4E1/PwJWlMJ0SCzSBn332Egz1Q9+xH9J0f
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:24 2025 by rpki-client