Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
File: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (raw, json)
Hash identifier: BPKyUKqegcQh7lOAU+lF0QRMkfi7PI2y8bbVLrRKJ70=
Subject key identifier: 0C:7F:3C:30:81:5F:71:C8:BC:2F:1C:B7:95:A8:4C:1D:65:13:36:04
Certificate issuer: /CN=7FAD2077691F807236683910594F23BA68280CD9
Certificate serial: 3ADEED2A44D63F59C9DE7DA51887713E9366B751
Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
Signing time: Mon 01 Jul 2024 01:05:39 +0000
ROA not before: Mon 01 Jul 2024 01:00:39 +0000
ROA not after: Mon 30 Jun 2025 01:05:39 +0000
asID: 133803
IP address blocks: 103.147.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:de:ed:2a:44:d6:3f:59:c9:de:7d:a5:18:87:71:3e:93:66:b7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9
Validity
Not Before: Jul 1 01:00:39 2024 GMT
Not After : Jun 30 01:05:39 2025 GMT
Subject: CN=0C7F3C30815F71C8BC2F1CB795A84C1D65133604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:e3:dd:00:39:64:df:dd:8e:09:90:cc:7d:
a9:1e:b9:c6:5d:72:99:4c:75:81:ce:b2:14:70:86:
eb:d9:79:6e:7a:8c:d2:ce:2e:4e:74:39:47:52:84:
d6:07:50:a9:3b:0b:41:87:13:04:3a:de:ba:af:ec:
8c:0e:93:e9:4c:80:c6:ef:64:2f:08:cf:12:4d:65:
91:66:15:74:2a:04:3f:02:22:bd:23:df:ac:08:22:
9c:55:a0:75:79:af:85:b8:97:f3:be:27:45:eb:60:
02:8f:eb:26:ad:2f:4f:31:d5:85:fb:8e:30:30:92:
71:c5:dd:91:55:c5:f2:73:48:c8:8d:df:73:d0:2c:
73:62:cf:13:53:e8:65:2b:25:45:61:cd:5b:20:1d:
f9:ed:ac:bf:19:7c:b8:7e:48:02:60:3f:c0:0d:36:
31:66:19:bd:cd:26:5b:2e:c4:44:92:85:c8:8f:05:
be:64:08:ca:bc:14:11:d0:52:29:e6:f9:41:00:ed:
43:73:76:dd:d9:6b:9c:00:b1:b1:47:7f:32:54:96:
dd:fb:16:71:44:5a:f1:be:40:2a:be:df:42:99:47:
88:4c:db:c9:80:1f:9c:9c:c9:dd:dd:7d:3a:02:ec:
f9:1c:cb:5f:6e:d4:05:f0:40:f1:34:0f:11:9d:fc:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7F:3C:30:81:5F:71:C8:BC:2F:1C:B7:95:A8:4C:1D:65:13:36:04
X509v3 Authority Key Identifier:
keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.30.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c1:9a:fc:e0:69:7a:2a:84:d2:f6:c3:2a:c0:7b:33:61:9e:
62:06:a4:eb:b7:9c:26:c7:84:f7:50:f7:72:31:de:a1:6f:94:
c5:a6:53:4f:2f:34:5c:79:6c:62:4e:ae:00:48:bc:a5:c1:19:
62:99:63:92:65:8d:83:da:e8:f1:00:da:52:4b:51:3b:e3:80:
dd:7b:6c:df:61:fa:d0:36:46:24:f5:84:72:06:1e:aa:7f:25:
44:97:28:90:20:7f:fc:1e:2a:50:7d:20:e9:b9:ca:38:cd:b0:
38:92:1c:40:f3:c6:b4:51:73:5b:c1:1f:ab:88:6f:ee:fe:0c:
ed:84:66:0c:47:6b:93:83:49:5a:df:42:c6:29:85:31:e9:4e:
0c:33:9b:a0:81:59:b6:d7:cb:06:76:2d:07:99:9e:20:3a:8a:
b1:f8:ef:10:b0:3c:f8:01:8b:88:ce:f4:47:dd:ba:bc:33:21:
ae:47:39:9a:ab:0b:fc:87:6f:c7:d1:6f:99:78:82:f3:c3:4e:
2b:05:d5:af:a4:a8:7e:8b:bd:39:0e:d3:87:ee:ca:e4:f4:b5:
37:df:bb:69:1f:d4:d0:72:f7:18:86:eb:5a:a4:62:3a:14:f3:
cb:54:a8:6f:a5:a0:fc:05:96:71:64:92:f5:19:b6:0c:5f:a7:
1a:c0:3b:34
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOt7tKkTWP1nJ3n2lGIdxPpNmt1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2
ODI4MENEOTAeFw0yNDA3MDEwMTAwMzlaFw0yNTA2MzAwMTA1MzlaMDMxMTAvBgNV
BAMTKDBDN0YzQzMwODE1RjcxQzhCQzJGMUNCNzk1QTg0QzFENjUxMzM2MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJt+PdADlk392OCZDMfakeucZd
cplMdYHOshRwhuvZeW56jNLOLk50OUdShNYHUKk7C0GHEwQ63rqv7IwOk+lMgMbv
ZC8IzxJNZZFmFXQqBD8CIr0j36wIIpxVoHV5r4W4l/O+J0XrYAKP6yatL08x1YX7
jjAwknHF3ZFVxfJzSMiN33PQLHNizxNT6GUrJUVhzVsgHfntrL8ZfLh+SAJgP8AN
NjFmGb3NJlsuxESShciPBb5kCMq8FBHQUinm+UEA7UNzdt3Za5wAsbFHfzJUlt37
FnFEWvG+QCq+30KZR4hM28mAH5ycyd3dfToC7Pkcy19u1AXwQPE0DxGd/PSXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUDH88MIFfcci8Lxy3lahMHWUTNgQwHwYDVR0j
BBgwFoAUf60gd2kfgHI2aDkQWU8jumgoDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YTc1Yjc0MS04NDZhLTQzMzAtOTY1OS0wNWZmZTgyNjk4ZWUvMC83RkFEMjA3NzY5
MUY4MDcyMzY2ODM5MTA1OTRGMjNCQTY4MjgwQ0Q5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2ODI4
MENEOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhNzViNzQxLTg0NmEtNDMzMC05
NjU5LTA1ZmZlODI2OThlZS8wLzMxMzAzMzJlMzEzNDM3MmUzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5MeMA0GCSqG
SIb3DQEBCwUAA4IBAQCEwZr84Gl6KoTS9sMqwHszYZ5iBqTrt5wmx4T3UPdyMd6h
b5TFplNPLzRceWxiTq4ASLylwRlimWOSZY2D2ujxANpSS1E744Dde2zfYfrQNkYk
9YRyBh6qfyVElyiQIH/8HipQfSDpuco4zbA4khxA88a0UXNbwR+riG/u/gzthGYM
R2uTg0la30LGKYUx6U4MM5uggVm218sGdi0HmZ4gOoqx+O8QsDz4AYuIzvRH3bq8
MyGuRzmaqwv8h2/H0W+ZeILzw04rBdWvpKh+i705DtOH7srk9LU337tpH9TQcvcY
hutapGI6FPPLVKhvpaD8BZZxZJL1GbYMX6cawDs0
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:11:58 2025 by rpki-client