Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa
File: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (raw, json)
Hash identifier: y0IC1wewy1NTZC1WvVqvRnWg597FE/H/DcwR9g+OaRM=
Subject key identifier: 47:00:D4:5A:B8:4F:DA:D3:0D:7C:DD:99:A1:64:3D:09:A5:DB:A4:48
Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897
Certificate serial: 11F62DC581F4297D391F58236F56D169A67106CB
Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa
Signing time: Mon 26 Aug 2024 17:23:05 +0000
ROA not before: Mon 26 Aug 2024 17:18:05 +0000
ROA not after: Mon 25 Aug 2025 17:23:05 +0000
asID: 149749
IP address blocks: 103.189.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f6:2d:c5:81:f4:29:7d:39:1f:58:23:6f:56:d1:69:a6:71:06:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897
Validity
Not Before: Aug 26 17:18:05 2024 GMT
Not After : Aug 25 17:23:05 2025 GMT
Subject: CN=4700D45AB84FDAD30D7CDD99A1643D09A5DBA448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:43:50:fe:ec:6a:24:99:f8:8c:b7:8b:e4:
1e:f9:ac:1f:16:be:7b:66:28:b2:88:ad:bf:99:0b:
60:5d:0d:99:d5:f5:68:36:5e:4a:0f:6b:09:39:df:
53:c8:67:e6:90:6d:65:c4:e1:8e:e0:47:fd:22:55:
57:55:b8:4d:7c:ff:c1:ec:57:53:4b:b0:82:b4:0c:
4c:63:d1:47:72:61:f0:69:dc:86:40:88:57:38:ab:
1c:dc:b0:23:86:5a:4f:fe:3d:f2:1b:ac:db:45:76:
b2:70:a9:fc:f6:3e:1d:84:70:98:75:17:1b:67:6b:
55:99:16:48:49:5f:b3:a5:5d:75:47:b1:ce:21:5b:
74:42:32:ea:ac:0b:b5:98:06:e6:ab:c5:40:2c:24:
5b:bc:b4:f0:38:47:e4:47:ea:dd:ef:fa:63:2a:bd:
89:06:4a:8c:d5:ae:98:e2:93:bb:48:60:01:29:42:
9b:02:98:7d:c4:63:2d:f7:06:a5:7d:c9:2e:91:c0:
f1:75:03:36:a9:11:e1:e4:c8:28:86:1d:91:a2:2b:
45:66:9c:f0:0e:48:ee:58:45:89:88:dd:6c:32:80:
6e:c9:32:bd:05:d0:77:74:9c:97:eb:88:43:95:a9:
99:43:04:51:ed:62:e1:4e:22:68:b0:33:b3:be:dd:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:00:D4:5A:B8:4F:DA:D3:0D:7C:DD:99:A1:64:3D:09:A5:DB:A4:48
X509v3 Authority Key Identifier:
keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ee:f6:33:ee:a2:46:fd:a7:58:66:2f:99:17:39:6f:72:ac:
3d:37:53:54:b2:c9:26:02:38:01:21:66:a1:42:7a:70:22:a8:
0b:d1:74:dc:7f:43:0a:df:93:3a:47:97:0d:7f:c8:84:81:d6:
2a:7a:4c:23:b2:e2:fe:66:71:93:b8:ee:33:ba:f2:19:91:13:
f6:3f:a8:13:55:5c:eb:dd:7b:29:52:27:39:67:ad:13:f9:80:
87:6e:3f:7b:6a:34:f1:55:47:ab:7c:db:3d:5d:f7:a3:3d:39:
3a:33:2d:c3:a6:0e:c9:1e:01:f0:21:3b:52:e7:ce:67:02:e9:
18:5b:f7:e6:9d:df:00:30:fe:ab:5a:0e:4e:f0:35:e3:25:27:
f4:20:c1:e0:ab:4a:8a:b6:1b:05:61:42:56:45:35:f9:9c:32:
8f:74:87:27:de:41:61:e9:fb:39:63:ea:74:04:92:36:3c:9f:
c8:91:47:ab:23:d9:3e:37:d2:2b:a4:36:f1:77:7e:d6:f1:4a:
8f:3e:98:8a:a9:d7:90:e8:c3:ff:b4:2f:5e:5b:00:65:23:f3:
fe:21:59:d3:fe:d9:de:f6:49:78:8a:37:84:9a:bc:f6:92:f3:
37:c7:f8:8f:7e:a6:61:b4:8f:36:c5:b4:96:c1:46:12:7a:33:
3e:dc:d7:13
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUEfYtxYH0KX05H1gjb1bRaaZxBsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC
OTAzQjg5NzAeFw0yNDA4MjYxNzE4MDVaFw0yNTA4MjUxNzIzMDVaMDMxMTAvBgNV
BAMTKDQ3MDBENDVBQjg0RkRBRDMwRDdDREQ5OUExNjQzRDA5QTVEQkE0NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO10NQ/uxqJJn4jLeL5B75rB8W
vntmKLKIrb+ZC2BdDZnV9Wg2XkoPawk531PIZ+aQbWXE4Y7gR/0iVVdVuE18/8Hs
V1NLsIK0DExj0UdyYfBp3IZAiFc4qxzcsCOGWk/+PfIbrNtFdrJwqfz2Ph2EcJh1
Fxtna1WZFkhJX7OlXXVHsc4hW3RCMuqsC7WYBuarxUAsJFu8tPA4R+RH6t3v+mMq
vYkGSozVrpjik7tIYAEpQpsCmH3EYy33BqV9yS6RwPF1AzapEeHkyCiGHZGiK0Vm
nPAOSO5YRYmI3WwygG7JMr0F0Hd0nJfriEOVqZlDBFHtYuFOImiwM7O+3WPFAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQURwDUWrhP2tMNfN2ZoWQ9CaXbpEgwHwYDVR0j
BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2
Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz
Qjg5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNWU1YTMwLTA4MDItNGM1Yy05
NDdlLTk4ZWYyODVmNGY2Yi8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvW8wDQYJ
KoZIhvcNAQELBQADggEBAHru9jPuokb9p1hmL5kXOW9yrD03U1SyySYCOAEhZqFC
enAiqAvRdNx/QwrfkzpHlw1/yISB1ip6TCOy4v5mcZO47jO68hmRE/Y/qBNVXOvd
eylSJzlnrRP5gIduP3tqNPFVR6t82z1d96M9OTozLcOmDskeAfAhO1LnzmcC6Rhb
9+ad3wAw/qtaDk7wNeMlJ/QgweCrSoq2GwVhQlZFNfmcMo90hyfeQWHp+zlj6nQE
kjY8n8iRR6sj2T430iukNvF3ftbxSo8+mIqp15Dow/+0L15bAGUj8/4hWdP+2d72
SXiKN4SavPaS8zfH+I9+pmG0jzbFtJbBRhJ6Mz7c1xM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:19:50 2025 by rpki-client