Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa
File: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier: GQLjyzqSeaPMpwbmMG+hHOVIX1kxT3fObGtrds/C+9M=
Subject key identifier: 9E:1A:61:BE:90:65:BB:AA:B0:75:0A:1E:2F:FA:29:B5:73:C2:9C:BE
Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267
Certificate serial: 5E9A262BD156B29FDBFA4D3BF072E320A3E0EC9E
Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa
Signing time: Wed 18 Dec 2024 07:16:07 +0000
ROA not before: Wed 18 Dec 2024 07:11:07 +0000
ROA not after: Wed 17 Dec 2025 07:16:07 +0000
asID: 58477
IP address blocks: 103.56.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:9a:26:2b:d1:56:b2:9f:db:fa:4d:3b:f0:72:e3:20:a3:e0:ec:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267
Validity
Not Before: Dec 18 07:11:07 2024 GMT
Not After : Dec 17 07:16:07 2025 GMT
Subject: CN=9E1A61BE9065BBAAB0750A1E2FFA29B573C29CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:21:f8:c3:3c:6a:98:9a:b5:58:0c:f5:b7:
d6:8a:8e:21:5e:72:db:54:54:74:11:6f:11:d8:28:
01:1e:72:41:a6:c2:2b:c8:a2:c3:f6:91:1e:bf:7d:
d9:cc:da:8c:fc:08:2c:b5:8c:b8:ed:f3:a1:48:05:
55:66:95:9a:8d:36:e1:7d:57:d8:0d:a3:f0:67:a3:
f7:4a:fe:02:65:78:93:ac:bc:4d:98:d6:12:03:0b:
d0:93:ed:09:5f:b5:05:f1:2c:5c:60:42:27:15:0b:
6a:ce:cf:43:ce:e2:68:72:67:86:e4:67:33:aa:ea:
66:35:4d:2b:f4:86:21:c7:bd:67:d0:42:c8:58:f4:
4e:ad:27:82:ec:16:28:ce:27:9e:6c:7a:87:1d:59:
87:6c:2d:90:b8:e5:32:d2:1d:c6:18:f8:f0:e4:54:
fd:e9:68:4b:55:fd:48:cd:f5:83:3e:89:95:3c:46:
3c:e2:a0:28:e5:f5:3f:54:49:54:b9:ec:41:99:37:
ad:2e:e8:64:04:e8:1f:89:3e:36:8b:45:f3:da:76:
67:a8:9b:5f:2b:98:cf:4f:d2:30:52:93:92:06:38:
18:07:04:92:a6:74:9e:75:6d:f8:e3:1a:0e:fc:a5:
00:ed:ec:67:aa:14:5b:4c:bd:5e:b8:9e:53:6e:35:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1A:61:BE:90:65:BB:AA:B0:75:0A:1E:2F:FA:29:B5:73:C2:9C:BE
X509v3 Authority Key Identifier:
keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.204.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5b:e9:b8:96:cc:f0:e3:ae:d7:dc:fd:77:0e:76:44:b2:01:
33:e1:5c:b5:02:97:d4:5e:5d:b3:51:70:9f:b3:5d:8d:ad:e6:
81:06:a6:4c:4a:6e:cd:c6:9f:b0:8b:6e:f6:a6:74:76:e2:10:
ed:93:bf:03:9d:7f:29:43:c5:8f:35:60:ca:08:73:9c:35:85:
c6:8a:59:4c:0f:4d:18:72:66:e1:ef:d1:43:20:39:f4:ee:e9:
c5:ac:57:59:ae:59:e8:f1:e7:55:99:79:03:d7:2e:73:a6:64:
49:db:01:1d:d9:ed:25:10:2e:da:39:2f:ac:5d:01:5e:61:d9:
e1:cd:c6:2e:aa:bc:ae:cf:c1:c6:11:c4:26:33:25:e9:d8:b7:
88:12:3a:75:b9:eb:cc:0c:9a:b8:93:1c:c5:3b:4b:e4:81:b0:
52:92:ae:08:73:90:08:02:b0:54:36:8a:98:cc:c7:44:ca:f8:
92:c5:fa:e6:4a:d0:b2:2b:13:83:aa:c0:00:c5:d3:d7:d7:02:
00:1e:3f:52:bf:28:92:6e:4f:22:d6:12:f8:a6:19:e4:4e:8b:
74:90:09:b8:1a:9b:73:0c:25:00:dc:5b:1e:23:59:0d:84:3f:
e7:ac:91:8d:ea:7d:3f:af:20:2b:95:64:15:6a:25:64:9f:8c:
2d:09:8d:bd
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXpomK9FWsp/b+k078HLjIKPg7J4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0
QTk2QjI2NzAeFw0yNDEyMTgwNzExMDdaFw0yNTEyMTcwNzE2MDdaMDMxMTAvBgNV
BAMTKDlFMUE2MUJFOTA2NUJCQUFCMDc1MEExRTJGRkEyOUI1NzNDMjlDQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYSH4wzxqmJq1WAz1t9aKjiFe
cttUVHQRbxHYKAEeckGmwivIosP2kR6/fdnM2oz8CCy1jLjt86FIBVVmlZqNNuF9
V9gNo/Bno/dK/gJleJOsvE2Y1hIDC9CT7QlftQXxLFxgQicVC2rOz0PO4mhyZ4bk
ZzOq6mY1TSv0hiHHvWfQQshY9E6tJ4LsFijOJ55seocdWYdsLZC45TLSHcYY+PDk
VP3paEtV/UjN9YM+iZU8RjzioCjl9T9USVS57EGZN60u6GQE6B+JPjaLRfPadmeo
m18rmM9P0jBSk5IGOBgHBJKmdJ51bfjjGg78pQDt7GeqFFtMvV64nlNuNT4vAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUnhphvpBlu6qwdQoeL/optXPCnL4wHwYDVR0j
BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2
NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2
QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04
OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zDANBgkqhkiG
9w0BAQsFAAOCAQEAdFvpuJbM8OOu19z9dw52RLIBM+FctQKX1F5ds1Fwn7Ndja3m
gQamTEpuzcafsItu9qZ0duIQ7ZO/A51/KUPFjzVgyghznDWFxopZTA9NGHJm4e/R
QyA59O7pxaxXWa5Z6PHnVZl5A9cuc6ZkSdsBHdntJRAu2jkvrF0BXmHZ4c3GLqq8
rs/BxhHEJjMl6di3iBI6dbnrzAyauJMcxTtL5IGwUpKuCHOQCAKwVDaKmMzHRMr4
ksX65krQsisTg6rAAMXT19cCAB4/Ur8okm5PItYS+KYZ5E6LdJAJuBqbcwwlANxb
HiNZDYQ/56yRjep9P68gK5VkFWolZJ+MLQmNvQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:13:32 2025 by rpki-client