Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa
File: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (raw, json)
Hash identifier: A4bow00kXpDEKr/WErM916lCjp+QBUm74+vgJ+iFoLw=
Subject key identifier: CA:AF:FD:C2:D8:97:FD:A6:4E:4C:74:EC:81:EA:0C:21:D4:95:25:16
Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial: 7A38678A545F1C0CBC1C36072AC1F9BB07E42C02
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa
Signing time: Wed 27 Nov 2024 03:01:38 +0000
ROA not before: Wed 27 Nov 2024 02:56:38 +0000
ROA not after: Wed 26 Nov 2025 03:01:38 +0000
asID: 136878
IP address blocks: 103.105.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:38:67:8a:54:5f:1c:0c:bc:1c:36:07:2a:c1:f9:bb:07:e4:2c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Validity
Not Before: Nov 27 02:56:38 2024 GMT
Not After : Nov 26 03:01:38 2025 GMT
Subject: CN=CAAFFDC2D897FDA64E4C74EC81EA0C21D4952516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:eb:14:90:56:62:95:90:55:4f:3f:55:03:
c8:9e:a0:42:ba:b6:ae:42:0a:80:ae:22:0a:ff:3b:
32:4b:61:2c:2f:3c:fc:c4:18:c7:23:b4:60:f8:12:
47:25:ca:86:52:82:94:5d:c0:6c:9d:3e:e9:3e:18:
9a:5a:13:73:c1:36:64:6a:ff:73:48:d6:8f:9b:fd:
90:37:41:0b:0e:5e:82:96:43:77:f6:58:74:68:2c:
60:14:f3:93:27:d9:95:ba:af:c0:55:5a:0e:f7:12:
42:54:81:20:27:15:c4:cd:14:72:77:b7:3f:b6:07:
9e:67:e0:11:31:ee:ac:ec:1c:b8:e8:2f:08:7e:5d:
cc:49:e0:55:74:e2:55:34:4b:45:a0:98:eb:e7:5b:
87:eb:4d:22:5b:6f:59:3a:9a:26:2b:77:25:a5:84:
7b:92:e4:eb:72:70:4b:9a:42:3f:89:0e:0f:03:28:
cb:88:24:97:a5:68:80:93:9d:72:b4:25:75:71:31:
bf:50:e9:b1:33:bf:b2:8c:a1:20:84:fd:57:36:fe:
2f:6c:84:4a:21:41:e1:78:8f:61:1d:e3:07:13:be:
f4:c3:aa:51:79:4a:a0:6b:fe:a9:de:26:7e:ea:b4:
6c:c4:8b:11:69:15:e6:b0:33:c6:1b:e5:a6:e1:c1:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:FD:C2:D8:97:FD:A6:4E:4C:74:EC:81:EA:0C:21:D4:95:25:16
X509v3 Authority Key Identifier:
keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.192.0/24
Signature Algorithm: sha256WithRSAEncryption
34:84:e7:d4:04:0d:fc:98:0b:68:47:a0:17:27:fa:0d:4d:e8:
65:11:70:1e:a0:84:7c:79:9e:bc:55:f4:b4:0b:d9:b2:57:6b:
0e:e7:46:84:1c:4e:ab:f0:48:8e:32:50:97:b1:be:85:d3:c2:
40:7f:84:db:74:ba:7a:8f:9f:3a:f0:61:01:57:dc:41:3d:c5:
73:dc:f6:c2:bb:ed:01:41:a6:08:89:43:62:83:fe:e4:ff:22:
fb:8d:90:e4:41:54:da:d0:2e:71:5c:7d:44:dc:be:26:3f:a5:
07:2d:29:a2:61:88:23:0a:96:2c:2c:27:a4:1d:94:55:52:db:
c1:5d:a4:fa:0b:05:a4:a6:fe:2e:ba:42:d0:2f:61:9d:44:2a:
6b:b4:3a:ec:36:44:10:ad:e8:0c:c0:7e:e5:54:7c:36:b5:f1:
e3:58:df:b9:2e:34:f0:07:4d:3e:a6:9c:55:e9:a8:18:b2:cb:
e7:63:a8:94:de:4b:9d:c1:b4:e9:12:0b:04:e6:99:98:44:8a:
b8:79:8b:62:2f:7c:66:66:79:e2:e5:44:4b:d1:09:93:20:db:
44:34:7a:4d:97:6a:f4:57:da:93:54:70:d8:ae:90:9d:6f:a2:
ef:2e:a6:5b:cd:ad:7a:6c:f0:85:73:84:fe:d1:63:19:48:8b:
6d:ad:bc:e1
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUejhnilRfHAy8HDYHKsH5uwfkLAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0
NzQyNDRCMTAeFw0yNDExMjcwMjU2MzhaFw0yNTExMjYwMzAxMzhaMDMxMTAvBgNV
BAMTKENBQUZGREMyRDg5N0ZEQTY0RTRDNzRFQzgxRUEwQzIxRDQ5NTI1MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxOsUkFZilZBVTz9VA8ieoEK6
tq5CCoCuIgr/OzJLYSwvPPzEGMcjtGD4EkclyoZSgpRdwGydPuk+GJpaE3PBNmRq
/3NI1o+b/ZA3QQsOXoKWQ3f2WHRoLGAU85Mn2ZW6r8BVWg73EkJUgSAnFcTNFHJ3
tz+2B55n4BEx7qzsHLjoLwh+XcxJ4FV04lU0S0WgmOvnW4frTSJbb1k6miYrdyWl
hHuS5OtycEuaQj+JDg8DKMuIJJelaICTnXK0JXVxMb9Q6bEzv7KMoSCE/Vc2/i9s
hEohQeF4j2Ed4wcTvvTDqlF5SqBr/qneJn7qtGzEixFpFeawM8Yb5abhwcVPAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUyq/9wtiX/aZOTHTsgeoMIdSVJRYwHwYDVR0j
BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG
RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy
NDRCMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MjRmYTlhLWU1ZjMtNDI2NS05
ZTFkLTg0ZTQ1MzU5NjFkMC8wLzMxMzAzMzJlMzEzMDM1MmUzMTM5MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnacAwDQYJ
KoZIhvcNAQELBQADggEBADSE59QEDfyYC2hHoBcn+g1N6GURcB6ghHx5nrxV9LQL
2bJXaw7nRoQcTqvwSI4yUJexvoXTwkB/hNt0unqPnzrwYQFX3EE9xXPc9sK77QFB
pgiJQ2KD/uT/IvuNkORBVNrQLnFcfUTcviY/pQctKaJhiCMKliwsJ6QdlFVS28Fd
pPoLBaSm/i66QtAvYZ1EKmu0Ouw2RBCt6AzAfuVUfDa18eNY37kuNPAHTT6mnFXp
qBiyy+djqJTeS53BtOkSCwTmmZhEirh5i2IvfGZmeeLlREvRCZMg20Q0ek2XavRX
2pNUcNiukJ1vou8uplvNrXps8IVzhP7RYxlIi22tvOE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:26:58 2025 by rpki-client