Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa
File: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (raw, json)
Hash identifier: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=
Subject key identifier: 18:9D:D6:7A:44:59:E2:82:43:B6:38:9E:80:84:FC:44:D3:F4:75:D5
Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554
Certificate serial: 6448849FA2D5235250AA0B592CD31C50D6F76280
Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa
Signing time: Wed 12 Feb 2025 08:02:24 +0000
ROA not before: Wed 12 Feb 2025 07:57:24 +0000
ROA not after: Wed 11 Feb 2026 08:02:24 +0000
asID: 150955
IP address blocks: 103.79.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:48:84:9f:a2:d5:23:52:50:aa:0b:59:2c:d3:1c:50:d6:f7:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554
Validity
Not Before: Feb 12 07:57:24 2025 GMT
Not After : Feb 11 08:02:24 2026 GMT
Subject: CN=189DD67A4459E28243B6389E8084FC44D3F475D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:48:2d:b3:1c:19:18:d9:0c:7d:04:b8:e7:
84:af:58:a1:d1:86:84:a8:5e:2a:54:4a:e5:10:ca:
e8:4c:dd:d8:5e:65:35:2d:3f:66:54:2b:03:4c:03:
e2:2f:54:31:3f:eb:9d:54:2a:2f:0f:32:92:80:b8:
63:31:73:18:2f:b9:f8:c5:f9:27:eb:3d:66:66:3b:
4b:96:95:b1:68:3b:de:5c:b3:15:12:0e:96:2f:ca:
39:4f:a0:33:86:95:4b:a6:5b:93:9d:15:53:d1:0b:
2a:51:19:56:6d:c8:04:27:00:6d:3f:8e:90:12:4d:
bc:2b:c6:15:92:01:12:b7:d0:6f:d3:47:50:0a:ac:
a6:26:74:57:97:6a:14:f9:2f:cc:0f:c0:30:83:47:
b9:26:c0:d3:e2:9a:07:93:a9:ae:a5:a0:28:9b:82:
63:7f:ff:ad:75:39:6b:f3:b5:5a:27:4b:ad:c0:db:
57:26:3d:10:d8:40:be:d8:4e:c0:fa:5e:cb:e5:2f:
17:14:33:fa:48:d8:c0:ff:1d:86:57:55:0e:56:65:
e4:98:f7:3b:09:5d:26:cf:6c:72:60:f7:70:95:3c:
9e:07:15:b8:b6:59:9e:a2:f6:d8:d9:dc:ea:9a:a5:
f3:d2:b4:1b:a4:f8:59:2a:ed:cc:88:24:d2:b2:7b:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9D:D6:7A:44:59:E2:82:43:B6:38:9E:80:84:FC:44:D3:F4:75:D5
X509v3 Authority Key Identifier:
keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ae:db:b7:59:7e:d6:3e:26:10:0f:b5:43:3b:d7:78:f5:fd:
35:1f:6d:62:89:a2:bc:d8:7e:c1:8e:31:ef:55:ce:01:b6:99:
db:09:e2:d8:94:6c:4a:7f:4f:ce:5a:67:33:44:d8:4b:54:32:
a4:69:94:b4:b0:73:c9:47:0f:5d:12:94:ce:b2:21:fe:31:20:
a5:25:75:31:1d:d7:25:30:19:63:f4:6d:08:93:e5:3a:12:c8:
f6:ce:10:1d:6f:47:85:65:d2:90:60:16:ef:d9:00:da:35:f3:
f5:60:b6:4f:aa:7f:7c:06:b6:da:a6:74:5e:45:9d:ba:4f:ba:
33:8c:00:af:f0:ff:3c:45:89:5d:8d:da:5e:b6:d1:3c:90:75:
cc:c8:ec:f5:af:af:83:bb:23:28:50:74:d4:8c:32:fd:48:3a:
71:da:b3:c3:41:0e:74:9d:51:e9:ca:38:ab:61:0a:ab:dc:4f:
f7:30:ac:0b:83:d3:1f:95:c8:7e:2b:ef:4f:db:62:2a:47:3b:
df:97:0d:19:d9:ae:91:58:df:02:9a:ae:ce:ec:16:54:5c:13:
9d:6a:55:55:28:e7:8a:16:2a:cf:38:5b:20:52:82:57:b2:71:
b0:62:ec:53:91:a3:4f:37:31:56:0c:27:36:14:a1:a6:4d:ae:
63:e4:64:b6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZEiEn6LVI1JQqgtZLNMcUNb3YoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw
NDY0NTU1NDAeFw0yNTAyMTIwNzU3MjRaFw0yNjAyMTEwODAyMjRaMDMxMTAvBgNV
BAMTKDE4OURENjdBNDQ1OUUyODI0M0I2Mzg5RTgwODRGQzQ0RDNGNDc1RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiEgtsxwZGNkMfQS454SvWKHR
hoSoXipUSuUQyuhM3dheZTUtP2ZUKwNMA+IvVDE/651UKi8PMpKAuGMxcxgvufjF
+SfrPWZmO0uWlbFoO95csxUSDpYvyjlPoDOGlUumW5OdFVPRCypRGVZtyAQnAG0/
jpASTbwrxhWSARK30G/TR1AKrKYmdFeXahT5L8wPwDCDR7kmwNPimgeTqa6loCib
gmN//611OWvztVonS63A21cmPRDYQL7YTsD6XsvlLxcUM/pI2MD/HYZXVQ5WZeSY
9zsJXSbPbHJg93CVPJ4HFbi2WZ6i9tjZ3OqapfPStBuk+Fkq7cyIJNKyewMZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUGJ3WekRZ4oJDtjiegIT8RNP0ddUwHwYDVR0j
BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz
NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0
NTU1NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiZmYxYjNmLTExOTAtNDExOS1i
YmM2LTE0MTdkZjhhYTI1OC8wLzMxMzAzMzJlMzczOTJlMzIzMzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0/sMA0GCSqG
SIb3DQEBCwUAA4IBAQChrtu3WX7WPiYQD7VDO9d49f01H21iiaK82H7BjjHvVc4B
tpnbCeLYlGxKf0/OWmczRNhLVDKkaZS0sHPJRw9dEpTOsiH+MSClJXUxHdclMBlj
9G0Ik+U6Esj2zhAdb0eFZdKQYBbv2QDaNfP1YLZPqn98BrbapnReRZ26T7ozjACv
8P88RYldjdpettE8kHXMyOz1r6+DuyMoUHTUjDL9SDpx2rPDQQ50nVHpyjirYQqr
3E/3MKwLg9Mflch+K+9P22IqRzvflw0Z2a6RWN8Cmq7O7BZUXBOdalVVKOeKFirP
OFsgUoJXsnGwYuxTkaNPNzFWDCc2FKGmTa5j5GS2
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:52 2025 by rpki-client