Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa
File: 3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa (raw, json)
Hash identifier: HvZ4UYj4GoZLl8NmzF+1Ghc67KVbsVnEc2wguYPDAT4=
Subject key identifier: 05:33:BE:8F:52:40:7E:C8:72:85:9B:F6:93:A1:40:B6:B8:35:79:A8
Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Certificate serial: 6FEF0FB501D3D7696CBDE6F122B998887AB9A596
Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa
Signing time: Sat 01 Feb 2025 14:00:01 +0000
ROA not before: Sat 01 Feb 2025 13:55:01 +0000
ROA not after: Sat 31 Jan 2026 14:00:01 +0000
asID: 139417
IP address blocks: 103.138.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ef:0f:b5:01:d3:d7:69:6c:bd:e6:f1:22:b9:98:88:7a:b9:a5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Validity
Not Before: Feb 1 13:55:01 2025 GMT
Not After : Jan 31 14:00:01 2026 GMT
Subject: CN=0533BE8F52407EC872859BF693A140B6B83579A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4f:c0:34:6d:35:63:29:d0:ba:34:5d:8a:d6:
bb:c2:17:ec:d5:36:7d:85:ce:ef:5f:f9:b2:b0:45:
bc:d4:1e:ab:cc:37:04:68:b8:bd:17:0d:fa:4b:a8:
72:2a:7f:31:8a:54:69:db:f6:1b:74:62:2d:20:34:
90:ae:50:ad:6a:aa:9d:e3:a3:81:55:16:33:99:77:
b0:0a:19:dd:e3:d6:e7:38:41:41:3c:c6:26:3b:7c:
5a:f6:03:cc:ba:2b:2f:3c:9b:6e:3a:28:4f:e9:b7:
40:08:fc:a9:15:b0:9b:c6:8d:ce:b4:43:a0:e0:c2:
03:87:13:8b:32:bf:ae:9f:b3:b0:d2:60:64:fb:10:
71:44:ac:78:10:54:b7:f0:21:e5:38:1b:94:59:0d:
97:ac:52:94:9d:b5:f6:da:85:94:dd:f9:6c:cc:a9:
f2:17:38:0f:33:65:a3:3d:9a:c6:2a:79:a1:55:43:
e8:bf:8e:5a:ae:b7:c2:4e:a9:34:70:87:e6:1e:48:
f4:10:6e:52:21:eb:2b:bd:99:08:2b:f7:07:96:04:
1c:6d:9b:21:ae:f6:05:03:24:c3:df:9f:23:3c:d5:
fb:20:5d:7c:0b:46:61:f2:23:95:e4:46:76:96:7d:
06:dc:98:fe:63:8c:eb:3f:64:65:e1:ae:dd:7a:d6:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:33:BE:8F:52:40:7E:C8:72:85:9B:F6:93:A1:40:B6:B8:35:79:A8
X509v3 Authority Key Identifier:
keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.117.0/24
Signature Algorithm: sha256WithRSAEncryption
65:59:ab:1e:9b:b8:12:30:47:07:f8:4d:1b:d6:c3:cb:47:50:
38:c7:c4:ab:8c:8d:1b:3e:58:88:c2:66:6f:86:10:4e:5d:22:
58:66:9e:b8:f6:85:da:3e:ad:2b:1b:03:60:0a:08:d3:5f:05:
e0:2a:3e:26:c5:80:cc:31:f2:98:47:c9:e7:e9:74:51:2f:1d:
77:6a:89:d4:77:41:e3:bb:0c:a0:16:ed:c8:18:f6:b8:58:fe:
31:72:65:a3:01:dd:13:21:8f:3c:05:3c:a7:38:6c:f4:fa:20:
4d:5b:67:38:af:79:b2:ed:7b:1e:d8:6d:f5:a7:04:74:05:54:
b4:90:85:63:96:8d:74:b3:51:e7:a2:15:80:70:a6:e4:42:79:
9f:b3:ee:e5:14:7d:fa:91:a7:8e:6a:6c:93:1e:68:e4:cc:cb:
70:ae:ce:84:2a:12:b8:e1:c7:b4:77:ba:24:c9:37:c2:c3:d7:
13:4e:af:55:1b:6b:d8:d0:da:ba:fb:14:4b:1f:66:46:da:9b:
75:a2:0c:27:c5:83:7e:5c:8c:81:e0:2d:ec:28:10:35:d1:be:
ba:42:5b:c1:60:8f:1c:50:42:8d:e2:82:c9:a1:a6:97:42:eb:
8b:15:37:94:c1:03:de:af:64:51:ea:41:7e:0e:29:f3:30:2e:
ed:af:46:36
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUb+8PtQHT12lsvebxIrmYiHq5pZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3
MkRBRURENjAeFw0yNTAyMDExMzU1MDFaFw0yNjAxMzExNDAwMDFaMDMxMTAvBgNV
BAMTKDA1MzNCRThGNTI0MDdFQzg3Mjg1OUJGNjkzQTE0MEI2QjgzNTc5QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjT8A0bTVjKdC6NF2K1rvCF+zV
Nn2Fzu9f+bKwRbzUHqvMNwRouL0XDfpLqHIqfzGKVGnb9ht0Yi0gNJCuUK1qqp3j
o4FVFjOZd7AKGd3j1uc4QUE8xiY7fFr2A8y6Ky88m246KE/pt0AI/KkVsJvGjc60
Q6DgwgOHE4syv66fs7DSYGT7EHFErHgQVLfwIeU4G5RZDZesUpSdtfbahZTd+WzM
qfIXOA8zZaM9msYqeaFVQ+i/jlqut8JOqTRwh+YeSPQQblIh6yu9mQgr9weWBBxt
myGu9gUDJMPfnyM81fsgXXwLRmHyI5XkRnaWfQbcmP5jjOs/ZGXhrt161rH9AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUBTO+j1JAfshyhZv2k6FAtrg1eagwHwYDVR0j
BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez
RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB
RURENi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i
NDVkLTczYzk3MmYxMDExNi8wLzMxMzAzMzJlMzEzMzM4MmUzMTMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMxMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABninUwDQYJ
KoZIhvcNAQELBQADggEBAGVZqx6buBIwRwf4TRvWw8tHUDjHxKuMjRs+WIjCZm+G
EE5dIlhmnrj2hdo+rSsbA2AKCNNfBeAqPibFgMwx8phHyefpdFEvHXdqidR3QeO7
DKAW7cgY9rhY/jFyZaMB3RMhjzwFPKc4bPT6IE1bZzivebLtex7YbfWnBHQFVLSQ
hWOWjXSzUeeiFYBwpuRCeZ+z7uUUffqRp45qbJMeaOTMy3CuzoQqErjhx7R3uiTJ
N8LD1xNOr1Uba9jQ2rr7FEsfZkbam3WiDCfFg35cjIHgLewoEDXRvrpCW8FgjxxQ
Qo3igsmhppdC64sVN5TBA96vZFHqQX4OKfMwLu2vRjY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:49 2025 by rpki-client