Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa
File:                     3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa (raw, json)
Hash identifier:          jrxancrCe3raKWw22cy1gFg5CyBxhZmKj9oRfZ2gT9w=
Subject key identifier:   A1:8D:BC:14:59:24:69:7C:A0:94:5D:75:4A:62:98:98:43:B2:E0:44
Certificate issuer:       /CN=775CEB3E964E5310FFCC3F5866BB00B63DFF0732
Certificate serial:       6DA736AF402F06989756F811D2D70FA8A0E97546
Authority key identifier: 77:5C:EB:3E:96:4E:53:10:FF:CC:3F:58:66:BB:00:B6:3D:FF:07:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/775CEB3E964E5310FFCC3F5866BB00B63DFF0732.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa
Signing time:             Sat 28 Dec 2024 17:28:05 +0000
ROA not before:           Sat 28 Dec 2024 17:23:05 +0000
ROA not after:            Sat 27 Dec 2025 17:28:05 +0000
asID:                     149346
IP address blocks:        103.179.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a7:36:af:40:2f:06:98:97:56:f8:11:d2:d7:0f:a8:a0:e9:75:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775CEB3E964E5310FFCC3F5866BB00B63DFF0732
        Validity
            Not Before: Dec 28 17:23:05 2024 GMT
            Not After : Dec 27 17:28:05 2025 GMT
        Subject: CN=A18DBC145924697CA0945D754A62989843B2E044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:6f:bf:1f:e2:91:f5:ba:05:6e:58:33:79:
                    b6:aa:54:d7:90:f9:07:11:4c:bb:ae:88:30:f6:11:
                    29:be:d3:1d:cb:fe:8c:18:13:75:e5:68:be:e7:0d:
                    38:52:2c:25:af:fb:89:7c:31:89:90:eb:78:83:29:
                    1c:28:01:19:36:6e:82:cc:2e:0e:27:30:36:c5:58:
                    87:a0:67:64:75:be:4c:24:67:70:82:73:f9:9c:a7:
                    70:bf:be:70:00:a3:a0:f2:5b:51:de:16:a6:bc:45:
                    2c:06:08:a1:6f:fe:4d:a4:95:d6:f2:c6:35:22:c0:
                    17:02:6e:0a:9c:c9:71:2a:a8:bf:8c:43:4c:cd:57:
                    eb:1c:9d:81:aa:d7:a0:ec:68:63:f0:8d:d1:15:df:
                    1c:76:34:fc:9a:fc:c8:5c:d3:69:59:cb:95:d6:cb:
                    e6:f0:36:af:5d:45:30:76:cd:31:be:cc:2a:a7:ed:
                    be:94:b9:af:8c:be:42:64:76:a6:cc:b9:49:3f:f5:
                    f7:b0:9a:68:57:a2:65:75:35:a4:2e:27:3d:14:66:
                    df:dc:91:89:bd:96:ce:e9:fa:37:4a:f8:8e:c0:d6:
                    a5:bb:71:84:ce:01:e2:35:e1:d8:6c:90:ed:1d:88:
                    f8:06:1f:7c:75:1d:ad:39:84:b8:6d:5f:27:aa:d0:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:BC:14:59:24:69:7C:A0:94:5D:75:4A:62:98:98:43:B2:E0:44
            X509v3 Authority Key Identifier:
                keyid:77:5C:EB:3E:96:4E:53:10:FF:CC:3F:58:66:BB:00:B6:3D:FF:07:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/775CEB3E964E5310FFCC3F5866BB00B63DFF0732.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/775CEB3E964E5310FFCC3F5866BB00B63DFF0732.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:b6:56:52:0e:5c:ef:88:ca:3f:35:e9:7d:e1:b4:44:ed:e4:
         f7:1f:bf:00:3f:2f:28:5c:db:e4:bd:cc:04:a3:7a:50:2a:6b:
         c3:b9:88:96:eb:47:a3:28:c6:f5:97:22:ea:8f:f8:cc:55:95:
         75:05:6c:e0:6a:76:9b:8b:34:bc:d9:5e:95:08:a7:5f:c7:85:
         91:e3:ae:4d:22:89:e0:6f:dc:a5:0f:47:b4:e4:70:66:44:6c:
         c1:50:81:bd:31:95:11:14:98:8f:b3:04:99:27:02:15:e9:99:
         7e:80:70:2e:c0:b3:71:37:5b:92:6f:74:56:12:ac:66:3a:4d:
         9c:7a:3e:7b:0b:85:33:5d:5e:89:ab:3f:52:3c:a4:4f:a7:8b:
         35:c8:09:ea:d5:0e:a9:2f:8c:d0:ae:ce:a3:c3:b5:38:c3:62:
         49:b1:14:2e:91:1e:65:b9:56:47:1c:f7:78:81:38:5b:bf:46:
         95:8a:d8:d0:9c:dd:7e:4f:61:f0:54:a1:b7:ea:a8:06:37:da:
         75:37:33:ea:f7:27:8a:32:7c:1e:28:e8:a3:77:d7:6f:f4:b6:
         a5:2f:e5:00:ba:40:71:9a:b1:54:f6:aa:7e:a0:97:a2:f9:02:
         e6:e3:54:ec:27:5e:20:e9:a6:0d:87:5f:83:78:2f:c9:98:70:
         9f:60:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:18 2025 by rpki-client