Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e392e302f32342d3234203d3e203338343936.roa
File: 3131372e3130332e392e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: Jwu/FGB+FBglyxpzIcvu4d+iTtKimzNkwgADaACpz0E=
Subject key identifier: 99:3D:42:0B:C7:07:59:12:40:5D:2A:8A:39:33:5B:2D:34:1C:E4:3A
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 70FF0D635106E1853A8FCCAEA27589F569530D67
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e392e302f32342d3234203d3e203338343936.roa
Signing time: Wed 19 Mar 2025 05:02:22 +0000
ROA not before: Wed 19 Mar 2025 04:57:22 +0000
ROA not after: Wed 18 Mar 2026 05:02:22 +0000
asID: 38496
IP address blocks: 117.103.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ff:0d:63:51:06:e1:85:3a:8f:cc:ae:a2:75:89:f5:69:53:0d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Mar 19 04:57:22 2025 GMT
Not After : Mar 18 05:02:22 2026 GMT
Subject: CN=993D420BC7075912405D2A8A39335B2D341CE43A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:7d:8d:5d:77:0e:b0:c3:57:64:44:ce:4d:
de:24:63:0a:12:39:53:32:56:5e:42:ea:7f:b8:51:
d7:21:32:54:29:25:eb:15:4f:7f:13:66:0e:b9:76:
57:d5:da:e0:86:51:46:a9:25:7b:21:79:6b:ee:5b:
dc:53:62:ac:08:54:fe:79:b7:3f:7d:71:12:fa:a5:
66:0e:1c:16:f2:f7:fd:7a:eb:2f:d8:8a:11:94:e8:
00:5a:15:31:26:26:d2:ae:6b:03:92:90:2f:92:43:
ce:b3:ac:7d:8f:1d:41:4e:c9:16:02:00:c7:67:61:
74:2f:27:48:30:4c:cf:0e:55:e3:83:95:73:2d:ec:
a7:e5:7f:90:e2:ce:37:0e:5e:6d:ab:eb:6d:9c:0e:
a5:4e:ca:c4:a8:34:70:c1:2b:99:ac:c9:3c:7c:42:
13:b8:51:d3:42:84:04:99:ff:07:e3:ff:f7:60:8b:
75:b3:cb:bc:40:f5:47:c0:13:34:7b:79:77:6f:ed:
01:83:27:ec:1a:96:21:23:ca:f5:7f:26:78:2c:56:
78:1d:fb:3f:91:cd:78:25:09:14:f8:0e:82:72:2a:
45:66:a8:97:c9:d7:5e:be:2b:37:cf:43:50:a3:42:
47:6a:25:91:30:0b:a9:e1:43:eb:67:62:2c:cc:55:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3D:42:0B:C7:07:59:12:40:5D:2A:8A:39:33:5B:2D:34:1C:E4:3A
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e392e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.103.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c4:7e:d7:8e:ad:65:00:aa:f6:b0:aa:9c:56:5d:63:70:de:
97:68:0b:f0:1e:e3:3f:58:5e:8e:40:33:49:bd:c3:2f:f7:de:
89:da:f7:ad:70:f6:7e:19:8f:77:9e:84:f4:4f:20:0d:7c:fb:
2e:0a:a0:0f:b7:4d:5d:2d:62:57:c9:b2:99:b2:93:a4:b9:83:
fa:20:36:a3:80:1d:4d:01:50:e4:aa:cf:c4:ca:32:a9:3f:d1:
b2:53:31:50:7f:fe:88:9c:c2:19:94:47:d8:59:58:d9:91:ab:
d0:01:75:01:78:13:36:0e:79:0a:87:2c:cc:11:9f:a9:4c:66:
17:1a:61:e2:09:a8:63:75:63:43:f3:73:f3:8d:1e:67:15:45:
cf:8a:ea:9d:07:a8:bc:82:b4:a5:cb:b0:44:ef:63:ab:66:cc:
31:bc:c3:5c:ac:21:1a:1e:7b:0f:8f:b4:d1:bc:9a:27:80:26:
ae:7b:4f:7a:f0:e5:66:98:a5:77:a7:c5:74:f8:24:f9:06:b8:
06:93:c2:9a:d4:26:65:40:8d:a1:7b:16:c6:50:14:56:88:a3:
59:d4:81:dc:a0:72:1a:4a:31:4e:d5:93:04:02:86:89:a4:2b:
79:14:83:cf:62:dd:4c:2a:f6:e4:94:96:95:70:f4:80:a0:5d:
a8:ff:c3:6a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUcP8NY1EG4YU6j8yuonWJ9WlTDWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNTAzMTkwNDU3MjJaFw0yNjAzMTgwNTAyMjJaMDMxMTAvBgNV
BAMTKDk5M0Q0MjBCQzcwNzU5MTI0MDVEMkE4QTM5MzM1QjJEMzQxQ0U0M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbvH2NXXcOsMNXZETOTd4kYwoS
OVMyVl5C6n+4UdchMlQpJesVT38TZg65dlfV2uCGUUapJXsheWvuW9xTYqwIVP55
tz99cRL6pWYOHBby9/166y/YihGU6ABaFTEmJtKuawOSkC+SQ86zrH2PHUFOyRYC
AMdnYXQvJ0gwTM8OVeODlXMt7Kflf5DizjcOXm2r622cDqVOysSoNHDBK5msyTx8
QhO4UdNChASZ/wfj//dgi3Wzy7xA9UfAEzR7eXdv7QGDJ+waliEjyvV/JngsVngd
+z+RzXglCRT4DoJyKkVmqJfJ116+KzfPQ1CjQkdqJZEwC6nhQ+tnYizMVeXnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUmT1CC8cHWRJAXSqKOTNbLTQc5DowHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNzJlMzEzMDMzMmUzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB1ZwkwDQYJKoZIhvcN
AQELBQADggEBACzEfteOrWUAqvawqpxWXWNw3pdoC/Ae4z9YXo5AM0m9wy/33ona
961w9n4Zj3eehPRPIA18+y4KoA+3TV0tYlfJspmyk6S5g/ogNqOAHU0BUOSqz8TK
Mqk/0bJTMVB//oicwhmUR9hZWNmRq9ABdQF4EzYOeQqHLMwRn6lMZhcaYeIJqGN1
Y0Pzc/ONHmcVRc+K6p0HqLyCtKXLsETvY6tmzDG8w1ysIRoeew+PtNG8mieAJq57
T3rw5WaYpXenxXT4JPkGuAaTwprUJmVAjaF7FsZQFFaIo1nUgdygchpKMU7VkwQC
homkK3kUg89i3Uwq9uSUlpVw9ICgXaj/w2o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:14 2025 by rpki-client