Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa
File: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (raw, json)
Hash identifier: Qhaq6Vv40uX/zzLekFlWUrrGqgBIJAaA692wJ/q4O9w=
Subject key identifier: 75:BB:27:63:7E:C8:B4:E5:BA:B0:29:42:63:56:47:B0:60:04:0E:C7
Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057
Certificate serial: 375A5B408B3DA9FDE0FFB5E69B32A1AC3F9F236C
Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa
Signing time: Wed 01 May 2024 08:02:07 +0000
ROA not before: Wed 01 May 2024 07:57:07 +0000
ROA not after: Wed 30 Apr 2025 08:02:07 +0000
asID: 149889
IP address blocks: 103.187.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5a:5b:40:8b:3d:a9:fd:e0:ff:b5:e6:9b:32:a1:ac:3f:9f:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057
Validity
Not Before: May 1 07:57:07 2024 GMT
Not After : Apr 30 08:02:07 2025 GMT
Subject: CN=75BB27637EC8B4E5BAB02942635647B060040EC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:6a:64:a2:24:59:ae:7b:01:8a:ba:a5:cf:
bb:a7:8d:b2:47:d4:97:71:73:d9:b9:ee:a0:d9:c6:
17:d8:ed:3f:dc:f2:4b:c7:cd:2a:c9:b5:e2:d2:96:
73:6a:1c:e6:2f:98:12:e9:62:df:17:24:1a:c6:9c:
d0:ca:25:31:78:cb:ce:91:ef:82:ef:e9:24:52:96:
33:09:33:56:14:3a:84:6b:cf:ec:22:e8:b0:9c:ad:
37:ea:63:b3:a0:3c:75:af:93:0a:df:e7:85:29:32:
98:5e:f5:1a:66:8b:b6:3f:ec:fb:b9:6a:96:38:b6:
a7:35:a6:ce:cc:bc:40:05:35:3c:9b:cc:b7:0f:dc:
fb:74:e3:9c:f1:b7:86:e2:f5:fa:97:9c:93:55:eb:
46:32:86:10:30:4e:b6:1e:06:44:d4:f0:f9:dd:33:
9c:4a:9f:11:b2:56:45:df:e0:43:a8:72:06:93:27:
50:1e:6d:4a:6a:85:ff:ee:43:e9:59:dc:34:9d:f3:
a1:4c:89:ce:02:d3:f5:4c:52:09:39:43:27:ea:c7:
76:81:a1:6d:71:6c:8e:39:48:20:bb:b4:b2:d0:4c:
69:53:a2:24:d3:6a:7d:ff:70:b0:9c:22:02:ee:d7:
47:29:86:c5:c2:3e:18:75:a8:2a:06:82:47:c2:73:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BB:27:63:7E:C8:B4:E5:BA:B0:29:42:63:56:47:B0:60:04:0E:C7
X509v3 Authority Key Identifier:
keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:88:79:4b:5a:4f:e1:74:b6:7b:30:68:ca:eb:df:46:f9:7b:
b2:59:ca:12:e2:bc:03:b3:44:49:88:c9:2f:a0:b3:e6:33:23:
5b:93:17:11:be:a1:a0:f9:28:39:29:99:ee:ba:71:b6:93:98:
1b:ae:c3:88:83:21:72:08:40:71:b0:f1:bd:37:6a:ec:b4:c6:
d0:8d:9d:1d:26:33:5c:3d:89:3c:b7:41:2f:1c:bd:97:38:e9:
4a:09:e2:42:c1:c8:cc:ca:bb:19:0f:cb:fa:b3:e2:69:50:64:
c0:22:5f:f0:6c:06:91:6a:42:b9:15:d2:b1:53:6a:c5:0c:51:
a1:61:92:6d:c5:c5:1c:d9:ff:ec:7c:8c:81:80:0c:de:20:ab:
f0:40:e4:ea:2c:87:34:ff:71:1c:5b:51:e2:06:58:56:74:75:
12:75:0e:bf:3b:5f:ed:e3:65:6c:04:35:00:13:14:c5:06:1c:
ae:a0:02:a2:49:0f:12:39:c5:78:ec:dc:a3:89:e2:9c:41:c6:
fd:5b:58:fa:de:be:01:71:92:7e:4d:22:9f:3e:10:fc:31:52:
f2:15:9a:da:96:1a:28:ed:17:54:8d:16:9e:f8:b8:cf:d6:56:
48:cb:cb:b5:e1:b7:be:f0:01:f7:81:51:c6:af:cd:0b:d4:f5:
77:27:38:34
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUN1pbQIs9qf3g/7XmmzKhrD+fI2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz
MDEwNTA1NzAeFw0yNDA1MDEwNzU3MDdaFw0yNTA0MzAwODAyMDdaMDMxMTAvBgNV
BAMTKDc1QkIyNzYzN0VDOEI0RTVCQUIwMjk0MjYzNTY0N0IwNjAwNDBFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkmpkoiRZrnsBirqlz7unjbJH
1Jdxc9m57qDZxhfY7T/c8kvHzSrJteLSlnNqHOYvmBLpYt8XJBrGnNDKJTF4y86R
74Lv6SRSljMJM1YUOoRrz+wi6LCcrTfqY7OgPHWvkwrf54UpMphe9Rpmi7Y/7Pu5
apY4tqc1ps7MvEAFNTybzLcP3Pt045zxt4bi9fqXnJNV60YyhhAwTrYeBkTU8Pnd
M5xKnxGyVkXf4EOocgaTJ1AebUpqhf/uQ+lZ3DSd86FMic4C0/VMUgk5Qyfqx3aB
oW1xbI45SCC7tLLQTGlToiTTan3/cLCcIgLu10cphsXCPhh1qCoGgkfCcyShAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUdbsnY37ItOW6sClCY1ZHsGAEDscwHwYDVR0j
BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE
MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw
NTA1Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4ZjNiMzdkLWZlNGQtNDM2ZC1h
OTNiLWUxZjZmY2M5ZmM0ZC8wLzMxMzAzMzJlMzEzODM3MmUzOTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzgzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7taMA0GCSqG
SIb3DQEBCwUAA4IBAQBuiHlLWk/hdLZ7MGjK699G+XuyWcoS4rwDs0RJiMkvoLPm
MyNbkxcRvqGg+Sg5KZnuunG2k5gbrsOIgyFyCEBxsPG9N2rstMbQjZ0dJjNcPYk8
t0EvHL2XOOlKCeJCwcjMyrsZD8v6s+JpUGTAIl/wbAaRakK5FdKxU2rFDFGhYZJt
xcUc2f/sfIyBgAzeIKvwQOTqLIc0/3EcW1HiBlhWdHUSdQ6/O1/t42VsBDUAExTF
BhyuoAKiSQ8SOcV47NyjieKcQcb9W1j63r4BcZJ+TSKfPhD8MVLyFZralhoo7RdU
jRae+LjP1lZIy8u14be+8AH3gVHGr80L1PV3Jzg0
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:53 2025 by rpki-client