Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa
File: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (raw, json)
Hash identifier: WQermmKrjmkRkTYr0aG0+hIvHneRLS+rGSH7EGxbhwM=
Subject key identifier: AE:95:EE:BC:AF:F1:18:F2:5F:F8:C1:87:BF:82:5D:32:F9:8F:C3:80
Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4
Certificate serial: 311319C81F332B66E96E50B585C34CA08417D9AF
Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa
Signing time: Thu 10 Oct 2024 14:00:00 +0000
ROA not before: Thu 10 Oct 2024 13:55:00 +0000
ROA not after: Thu 09 Oct 2025 14:00:00 +0000
asID: 149752
IP address blocks: 103.189.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:13:19:c8:1f:33:2b:66:e9:6e:50:b5:85:c3:4c:a0:84:17:d9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4
Validity
Not Before: Oct 10 13:55:00 2024 GMT
Not After : Oct 9 14:00:00 2025 GMT
Subject: CN=AE95EEBCAFF118F25FF8C187BF825D32F98FC380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:cf:08:d8:3e:9f:d6:03:78:46:2f:72:1a:
39:6f:8b:ba:c8:16:f8:f2:1d:c9:eb:db:87:8b:b0:
e2:29:f9:1e:3e:98:fb:8a:65:81:d3:73:b1:c1:3a:
1e:65:9a:47:dd:e8:91:bb:95:4a:af:71:b5:27:20:
fd:09:52:b2:80:2b:14:8b:fe:28:59:a5:21:9a:3e:
ce:18:69:82:10:6d:a4:80:43:50:e3:86:e1:c9:84:
38:39:a0:65:24:15:32:33:e2:79:bf:e8:6c:1b:89:
e4:35:22:a9:64:bf:c4:82:9a:1a:04:56:96:6e:ed:
cf:f4:f7:c9:9e:4d:f3:78:31:fa:f9:49:43:c7:d9:
3c:83:c4:e9:4b:1e:e3:04:09:1d:03:e9:b2:86:b0:
cc:f9:c8:b2:3d:71:b3:7e:d0:ce:dc:ef:b4:e0:07:
c1:e1:7c:fd:8a:f5:b0:fe:aa:51:b0:8c:6e:c0:62:
f8:61:57:23:25:e1:59:d0:d0:01:29:98:62:05:fc:
fd:e9:ee:6e:d3:49:89:0a:c1:e3:0e:c9:5b:a9:b4:
74:28:bc:0d:46:89:0c:8f:a0:69:dc:df:ad:5e:a7:
9d:69:65:d9:8a:61:e4:23:d1:c5:15:c3:a9:14:e6:
fd:4c:20:70:c3:05:1d:9e:4d:e6:62:0c:d2:ef:09:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:EE:BC:AF:F1:18:F2:5F:F8:C1:87:BF:82:5D:32:F9:8F:C3:80
X509v3 Authority Key Identifier:
keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.139.0/24
Signature Algorithm: sha256WithRSAEncryption
60:93:ae:7f:c4:44:f2:38:6a:78:5f:f3:d1:48:99:3f:cb:a4:
43:5a:a5:38:27:50:30:68:72:2b:70:08:17:79:9e:a7:f4:8e:
8f:4b:bc:bf:76:7b:53:8d:58:a6:e2:9f:10:17:33:09:2c:84:
67:9d:5b:65:e2:a3:86:c9:9e:c2:fb:5c:c3:c9:8d:8e:4b:c7:
53:5a:be:e0:98:92:7d:33:2f:38:93:df:c9:c2:28:a3:e8:88:
d9:18:29:c0:da:a1:4a:af:fc:30:5b:02:b6:d4:a3:ce:9c:ce:
11:b4:6c:50:e9:11:38:73:54:0a:1a:94:d9:5c:63:44:1a:b2:
8a:f3:8f:fe:cf:20:0d:46:b5:1c:53:95:80:04:0c:bf:d9:27:
73:c1:a3:4e:61:e5:ce:10:32:4c:4d:18:b7:05:5c:8f:30:ec:
94:7f:43:d4:fc:db:9c:60:62:5c:bc:b7:99:e6:16:66:8d:b5:
ad:a0:d7:b4:80:30:18:1e:4f:90:8b:a8:c3:14:53:69:03:b4:
b7:2a:4a:4c:5f:51:38:f6:31:3d:fd:e2:14:ac:af:93:12:a8:
0c:18:fb:3c:b0:f0:39:de:e1:08:3c:ec:4a:82:73:51:62:f6:
4c:2e:12:cf:e4:86:c6:73:59:7b:6a:54:7e:14:fc:c2:3e:ca:
91:e8:04:13
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMRMZyB8zK2bpblC1hcNMoIQX2a8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1
N0E4MzVGNDAeFw0yNDEwMTAxMzU1MDBaFw0yNTEwMDkxNDAwMDBaMDMxMTAvBgNV
BAMTKEFFOTVFRUJDQUZGMTE4RjI1RkY4QzE4N0JGODI1RDMyRjk4RkMzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKs8I2D6f1gN4Ri9yGjlvi7rI
FvjyHcnr24eLsOIp+R4+mPuKZYHTc7HBOh5lmkfd6JG7lUqvcbUnIP0JUrKAKxSL
/ihZpSGaPs4YaYIQbaSAQ1DjhuHJhDg5oGUkFTIz4nm/6GwbieQ1Iqlkv8SCmhoE
VpZu7c/098meTfN4Mfr5SUPH2TyDxOlLHuMECR0D6bKGsMz5yLI9cbN+0M7c77Tg
B8HhfP2K9bD+qlGwjG7AYvhhVyMl4VnQ0AEpmGIF/P3p7m7TSYkKweMOyVuptHQo
vA1GiQyPoGnc361ep51pZdmKYeQj0cUVw6kU5v1MIHDDBR2eTeZiDNLvCT9LAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUrpXuvK/xGPJf+MGHv4JdMvmPw4AwHwYDVR0j
BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0
NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4
MzVGNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNmI1OTdjLTk1NDctNGMxZS1h
Yzg3LTNhNDM0YTMwMGE2Ny8wLzMxMzAzMzJlMzEzODM5MmUzMTMzMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvYswDQYJ
KoZIhvcNAQELBQADggEBAGCTrn/ERPI4anhf89FImT/LpENapTgnUDBocitwCBd5
nqf0jo9LvL92e1ONWKbinxAXMwkshGedW2Xio4bJnsL7XMPJjY5Lx1NavuCYkn0z
LziT38nCKKPoiNkYKcDaoUqv/DBbArbUo86czhG0bFDpEThzVAoalNlcY0Qasorz
j/7PIA1GtRxTlYAEDL/ZJ3PBo05h5c4QMkxNGLcFXI8w7JR/Q9T825xgYly8t5nm
FmaNta2g17SAMBgeT5CLqMMUU2kDtLcqSkxfUTj2MT394hSsr5MSqAwY+zyw8Dne
4Qg87EqCc1Fi9kwuEs/khsZzWXtqVH4U/MI+ypHoBBM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:12 2025 by rpki-client