Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313531353339.roa
File: 3130332e3233392e32322e302f32342d3234203d3e20313531353339.roa (raw, json)
Hash identifier: Bjc1vkthHbDR26mBjAwO6eaTrNsmFfcssoUm7h8okEo=
Subject key identifier: DB:26:56:21:DB:E7:64:09:E3:03:7E:70:A9:64:85:B4:76:B5:51:B1
Certificate issuer: /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
Certificate serial: 2F9447F4FBBABA8AA278E61BE1B7CD97A7DDC4CB
Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313531353339.roa
Signing time: Sat 05 Oct 2024 03:00:02 +0000
ROA not before: Sat 05 Oct 2024 02:55:02 +0000
ROA not after: Sat 04 Oct 2025 03:00:02 +0000
asID: 151539
IP address blocks: 103.239.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:94:47:f4:fb:ba:ba:8a:a2:78:e6:1b:e1:b7:cd:97:a7:dd:c4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
Validity
Not Before: Oct 5 02:55:02 2024 GMT
Not After : Oct 4 03:00:02 2025 GMT
Subject: CN=DB265621DBE76409E3037E70A96485B476B551B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:ea:27:d4:7e:7e:74:58:0c:87:eb:e0:ae:
1c:17:1f:80:65:dc:cc:fe:21:40:c1:f9:83:39:0d:
36:8c:10:0b:8e:40:71:e8:2b:4e:91:80:6f:6c:81:
c6:48:eb:11:65:8a:14:d4:5c:37:2c:3b:01:6e:a4:
7e:7d:20:6b:2e:af:70:74:8a:d3:98:b2:7b:b7:51:
50:3f:83:f7:a1:04:b1:8a:9e:eb:7a:52:84:c9:72:
56:56:99:fb:45:ba:5e:63:06:cc:10:b1:86:5f:0e:
90:99:de:fd:4f:fb:e1:0a:bf:82:21:13:bf:3e:f1:
9c:f3:0c:1f:c0:ce:ad:47:2e:60:5c:7a:f5:44:a9:
66:56:2c:c1:88:fe:5c:7c:df:69:95:f6:da:f4:8b:
e0:ee:d0:57:67:30:c3:07:7b:e7:62:74:96:0e:b7:
93:f3:da:15:26:d5:bf:3e:1f:9f:ef:2d:9c:d2:a5:
3e:8c:2d:31:63:73:5c:22:65:26:8a:22:38:c8:1f:
b7:c1:7f:be:51:a6:a0:06:5d:27:ed:a3:8e:45:db:
7d:4e:81:d7:3f:36:9d:94:7f:7c:96:ca:59:53:a7:
be:6b:0c:d4:f2:3e:39:d8:f1:46:1e:ad:25:08:5f:
96:75:cd:0d:3d:73:d0:43:f8:4c:78:f5:51:79:e9:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:26:56:21:DB:E7:64:09:E3:03:7E:70:A9:64:85:B4:76:B5:51:B1
X509v3 Authority Key Identifier:
keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313531353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.22.0/24
Signature Algorithm: sha256WithRSAEncryption
07:39:90:c0:d0:de:e6:c4:8d:02:26:c1:2f:f3:bf:25:29:73:
4c:30:54:9f:a8:4f:a9:70:35:45:24:bc:08:1c:15:56:1b:c0:
27:fa:92:a8:42:8a:96:2c:f6:37:02:28:be:14:fe:0c:25:56:
43:e6:72:53:f2:52:3a:e4:f3:6c:c7:d6:6a:c5:bd:d6:d6:83:
e4:5e:96:c5:00:1c:69:fe:cd:27:1f:ba:33:70:b5:fc:d9:40:
ce:da:39:21:c5:4a:f5:ca:8c:9c:19:17:c8:31:56:bc:73:3b:
4c:b5:74:3b:a6:f1:48:ad:42:b5:c9:e7:28:f7:cc:fb:0a:69:
ee:0a:f6:9f:00:03:59:2b:b0:e7:cb:2a:9e:d6:13:0f:96:f3:
af:5a:27:5d:91:1b:4a:f1:f5:f7:59:24:d6:36:8b:b9:58:5b:
78:bf:7c:fb:10:b7:2b:c5:02:5a:74:0a:09:21:6e:63:0b:b4:
95:a1:e5:d2:88:c0:29:fa:e5:55:30:ab:e8:8a:cb:53:45:ee:
35:85:a1:68:38:fe:65:8b:0f:6c:f6:cb:b6:91:d9:50:e2:c5:
70:a0:d4:3d:af:9f:73:d4:bd:22:48:32:cf:d3:70:0e:81:57:
72:ee:46:b5:b7:4e:59:c0:02:6a:67:8e:de:05:d2:80:56:6b:
8d:63:6c:30
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUL5RH9Pu6uoqieOYb4bfNl6fdxMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZG
NDJBOTQ0QjAeFw0yNDEwMDUwMjU1MDJaFw0yNTEwMDQwMzAwMDJaMDMxMTAvBgNV
BAMTKERCMjY1NjIxREJFNzY0MDlFMzAzN0U3MEE5NjQ4NUI0NzZCNTUxQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtOon1H5+dFgMh+vgrhwXH4Bl
3Mz+IUDB+YM5DTaMEAuOQHHoK06RgG9sgcZI6xFlihTUXDcsOwFupH59IGsur3B0
itOYsnu3UVA/g/ehBLGKnut6UoTJclZWmftFul5jBswQsYZfDpCZ3v1P++EKv4Ih
E78+8ZzzDB/Azq1HLmBcevVEqWZWLMGI/lx832mV9tr0i+Du0FdnMMMHe+didJYO
t5Pz2hUm1b8+H5/vLZzSpT6MLTFjc1wiZSaKIjjIH7fBf75RpqAGXSfto45F231O
gdc/Np2Uf3yWyllTp75rDNTyPjnY8UYerSUIX5Z1zQ09c9BD+Ex49VF56VZPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU2yZWIdvnZAnjA35wqWSFtHa1UbEwHwYDVR0j
BBgwFoAUTgVOBk3N8uSfcoLXNwuer/QqlEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
Mzk4MDYzZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMC80RTA1NEUwNjRE
Q0RGMkU0OUY3MjgyRDczNzBCOUVBRkY0MkE5NDRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZGNDJB
OTQ0Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzOTgwNjNlLTU3YTEtNDBmMi04
NTI3LTRkMGE2OWM1ZDY0Ny8wLzMxMzAzMzJlMzIzMzM5MmUzMjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+8WMA0GCSqG
SIb3DQEBCwUAA4IBAQAHOZDA0N7mxI0CJsEv878lKXNMMFSfqE+pcDVFJLwIHBVW
G8An+pKoQoqWLPY3Aii+FP4MJVZD5nJT8lI65PNsx9Zqxb3W1oPkXpbFABxp/s0n
H7ozcLX82UDO2jkhxUr1yoycGRfIMVa8cztMtXQ7pvFIrUK1yeco98z7CmnuCvaf
AANZK7Dnyyqe1hMPlvOvWiddkRtK8fX3WSTWNou5WFt4v3z7ELcrxQJadAoJIW5j
C7SVoeXSiMAp+uVVMKvoistTRe41haFoOP5liw9s9su2kdlQ4sVwoNQ9r59z1L0i
SDLP03AOgVdy7ka1t05ZwAJqZ47eBdKAVmuNY2ww
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:34 2025 by rpki-client