Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa
File: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (raw, json)
Hash identifier: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=
Subject key identifier: 5C:AF:74:F7:E6:16:62:B3:60:61:96:2A:15:3C:19:4E:69:B7:25:E1
Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
Certificate serial: 706A97D0B3C14C6787DB650B7836893482082109
Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa
Signing time: Fri 14 Mar 2025 11:00:03 +0000
ROA not before: Fri 14 Mar 2025 10:55:03 +0000
ROA not after: Fri 13 Mar 2026 11:00:03 +0000
asID: 142310
IP address blocks: 103.168.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:6a:97:d0:b3:c1:4c:67:87:db:65:0b:78:36:89:34:82:08:21:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
Validity
Not Before: Mar 14 10:55:03 2025 GMT
Not After : Mar 13 11:00:03 2026 GMT
Subject: CN=5CAF74F7E61662B36061962A153C194E69B725E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:5c:14:1a:ef:48:34:0a:41:f7:1a:f0:2f:
7f:a2:a1:c3:34:8b:58:9a:aa:0b:16:98:33:d7:4d:
a1:36:6a:0b:d6:0c:0f:b9:86:e2:9d:b9:35:5f:60:
0b:b7:59:60:3e:03:5d:7d:14:f6:9f:9e:7a:40:b7:
9a:76:76:94:49:fa:cc:9f:e6:5b:54:0f:3a:43:fa:
70:18:b3:0a:ea:41:74:20:50:5f:ce:6e:5a:80:a1:
9e:87:95:1d:66:70:d1:07:c9:ab:22:2a:13:1b:2f:
c0:16:db:d3:ea:d3:05:1d:22:ef:bb:ad:66:6c:75:
03:fe:47:28:0f:52:17:ff:f1:81:3c:93:07:09:a6:
64:8a:e4:cc:84:21:36:5f:68:4f:29:de:0f:5a:b7:
d5:67:41:e4:d0:4a:3c:72:08:74:78:55:b7:73:1b:
dc:d9:bf:24:f4:65:2f:61:bb:07:05:91:c8:a4:06:
96:1f:5b:34:77:10:09:4f:b9:ab:9c:0f:ff:77:15:
77:b6:9f:d7:9f:a1:49:12:35:63:c5:26:17:00:5f:
ed:e5:8c:0d:ed:a0:bd:12:53:5f:7f:ca:f7:ae:9c:
1d:da:e8:ee:46:38:60:2e:8b:df:55:46:69:23:5b:
c6:9a:9e:d4:83:e4:43:e3:32:18:0b:35:a4:11:03:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AF:74:F7:E6:16:62:B3:60:61:96:2A:15:3C:19:4E:69:B7:25:E1
X509v3 Authority Key Identifier:
keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.168.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5d:9c:58:70:86:48:a2:b2:3f:88:49:a9:83:6c:9a:f3:ec:
74:2e:1a:38:75:48:e2:a5:2c:0f:5f:74:9c:31:8a:ce:f5:95:
7b:1e:b8:1e:4b:28:4e:f7:b8:c9:cc:0b:d3:33:20:80:8f:a4:
d6:52:12:7e:99:88:d5:6f:7d:3d:6a:87:4f:58:0b:4a:17:86:
12:2e:49:84:72:b8:d5:f0:96:ba:69:c7:ec:d6:18:2c:f7:21:
54:a9:7c:a4:5c:33:ce:9c:3d:a4:c3:dd:45:03:58:a4:6e:81:
18:10:53:35:e2:dc:22:ee:38:16:87:cf:6b:ea:42:99:4d:83:
44:46:68:69:df:bf:f1:3f:f2:98:c2:87:9a:ee:a8:ff:b7:b5:
b6:a0:9b:8d:a0:95:09:de:3a:33:3a:25:ee:2f:f2:a6:79:64:
67:83:80:35:01:fa:e2:9b:c7:8f:1c:ce:11:9b:27:40:d9:82:
90:a0:67:a4:d2:79:60:bb:c3:53:0e:9e:b0:31:cb:2a:16:a6:
9b:0c:cc:97:02:e1:9b:38:99:9c:c7:3b:9e:03:41:85:38:96:
68:bf:d5:0e:04:93:ad:b9:33:e0:14:d0:75:ea:88:41:05:d9:
fc:1b:23:d8:e1:e4:6a:28:da:aa:26:a5:aa:32:0b:d8:f5:d7:
f4:ad:83:3e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcGqX0LPBTGeH22ULeDaJNIIIIQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE
QTYzNkU3MDAeFw0yNTAzMTQxMDU1MDNaFw0yNjAzMTMxMTAwMDNaMDMxMTAvBgNV
BAMTKDVDQUY3NEY3RTYxNjYyQjM2MDYxOTYyQTE1M0MxOTRFNjlCNzI1RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHclwUGu9INApB9xrwL3+iocM0
i1iaqgsWmDPXTaE2agvWDA+5huKduTVfYAu3WWA+A119FPafnnpAt5p2dpRJ+syf
5ltUDzpD+nAYswrqQXQgUF/OblqAoZ6HlR1mcNEHyasiKhMbL8AW29Pq0wUdIu+7
rWZsdQP+RygPUhf/8YE8kwcJpmSK5MyEITZfaE8p3g9at9VnQeTQSjxyCHR4Vbdz
G9zZvyT0ZS9huwcFkcikBpYfWzR3EAlPuaucD/93FXe2n9efoUkSNWPFJhcAX+3l
jA3toL0SU19/yveunB3a6O5GOGAui99VRmkjW8aantSD5EPjMhgLNaQRA8nhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUXK909+YWYrNgYZYqFTwZTmm3JeEwHwYDVR0j
BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5
NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz
NkU3MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y0MjkzYzY0LWVhMDAtNDEzZi05
MDkwLTJiMTkwYjFhNDVhZi8wLzMxMzAzMzJlMzEzNjM4MmUzNDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6gvMA0GCSqG
SIb3DQEBCwUAA4IBAQCoXZxYcIZIorI/iEmpg2ya8+x0Lho4dUjipSwPX3ScMYrO
9ZV7HrgeSyhO97jJzAvTMyCAj6TWUhJ+mYjVb309aodPWAtKF4YSLkmEcrjV8Ja6
acfs1hgs9yFUqXykXDPOnD2kw91FA1ikboEYEFM14twi7jgWh89r6kKZTYNERmhp
37/xP/KYwoea7qj/t7W2oJuNoJUJ3jozOiXuL/KmeWRng4A1Afrim8ePHM4RmydA
2YKQoGek0nlgu8NTDp6wMcsqFqabDMyXAuGbOJmcxzueA0GFOJZov9UOBJOtuTPg
FNB16ohBBdn8GyPY4eRqKNqqJqWqMgvY9df0rYM+
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:36 2025 by rpki-client