Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa
File: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (raw, json)
Hash identifier: 5QwzRSn/R2RoSRGnIXPxq+kbkMjBhYNNiqQ8aVbdQvM=
Subject key identifier: E6:67:98:03:EA:2A:26:CF:00:94:29:8C:46:48:05:33:80:A2:D2:35
Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Certificate serial: 1F1E863F5FF8D9728271CC9E945B6EEE9AA1839F
Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa
Signing time: Mon 17 Mar 2025 10:00:01 +0000
ROA not before: Mon 17 Mar 2025 09:55:01 +0000
ROA not after: Mon 16 Mar 2026 10:00:01 +0000
asID: 149383
IP address blocks: 103.181.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1e:86:3f:5f:f8:d9:72:82:71:cc:9e:94:5b:6e:ee:9a:a1:83:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Validity
Not Before: Mar 17 09:55:01 2025 GMT
Not After : Mar 16 10:00:01 2026 GMT
Subject: CN=E6679803EA2A26CF0094298C4648053380A2D235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:65:32:0f:2c:04:be:4e:9a:da:61:7e:e2:
3c:04:7a:ee:be:be:5d:cc:31:1e:22:ca:25:78:18:
1e:48:cd:ac:83:67:83:dd:af:82:7b:30:8e:8d:50:
da:da:b4:08:ca:09:d3:0a:64:b4:84:60:b0:cc:cd:
b1:4a:9f:14:9f:41:11:90:82:0b:6d:d9:a8:1e:aa:
ea:94:c9:51:b5:8a:f7:cf:55:6f:56:d2:b8:b7:5a:
d3:00:7b:16:ce:b5:fc:9e:fe:0b:98:50:c1:87:16:
77:c3:f5:98:2d:f5:37:5d:b2:2e:e0:14:8d:0e:5c:
aa:7c:78:63:c5:51:b1:42:f8:03:e7:30:4e:4d:f2:
d7:9b:18:00:05:d2:40:a7:9f:55:bc:85:c5:c2:55:
29:54:c5:41:14:f6:ee:a3:dc:87:cc:c1:b3:d7:1e:
7f:77:ef:e8:3a:70:b9:98:cd:ca:99:82:e7:7a:91:
a4:d3:8d:20:30:ad:dd:9b:f6:ab:a3:8f:02:c1:f1:
cc:99:5b:cc:94:77:68:16:53:d3:fc:7d:d1:1f:7b:
c9:29:26:9b:4d:a7:58:f7:78:2d:c9:a9:48:1e:58:
8f:da:ac:26:a0:90:dd:96:18:ad:0e:df:f3:3d:47:
af:04:17:81:5d:96:f5:d2:1d:84:fc:f8:fb:dd:ba:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:67:98:03:EA:2A:26:CF:00:94:29:8C:46:48:05:33:80:A2:D2:35
X509v3 Authority Key Identifier:
keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.138.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0b:d4:81:ba:b9:57:f0:ce:55:5f:66:6b:d3:bc:4f:fc:c0:
52:b9:ed:03:ad:7e:88:b7:28:04:97:ea:70:16:ea:da:f5:a4:
8c:07:23:47:e2:74:cc:df:0b:bd:d4:3a:63:ba:0f:6a:e6:4f:
c2:d1:ac:1e:c3:41:d7:8d:7b:f2:d9:5b:f6:b8:1e:9b:18:74:
19:37:53:90:a8:79:13:72:e5:24:32:66:fe:d2:59:8d:48:c9:
55:f7:e0:40:00:f6:f5:43:85:6c:1f:54:6d:15:9b:fc:75:8d:
79:be:98:20:07:ee:22:7d:5d:c9:93:27:06:6c:f9:2b:6e:d7:
93:4c:4e:2d:4e:2a:f7:97:f9:cc:c9:21:5e:47:12:56:e0:a2:
8e:c9:93:c1:ac:54:18:1c:82:69:49:bf:fc:62:99:02:50:ce:
a4:51:ec:b3:42:1b:80:9d:45:32:0a:41:2e:7f:31:73:1d:05:
6b:35:fe:ed:8d:ec:ce:c2:2a:86:33:a6:64:19:6a:05:69:df:
f1:20:d1:02:94:f4:92:18:70:d7:5f:2e:8d:e9:20:5b:d3:c3:
cc:42:81:a1:c3:02:b5:9e:f7:69:dc:92:25:60:48:d6:7e:80:
5c:ec:c0:2e:8e:17:14:92:db:89:7f:6a:97:be:e0:3d:4c:d4:
f6:be:cb:3b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUHx6GP1/42XKCccyelFtu7pqhg58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx
ODhCQUY3OTAeFw0yNTAzMTcwOTU1MDFaFw0yNjAzMTYxMDAwMDFaMDMxMTAvBgNV
BAMTKEU2Njc5ODAzRUEyQTI2Q0YwMDk0Mjk4QzQ2NDgwNTMzODBBMkQyMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChGUyDywEvk6a2mF+4jwEeu6+
vl3MMR4iyiV4GB5IzayDZ4Pdr4J7MI6NUNratAjKCdMKZLSEYLDMzbFKnxSfQRGQ
ggtt2agequqUyVG1ivfPVW9W0ri3WtMAexbOtfye/guYUMGHFnfD9Zgt9Tddsi7g
FI0OXKp8eGPFUbFC+APnME5N8tebGAAF0kCnn1W8hcXCVSlUxUEU9u6j3IfMwbPX
Hn937+g6cLmYzcqZgud6kaTTjSAwrd2b9qujjwLB8cyZW8yUd2gWU9P8fdEfe8kp
JptNp1j3eC3JqUgeWI/arCagkN2WGK0O3/M9R68EF4FdlvXSHYT8+PvdujN/AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU5meYA+oqJs8AlCmMRkgFM4Ci0jUwHwYDVR0j
BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE
NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC
QUY3OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3YTExMGU4LWI4YzItNDI3Ny1i
ZWIzLTkyYWE1YjM2OTBmMC8wLzMxMzAzMzJlMzEzODMxMmUzMTMzMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntYowDQYJ
KoZIhvcNAQELBQADggEBABEL1IG6uVfwzlVfZmvTvE/8wFK57QOtfoi3KASX6nAW
6tr1pIwHI0fidMzfC73UOmO6D2rmT8LRrB7DQdeNe/LZW/a4HpsYdBk3U5CoeRNy
5SQyZv7SWY1IyVX34EAA9vVDhWwfVG0Vm/x1jXm+mCAH7iJ9XcmTJwZs+Stu15NM
Ti1OKveX+czJIV5HElbgoo7Jk8GsVBgcgmlJv/ximQJQzqRR7LNCG4CdRTIKQS5/
MXMdBWs1/u2N7M7CKoYzpmQZagVp3/Eg0QKU9JIYcNdfLo3pIFvTw8xCgaHDArWe
92nckiVgSNZ+gFzswC6OFxSS24l/ape+4D1M1Pa+yzs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:29 2025 by rpki-client