Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3234203d3e2039333431.roa
File: 3132312e3130302e32322e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier: 6KGNOLo1UdICGzm0LJK0f4nERgVdtgH8ojl4y9QdnXI=
Subject key identifier: 90:7B:E5:5E:1F:25:91:0B:68:06:83:2D:C1:8B:99:56:05:88:23:A6
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 448B8A5F23921B64DED61D1A776DD9F5C0C36D11
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3234203d3e2039333431.roa
Signing time: Tue 25 Mar 2025 03:00:01 +0000
ROA not before: Tue 25 Mar 2025 02:55:01 +0000
ROA not after: Tue 24 Mar 2026 03:00:01 +0000
asID: 9341
IP address blocks: 121.100.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8b:8a:5f:23:92:1b:64:de:d6:1d:1a:77:6d:d9:f5:c0:c3:6d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 25 02:55:01 2025 GMT
Not After : Mar 24 03:00:01 2026 GMT
Subject: CN=907BE55E1F25910B6806832DC18B9956058823A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a8:e8:ec:ba:4f:6d:3e:50:7b:e7:90:ff:d2:
b9:a6:dd:00:77:ea:21:66:e4:8d:37:67:c4:d4:05:
07:d2:be:ac:39:f3:20:c5:98:43:bc:b6:15:92:72:
ca:b1:cd:3d:9f:af:e4:86:4f:84:67:4d:b0:cb:ee:
99:7a:70:1e:50:0f:e3:89:c6:81:72:45:39:d4:01:
c5:0f:72:b8:6d:f5:12:fc:ab:b6:48:52:d4:95:08:
a8:51:cd:e3:a8:6c:92:a1:57:b6:82:bc:53:7b:85:
40:ce:9e:65:22:3b:f9:4d:ee:0f:8c:04:47:1e:23:
96:ab:7c:1b:1d:0f:59:17:1b:35:a0:be:32:76:5a:
f7:89:88:39:f5:8d:35:3a:f5:14:56:a2:52:45:21:
3e:82:d2:e1:fe:b2:4d:8e:19:89:5a:78:1c:9b:b0:
be:f2:f8:33:0c:f9:31:28:d2:dd:1c:74:8c:15:ff:
c4:22:df:a8:76:a0:12:15:06:74:45:3e:8b:f9:15:
44:3a:f8:81:1c:23:bf:25:91:c3:28:e2:67:84:b4:
b8:55:03:05:9b:da:1e:04:6b:15:c6:6a:ec:85:7e:
2b:f0:14:99:d5:c8:df:0a:a0:50:50:1f:e3:b1:e0:
6d:c9:58:61:bf:bb:94:37:10:e5:47:9a:20:8a:b3:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7B:E5:5E:1F:25:91:0B:68:06:83:2D:C1:8B:99:56:05:88:23:A6
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.100.22.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:09:bb:e2:c9:71:de:d5:1a:61:f3:a6:95:7a:18:08:8c:c4:
cf:f4:65:b8:e7:73:c2:d8:0a:c7:56:1c:82:e0:3b:72:af:e6:
c8:3a:bf:b6:7b:ce:35:d7:2c:91:24:04:21:9d:be:a4:08:94:
b1:40:bc:be:6d:7c:ab:6a:36:a9:94:fb:7c:12:da:d1:f2:8f:
0c:fc:8f:cb:7d:6c:20:36:74:45:70:b0:89:14:97:d9:42:02:
c2:60:6d:f8:83:a9:b1:09:56:57:32:93:a3:82:77:e0:95:3c:
55:ee:46:f1:59:5b:fe:00:5a:25:91:e5:7f:05:63:7d:f4:61:
09:9b:9b:a3:0e:69:9b:b2:cb:78:40:0d:6e:e8:e3:5c:05:57:
96:4c:c8:9e:ad:e7:0f:c1:a3:3a:ff:ca:aa:cf:b3:79:e0:35:
eb:23:3e:dc:73:89:bb:8a:ed:db:be:9c:ef:2e:e9:39:f6:f8:
32:64:72:93:f4:71:e7:45:a5:3b:41:f3:82:49:2d:4b:27:bc:
0e:5d:f0:ea:b2:c9:a7:7f:67:e7:29:90:81:b7:d8:57:28:ae:
7b:8f:15:40:e8:a0:21:94:c0:8b:a8:71:cb:92:1c:f0:ce:43:
72:cb:12:3b:4a:5c:aa:06:b8:71:9a:02:b3:0e:30:bd:13:2c:
16:00:10:94
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIURIuKXyOSG2Te1h0ad23Z9cDDbREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNTAzMjUwMjU1MDFaFw0yNjAzMjQwMzAwMDFaMDMxMTAvBgNV
BAMTKDkwN0JFNTVFMUYyNTkxMEI2ODA2ODMyREMxOEI5OTU2MDU4ODIzQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4qOjsuk9tPlB755D/0rmm3QB3
6iFm5I03Z8TUBQfSvqw58yDFmEO8thWScsqxzT2fr+SGT4RnTbDL7pl6cB5QD+OJ
xoFyRTnUAcUPcrht9RL8q7ZIUtSVCKhRzeOobJKhV7aCvFN7hUDOnmUiO/lN7g+M
BEceI5arfBsdD1kXGzWgvjJ2WveJiDn1jTU69RRWolJFIT6C0uH+sk2OGYlaeByb
sL7y+DMM+TEo0t0cdIwV/8Qi36h2oBIVBnRFPov5FUQ6+IEcI78lkcMo4meEtLhV
AwWb2h4EaxXGauyFfivwFJnVyN8KoFBQH+Ox4G3JWGG/u5Q3EOVHmiCKsyzNAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUkHvlXh8lkQtoBoMtwYuZVgWII6YwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzIzMTJlMzEzMDMwMmUzMjMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF5ZBYwDQYJKoZIhvcN
AQELBQADggEBAG0Ju+LJcd7VGmHzppV6GAiMxM/0Zbjnc8LYCsdWHILgO3Kv5sg6
v7Z7zjXXLJEkBCGdvqQIlLFAvL5tfKtqNqmU+3wS2tHyjwz8j8t9bCA2dEVwsIkU
l9lCAsJgbfiDqbEJVlcyk6OCd+CVPFXuRvFZW/4AWiWR5X8FY330YQmbm6MOaZuy
y3hADW7o41wFV5ZMyJ6t5w/Bozr/yqrPs3ngNesjPtxzibuK7du+nO8u6Tn2+DJk
cpP0cedFpTtB84JJLUsnvA5d8Oqyyad/Z+cpkIG32FcornuPFUDooCGUwIuoccuS
HPDOQ3LLEjtKXKoGuHGaArMOML0TLBYAEJQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:29 2025 by rpki-client