Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa
File: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (raw, json)
Hash identifier: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I=
Subject key identifier: 23:51:D6:18:D0:AD:58:92:BF:DF:8E:D6:0C:83:3A:74:22:B8:DB:90
Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial: 2089966720286EE71D093C3B2A8F2CA5A5668C8E
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa
Signing time: Sat 23 Nov 2024 21:00:00 +0000
ROA not before: Sat 23 Nov 2024 20:55:00 +0000
ROA not after: Sat 22 Nov 2025 21:00:00 +0000
asID: 46026
IP address blocks: 175.111.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:89:96:67:20:28:6e:e7:1d:09:3c:3b:2a:8f:2c:a5:a5:66:8c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Validity
Not Before: Nov 23 20:55:00 2024 GMT
Not After : Nov 22 21:00:00 2025 GMT
Subject: CN=2351D618D0AD5892BFDF8ED60C833A7422B8DB90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:e7:53:06:bc:f3:41:aa:d0:f9:70:af:64:
c3:ff:3c:87:a3:28:05:3c:79:c3:46:f5:74:55:da:
d0:ed:ed:4d:f7:c9:46:5b:45:79:26:a8:74:06:9a:
bc:93:65:d6:58:5e:3e:ad:f9:8d:bf:3e:a3:9b:3e:
8a:54:0f:2e:51:e6:cf:bf:87:88:39:5b:a0:c3:19:
7c:d7:7a:34:97:3d:31:6a:f9:77:08:d9:34:ea:92:
77:f9:25:60:80:6d:6c:af:cf:f9:23:a9:76:61:3a:
78:b3:20:87:ee:1a:2d:c7:6d:3a:fd:c3:b9:4f:71:
d4:11:42:6a:9a:a3:d7:42:d5:68:ec:e5:b5:45:4f:
c5:2f:07:51:bb:df:86:47:a2:dd:91:dc:60:64:f3:
83:44:df:1a:ba:a2:57:e8:09:0f:1e:dc:ee:84:d4:
ab:24:41:fd:42:14:91:9b:19:32:e1:17:9a:29:95:
aa:f5:c5:c1:2c:d4:19:79:32:c5:72:f3:e5:a4:0e:
e1:45:7f:22:47:f6:06:7f:ba:27:1e:2b:b6:e2:7c:
73:11:74:cf:99:fd:08:ff:ab:df:dd:9c:bc:dc:6e:
5a:50:50:8a:28:7b:3f:0d:b5:d4:2a:ca:8f:2e:9a:
4b:5f:b1:84:55:34:ae:ab:38:1c:dc:c0:14:5f:1e:
80:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:51:D6:18:D0:AD:58:92:BF:DF:8E:D6:0C:83:3A:74:22:B8:DB:90
X509v3 Authority Key Identifier:
keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.111.112.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:55:a8:0f:fd:25:15:df:ac:dd:af:e8:fe:55:f6:e0:24:35:
d4:64:49:4c:cf:dc:26:58:7f:9a:b1:b4:ee:32:b2:7f:3b:bd:
e5:ab:bd:39:3b:ab:12:86:1e:3c:3b:04:0b:c5:54:9a:e1:10:
bd:96:b3:64:90:c6:0a:10:cd:29:69:91:a2:fa:9b:74:fa:8e:
54:c5:8b:9e:78:ce:a5:ac:2e:4c:b8:57:18:ca:f0:54:e9:69:
68:7f:c1:0b:52:c7:4c:65:80:69:35:dc:52:32:2e:00:9e:3d:
98:72:36:3a:bc:0d:1c:95:3e:d9:a1:a2:d5:63:c4:32:dc:c7:
e8:17:6f:ac:b8:df:0c:3e:9d:ea:cb:d3:90:51:30:90:7f:09:
94:49:4d:97:f7:6a:30:1f:e2:0c:19:1d:6c:c0:79:9f:4f:57:
a6:89:f6:f3:40:fb:e0:e6:23:75:4e:df:57:a9:ad:8d:fc:f3:
ec:22:81:39:bc:bb:c7:d6:24:e1:96:0c:48:f5:79:cc:c0:6e:
63:2f:41:30:7d:a3:36:ac:53:d0:77:9a:bd:b3:a4:a1:74:da:
e9:8a:fa:1c:ec:a0:ec:53:91:f6:e0:ff:95:a6:df:fa:5d:22:
ab:2c:15:c6:6d:c8:f8:aa:8a:38:35:c0:bf:1a:01:30:59:e0:
87:12:c1:a9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIImWZyAobucdCTw7Ko8spaVmjI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4
NDkwM0UxNzAeFw0yNDExMjMyMDU1MDBaFw0yNTExMjIyMTAwMDBaMDMxMTAvBgNV
BAMTKDIzNTFENjE4RDBBRDU4OTJCRkRGOEVENjBDODMzQTc0MjJCOERCOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oOdTBrzzQarQ+XCvZMP/PIej
KAU8ecNG9XRV2tDt7U33yUZbRXkmqHQGmryTZdZYXj6t+Y2/PqObPopUDy5R5s+/
h4g5W6DDGXzXejSXPTFq+XcI2TTqknf5JWCAbWyvz/kjqXZhOnizIIfuGi3HbTr9
w7lPcdQRQmqao9dC1Wjs5bVFT8UvB1G734ZHot2R3GBk84NE3xq6olfoCQ8e3O6E
1KskQf1CFJGbGTLhF5oplar1xcEs1Bl5MsVy8+WkDuFFfyJH9gZ/uiceK7bifHMR
dM+Z/Qj/q9/dnLzcblpQUIooez8NtdQqyo8umktfsYRVNK6rOBzcwBRfHoDzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUI1HWGNCtWJK/347WDIM6dCK425AwHwYDVR0j
BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD
QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw
M0UxNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h
OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzczNTJlMzEzMTMxMmUzMTMxMzIyZTMwMmYz
MjMxMmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDr29wMA0GCSqG
SIb3DQEBCwUAA4IBAQBNVagP/SUV36zdr+j+VfbgJDXUZElMz9wmWH+asbTuMrJ/
O73lq705O6sShh48OwQLxVSa4RC9lrNkkMYKEM0paZGi+pt0+o5UxYueeM6lrC5M
uFcYyvBU6Wlof8ELUsdMZYBpNdxSMi4Anj2YcjY6vA0clT7ZoaLVY8Qy3MfoF2+s
uN8MPp3qy9OQUTCQfwmUSU2X92owH+IMGR1swHmfT1emifbzQPvg5iN1Tt9Xqa2N
/PPsIoE5vLvH1iThlgxI9XnMwG5jL0EwfaM2rFPQd5q9s6ShdNrpivoc7KDsU5H2
4P+Vpt/6XSKrLBXGbcj4qoo4NcC/GgEwWeCHEsGp
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:17 2025 by rpki-client