Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38392e302f32342d3234203d3e203338353237.roa
File: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier: 2N3BwgIjWHFbTQKqljv/UDzpCDNCSry44iBQjllcOAY=
Subject key identifier: 06:F0:0C:8D:A3:7C:09:41:FD:11:D1:31:E1:D6:7C:16:26:A3:B8:FA
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 373649DBE61727A515DFA9E249F84C39F813844F
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38392e302f32342d3234203d3e203338353237.roa
Signing time: Wed 15 Jan 2025 11:00:02 +0000
ROA not before: Wed 15 Jan 2025 10:55:02 +0000
ROA not after: Wed 14 Jan 2026 11:00:02 +0000
asID: 38527
IP address blocks: 119.47.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:36:49:db:e6:17:27:a5:15:df:a9:e2:49:f8:4c:39:f8:13:84:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Jan 15 10:55:02 2025 GMT
Not After : Jan 14 11:00:02 2026 GMT
Subject: CN=06F00C8DA37C0941FD11D131E1D67C1626A3B8FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:93:49:27:f1:88:7b:81:60:3b:dc:cd:d1:
5c:ed:75:d6:42:03:1c:88:84:44:bf:e5:a9:b9:cb:
a6:fa:fc:77:2e:42:30:c1:59:64:41:13:b2:41:26:
9a:84:5e:c6:32:e9:29:91:df:50:10:db:72:fb:13:
2e:9e:05:45:c5:db:bf:b6:af:28:f5:48:48:3e:16:
b8:22:9c:df:e0:c7:32:72:b6:1d:8f:04:43:67:b5:
26:2a:84:13:6f:da:2f:24:b0:8f:32:e5:24:1b:8e:
5a:50:de:aa:0a:27:64:9b:3a:3f:1e:53:a2:a1:09:
02:f6:c2:e2:b6:1c:02:7a:0a:3d:d7:30:5e:f4:6d:
91:21:75:55:fd:ba:3e:00:b4:a4:13:e5:68:b7:a4:
38:1e:1e:10:94:a8:f6:ff:71:5c:34:23:99:ba:83:
bb:c7:3a:0b:e7:4c:f6:94:4e:b2:dc:09:92:a6:3f:
27:6d:16:b2:62:19:4b:a2:79:af:55:64:36:9a:83:
7c:97:76:8b:29:7a:6b:0c:1f:85:e7:7a:e0:e4:d9:
3b:e7:60:25:9c:3c:cb:45:5f:90:c9:81:a8:6b:da:
2c:89:8c:5f:94:62:6f:63:f4:db:26:fd:32:0b:0f:
21:c7:fa:bf:d4:eb:7b:a3:3e:7b:16:54:bd:e6:b9:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:0C:8D:A3:7C:09:41:FD:11:D1:31:E1:D6:7C:16:26:A3:B8:FA
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38392e302f32342d3234203d3e203338353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.47.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e0:9c:5f:98:f2:20:9e:bf:aa:da:28:cd:da:d3:20:6f:bb:
0d:3c:60:40:c7:f2:e2:5f:32:79:42:09:68:94:b8:91:7f:ee:
88:6e:00:66:b3:b8:0d:d5:67:51:61:0c:96:05:55:f2:6e:f3:
b5:d1:54:92:a5:66:fe:92:69:86:b7:6b:7a:6c:e4:36:8a:73:
5f:4d:d0:60:de:c1:f7:f3:e0:de:d2:a8:d4:12:95:12:4e:0c:
0e:03:64:fc:ae:5a:65:54:bd:59:15:97:db:24:9a:8a:8f:9e:
ad:a3:89:b8:e4:7d:08:8f:37:f6:48:34:6f:64:54:b4:06:58:
1b:ed:4f:b1:ac:5f:be:d5:39:a4:c1:5d:fa:09:06:9e:d0:48:
14:ee:e0:6f:1f:22:9f:4e:a8:2a:49:8e:75:ff:72:87:e8:4f:
f2:3d:eb:5b:64:56:69:26:d6:e1:1c:b0:6f:d4:1d:49:1f:ff:
fa:c2:ea:3a:c5:74:18:f0:61:8e:86:8d:0c:c3:10:f3:78:5b:
4e:64:c8:cf:e4:c0:6c:25:20:26:8e:9e:f3:06:ab:2a:8c:01:
eb:94:1c:ee:a8:73:c7:78:e4:2b:d6:dc:e4:cf:24:fb:25:3a:
c2:e7:60:31:2f:0c:2d:66:70:3b:f7:bf:bf:0c:7b:e6:b3:f5:
17:18:66:1f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUNzZJ2+YXJ6UV36niSfhMOfgThE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD
RjlBNjQ3MzAeFw0yNTAxMTUxMDU1MDJaFw0yNjAxMTQxMTAwMDJaMDMxMTAvBgNV
BAMTKDA2RjAwQzhEQTM3QzA5NDFGRDExRDEzMUUxRDY3QzE2MjZBM0I4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp65NJJ/GIe4FgO9zN0VztddZC
AxyIhES/5am5y6b6/HcuQjDBWWRBE7JBJpqEXsYy6SmR31AQ23L7Ey6eBUXF27+2
ryj1SEg+FrginN/gxzJyth2PBENntSYqhBNv2i8ksI8y5SQbjlpQ3qoKJ2SbOj8e
U6KhCQL2wuK2HAJ6Cj3XMF70bZEhdVX9uj4AtKQT5Wi3pDgeHhCUqPb/cVw0I5m6
g7vHOgvnTPaUTrLcCZKmPydtFrJiGUuiea9VZDaag3yXdospemsMH4XneuDk2Tvn
YCWcPMtFX5DJgahr2iyJjF+UYm9j9Nsm/TILDyHH+r/U63ujPnsWVL3muW9hAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUBvAMjaN8CUH9EdEx4dZ8FiajuPowHwYDVR0j
BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG
QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB
NjQ3My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05
NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzEzOTJlMzQzNzJlMzgzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3L1kwDQYJKoZIhvcN
AQELBQADggEBALfgnF+Y8iCev6raKM3a0yBvuw08YEDH8uJfMnlCCWiUuJF/7ohu
AGazuA3VZ1FhDJYFVfJu87XRVJKlZv6SaYa3a3ps5DaKc19N0GDewffz4N7SqNQS
lRJODA4DZPyuWmVUvVkVl9skmoqPnq2jibjkfQiPN/ZING9kVLQGWBvtT7GsX77V
OaTBXfoJBp7QSBTu4G8fIp9OqCpJjnX/cofoT/I961tkVmkm1uEcsG/UHUkf//rC
6jrFdBjwYY6GjQzDEPN4W05kyM/kwGwlICaOnvMGqyqMAeuUHO6oc8d45CvW3OTP
JPslOsLnYDEvDC1mcDv3v78Me+az9RcYZh8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:53:56 2025 by rpki-client