Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa
File: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (raw, json)
Hash identifier: 0lAqF2YCCu8hBoO36P3pXTfszCRwlRHUwQyhfZKieRU=
Subject key identifier: 02:45:D1:E6:FA:7B:2B:40:55:88:34:AF:B5:C5:E0:3D:6F:12:6A:BC
Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1
Certificate serial: 7235908DC7B733D122CBE031CE911A8C482307AF
Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa
Signing time: Fri 13 Dec 2024 08:00:34 +0000
ROA not before: Fri 13 Dec 2024 07:55:34 +0000
ROA not after: Fri 12 Dec 2025 08:00:34 +0000
asID: 152045
IP address blocks: 210.79.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:35:90:8d:c7:b7:33:d1:22:cb:e0:31:ce:91:1a:8c:48:23:07:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1
Validity
Not Before: Dec 13 07:55:34 2024 GMT
Not After : Dec 12 08:00:34 2025 GMT
Subject: CN=0245D1E6FA7B2B40558834AFB5C5E03D6F126ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:22:87:82:00:bd:ff:09:01:56:48:54:fc:c0:
08:d8:7d:84:45:fd:3f:ad:ff:ab:a9:b2:73:1b:21:
c3:0a:8d:3f:e1:47:21:4d:77:9a:04:a9:6e:ed:5b:
7b:04:99:51:2b:d6:9c:b4:9f:28:df:b0:bc:90:4e:
0d:fb:1c:d1:ae:25:7b:c3:8c:88:9f:e5:c9:48:b4:
9a:ce:f8:68:4a:76:fc:81:55:30:9f:8b:d1:c0:da:
c2:db:19:d1:6b:a3:47:1d:e2:0b:0e:22:e8:63:86:
d5:30:c3:03:81:6b:1b:00:da:2b:e5:fb:e4:3d:3a:
d2:c4:c7:18:aa:97:4b:0e:09:80:50:2e:1c:68:00:
ee:16:6f:69:b2:ba:ff:3b:43:df:3c:0f:43:b3:a4:
35:dd:c9:a9:83:53:8c:d3:71:7c:f6:23:a1:68:cb:
7c:02:bf:5d:23:32:54:ee:01:15:29:a5:3d:7c:30:
57:48:ca:38:bf:f0:89:a4:6e:05:cc:ef:a4:00:78:
b0:7a:bd:c1:16:7b:8b:b1:fc:66:f4:ca:e7:54:0b:
ff:94:07:af:13:1c:8b:a4:c4:e0:6e:d9:5d:3c:4a:
21:f4:82:0e:09:a8:ec:3c:46:7b:c1:06:7d:63:bc:
4d:b4:e6:f3:fc:fc:dd:18:35:ab:3b:40:0c:59:26:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:45:D1:E6:FA:7B:2B:40:55:88:34:AF:B5:C5:E0:3D:6F:12:6A:BC
X509v3 Authority Key Identifier:
keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.146.0/23
Signature Algorithm: sha256WithRSAEncryption
55:1d:8a:34:6e:12:b6:4d:ac:52:14:73:13:17:6e:36:34:a5:
0a:f4:80:66:a8:9b:1e:83:72:71:df:93:ab:c7:a4:41:94:6d:
3f:7f:15:4f:cb:29:e8:67:60:07:ef:fe:50:a0:98:5f:66:37:
fe:fd:b1:54:5d:97:af:e8:29:04:df:1e:8d:54:29:96:3a:d8:
ad:b8:e4:48:7c:f6:cf:3a:5a:00:43:46:a1:69:c7:17:f6:5d:
71:d6:dc:bf:af:a3:f4:cf:6e:39:c6:56:96:61:77:bd:f6:0e:
1a:59:7a:5c:5f:22:9f:7b:de:ce:d9:43:4b:64:e9:93:d3:70:
1c:7a:cb:12:66:9e:a7:52:ff:d3:50:cd:4a:6d:41:56:cf:d9:
94:14:e1:80:6d:5d:f9:67:08:c9:5f:d0:42:b6:48:c3:cb:db:
44:38:ec:83:ed:88:ee:a9:87:f0:2c:1a:4b:35:68:91:91:c8:
a9:f6:b8:46:03:19:70:de:7f:7a:bc:ea:16:1e:de:1f:61:b2:
85:60:eb:03:f6:aa:dc:a8:c4:51:2e:90:f5:d2:f7:34:fc:26:
6a:61:81:24:f6:f1:d1:a1:60:85:d9:5b:83:82:ab:7f:81:39:
47:81:aa:2d:5d:da:66:09:96:94:9a:04:03:ff:62:0f:ac:8f:
86:59:0e:7e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcjWQjce3M9Eiy+AxzpEajEgjB68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy
OTdENjFGMTAeFw0yNDEyMTMwNzU1MzRaFw0yNTEyMTIwODAwMzRaMDMxMTAvBgNV
BAMTKDAyNDVEMUU2RkE3QjJCNDA1NTg4MzRBRkI1QzVFMDNENkYxMjZBQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlIoeCAL3/CQFWSFT8wAjYfYRF
/T+t/6upsnMbIcMKjT/hRyFNd5oEqW7tW3sEmVEr1py0nyjfsLyQTg37HNGuJXvD
jIif5clItJrO+GhKdvyBVTCfi9HA2sLbGdFro0cd4gsOIuhjhtUwwwOBaxsA2ivl
++Q9OtLExxiql0sOCYBQLhxoAO4Wb2myuv87Q988D0OzpDXdyamDU4zTcXz2I6Fo
y3wCv10jMlTuARUppT18MFdIyji/8ImkbgXM76QAeLB6vcEWe4ux/Gb0yudUC/+U
B68THIukxOBu2V08SiH0gg4JqOw8RnvBBn1jvE205vP8/N0YNas7QAxZJgTRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUAkXR5vp7K0BViDSvtcXgPW8SarwwHwYDVR0j
BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy
OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE
NjFGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxYmI2NmQwLWE5MzMtNDExMC1h
MDkzLTAzOGRhOWVjOGI3ZS8wLzMyMzEzMDJlMzczOTJlMzEzNDM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzAzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0k+SMA0GCSqG
SIb3DQEBCwUAA4IBAQBVHYo0bhK2TaxSFHMTF242NKUK9IBmqJseg3Jx35Orx6RB
lG0/fxVPyynoZ2AH7/5QoJhfZjf+/bFUXZev6CkE3x6NVCmWOtituORIfPbPOloA
Q0ahaccX9l1x1ty/r6P0z245xlaWYXe99g4aWXpcXyKfe97O2UNLZOmT03AcessS
Zp6nUv/TUM1KbUFWz9mUFOGAbV35ZwjJX9BCtkjDy9tEOOyD7YjuqYfwLBpLNWiR
kcip9rhGAxlw3n96vOoWHt4fYbKFYOsD9qrcqMRRLpD10vc0/CZqYYEk9vHRoWCF
2VuDgqt/gTlHgaotXdpmCZaUmgQD/2IPrI+GWQ5+
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:06 2025 by rpki-client