Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa
File: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (raw, json)
Hash identifier: wQmGKqaa+YSiRmaLGWEMq8mJpTHj8TfVNhWMDunfL+s=
Subject key identifier: 8D:0A:D7:2F:10:0A:A8:C6:1D:71:45:D0:E7:14:D1:DF:3E:E7:39:BD
Certificate issuer: /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial: 3299621979789A96ED30E9C9882D4063E5168F68
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa
Signing time: Sun 25 Aug 2024 05:00:02 +0000
ROA not before: Sun 25 Aug 2024 04:55:02 +0000
ROA not after: Sun 24 Aug 2025 05:00:02 +0000
asID: 58474
IP address blocks: 43.248.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:99:62:19:79:78:9a:96:ed:30:e9:c9:88:2d:40:63:e5:16:8f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Validity
Not Before: Aug 25 04:55:02 2024 GMT
Not After : Aug 24 05:00:02 2025 GMT
Subject: CN=8D0AD72F100AA8C61D7145D0E714D1DF3EE739BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:8a:e3:2c:45:f0:db:19:0c:81:a5:f7:bf:
17:8a:99:f5:ea:ea:d9:dc:74:0f:4e:dc:42:05:e4:
a9:65:b0:b1:78:c8:4f:b2:b8:62:d6:d9:7d:a1:20:
00:c8:04:32:e7:96:ef:42:6e:c2:02:01:95:43:9e:
17:bc:bc:27:7a:af:f5:06:0a:86:9f:03:84:79:a2:
08:e3:ac:67:9d:d3:02:94:fe:82:6e:65:7c:b1:5f:
6c:36:13:d4:25:c1:27:6c:6d:12:28:5b:e5:69:3b:
5f:49:22:69:aa:7d:48:82:32:a6:8c:32:7a:b2:49:
3b:e4:f3:27:b8:62:02:17:65:12:07:74:36:55:1a:
f5:56:1d:ea:7f:fb:67:7d:f1:39:96:59:99:4f:d0:
a1:45:6c:9e:62:d9:ae:dd:e7:7b:0a:a1:a7:43:38:
af:62:40:7c:f1:29:71:45:38:40:23:ec:78:ba:2b:
08:86:52:32:32:4b:c3:f0:bd:81:4a:29:d6:ba:8c:
ba:33:3b:6d:31:c6:e5:b0:1a:c7:74:30:aa:e4:cc:
62:77:bd:4c:a3:37:65:68:69:e8:e5:e2:2f:fb:98:
c8:34:03:f3:c2:83:32:d2:a5:6f:39:d4:f2:31:3e:
f5:f7:8c:93:2e:02:64:72:06:e9:3a:1b:68:43:ef:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:D7:2F:10:0A:A8:C6:1D:71:45:D0:E7:14:D1:DF:3E:E7:39:BD
X509v3 Authority Key Identifier:
keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/34332e3234382e3231342e302f32342d3234203d3e203538343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.214.0/24
Signature Algorithm: sha256WithRSAEncryption
73:03:74:f4:23:1a:34:9e:de:1f:73:8d:22:7d:74:e5:f4:3b:
91:ab:ee:6e:0c:21:d7:74:21:a4:c0:54:b9:0c:d3:aa:9f:37:
79:d1:18:15:bc:cb:3f:bf:d1:ba:f3:03:22:0d:fb:98:44:dd:
da:c6:20:93:43:56:79:21:82:c1:64:13:fb:d7:67:55:3a:a6:
13:9c:9d:00:9e:37:15:c4:de:b1:80:bd:bc:6e:0e:ed:2f:f4:
70:a3:ad:01:9c:37:e5:f0:ec:96:5c:ec:84:7b:ab:d3:6e:52:
f6:f8:8e:26:c1:3d:83:1d:12:63:a3:e4:9b:77:65:cc:e7:cd:
56:14:bf:af:80:62:b8:48:4c:16:93:2b:7f:f5:7d:ec:cd:86:
f9:a4:e7:de:a8:aa:76:ce:a5:33:51:1f:ac:61:e1:3d:d3:4d:
f8:9c:73:6f:fa:3e:99:34:a1:6a:a0:95:35:97:78:1b:53:1f:
57:68:76:b0:51:4f:79:5f:82:ce:e9:0e:5d:cc:e9:4a:38:fa:
92:c1:46:8d:cf:26:2b:94:8b:61:21:88:86:c6:a0:5f:78:5b:
3a:71:cd:61:92:34:26:6f:0d:41:8f:a3:88:44:f1:03:f5:3b:
e6:60:f5:94:30:a1:38:72:e3:87:80:ea:56:6f:ef:79:29:1f:
59:fc:d6:3d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMpliGXl4mpbtMOnJiC1AY+UWj2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQz
REEyRjA5ODAeFw0yNDA4MjUwNDU1MDJaFw0yNTA4MjQwNTAwMDJaMDMxMTAvBgNV
BAMTKDhEMEFENzJGMTAwQUE4QzYxRDcxNDVEMEU3MTREMURGM0VFNzM5QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cIrjLEXw2xkMgaX3vxeKmfXq
6tncdA9O3EIF5KllsLF4yE+yuGLW2X2hIADIBDLnlu9CbsICAZVDnhe8vCd6r/UG
CoafA4R5ogjjrGed0wKU/oJuZXyxX2w2E9QlwSdsbRIoW+VpO19JImmqfUiCMqaM
MnqySTvk8ye4YgIXZRIHdDZVGvVWHep/+2d98TmWWZlP0KFFbJ5i2a7d53sKoadD
OK9iQHzxKXFFOEAj7Hi6KwiGUjIyS8PwvYFKKda6jLozO20xxuWwGsd0MKrkzGJ3
vUyjN2Voaejl4i/7mMg0A/PCgzLSpW851PIxPvX3jJMuAmRyBuk6G2hD77g5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUjQrXLxAKqMYdcUXQ5xTR3z7nOb0wHwYDVR0j
BBgwFoAUlfxgcqSmkKYaC18Us2iCtD2i8JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzA1MTc3YS1hNTAwLTQ5OTYtYjNmZi03MGMxNDRlZGZlY2UvMC85NUZDNjA3MkE0
QTY5MEE2MUEwQjVGMTRCMzY4ODJCNDNEQTJGMDk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTVGQzYwNzJBNEE2OTBBNjFBMEI1RjE0QjM2ODgyQjQzREEy
RjA5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMDUxNzdhLWE1MDAtNDk5Ni1i
M2ZmLTcwYzE0NGVkZmVjZS8wLzM0MzMyZTMyMzQzODJlMzIzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv41jANBgkqhkiG
9w0BAQsFAAOCAQEAcwN09CMaNJ7eH3ONIn105fQ7kavubgwh13QhpMBUuQzTqp83
edEYFbzLP7/RuvMDIg37mETd2sYgk0NWeSGCwWQT+9dnVTqmE5ydAJ43FcTesYC9
vG4O7S/0cKOtAZw35fDsllzshHur025S9viOJsE9gx0SY6Pkm3dlzOfNVhS/r4Bi
uEhMFpMrf/V97M2G+aTn3qiqds6lM1EfrGHhPdNN+Jxzb/o+mTShaqCVNZd4G1Mf
V2h2sFFPeV+CzukOXczpSjj6ksFGjc8mK5SLYSGIhsagX3hbOnHNYZI0Jm8NQY+j
iETxA/U75mD1lDChOHLjh4DqVm/veSkfWfzWPQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:20:35 2025 by rpki-client