Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa
File: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (raw, json)
Hash identifier: bBnfqhprKZxO7GNHi6JFSi7ubIWOVMTy7/ydlUAr+qE=
Subject key identifier: 7A:8E:ED:CF:11:A8:79:94:0D:BC:8A:00:0D:EA:B1:72:CB:C0:38:BC
Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336
Certificate serial: 12E75E094F94864304B6376BEA552E8CF915F6AB
Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa
Signing time: Sun 02 Feb 2025 07:00:02 +0000
ROA not before: Sun 02 Feb 2025 06:55:02 +0000
ROA not after: Sun 01 Feb 2026 07:00:02 +0000
asID: 142375
IP address blocks: 203.145.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e7:5e:09:4f:94:86:43:04:b6:37:6b:ea:55:2e:8c:f9:15:f6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336
Validity
Not Before: Feb 2 06:55:02 2025 GMT
Not After : Feb 1 07:00:02 2026 GMT
Subject: CN=7A8EEDCF11A879940DBC8A000DEAB172CBC038BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:6f:ea:aa:5a:d0:48:b3:5a:c0:92:af:57:
00:1d:c8:db:d5:e1:d4:06:17:b4:75:5e:21:d1:a5:
34:e1:aa:a2:5d:12:bc:6c:d0:f5:c1:8d:24:9e:ce:
32:4b:60:99:fb:73:24:36:51:64:15:b9:cc:dc:0f:
d3:e9:65:e9:6e:e9:5f:f6:d4:91:98:9b:c2:f2:85:
46:de:82:55:31:a7:04:e2:b4:00:9c:8f:e3:7c:36:
5f:ff:01:8e:65:84:50:ab:05:79:80:3a:92:44:d4:
ee:88:b3:e0:67:7d:e8:1d:62:c1:d8:36:8a:ae:87:
12:16:a2:2c:c7:45:7d:9d:fa:10:95:59:bd:7e:20:
8e:3e:41:38:f1:f4:a9:bb:67:af:a1:84:e1:01:9e:
55:8c:94:00:b3:f3:91:9a:45:55:16:a7:2f:b2:da:
56:1b:cc:7c:2b:f5:b5:a0:8c:c9:71:b2:3c:b4:82:
ea:89:f0:7a:87:95:bb:26:ce:70:01:ae:32:ba:df:
5a:e1:4b:05:a4:dd:6b:45:63:9d:64:ad:5c:71:cc:
e8:18:42:9b:75:dd:15:b9:1a:69:b0:5b:9f:55:94:
db:51:76:0f:46:11:c8:b5:96:9d:39:b7:ab:12:b4:
c3:d5:79:90:44:01:d8:01:59:af:5f:ec:fb:e4:15:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:ED:CF:11:A8:79:94:0D:BC:8A:00:0D:EA:B1:72:CB:C0:38:BC
X509v3 Authority Key Identifier:
keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.145.58.0/24
Signature Algorithm: sha256WithRSAEncryption
57:86:05:01:5b:6c:14:a5:db:47:d5:bb:01:d1:c2:2b:fc:0c:
63:ff:a2:22:09:c0:0f:08:98:b9:47:89:00:d9:7d:38:0d:cf:
a4:31:a4:e6:9d:ed:d4:ef:ab:aa:50:b4:1e:64:85:2b:b6:3b:
70:0d:30:b3:2a:8c:35:6c:a4:41:e0:56:0b:dd:d5:da:90:68:
5c:23:d9:37:89:c7:42:89:9b:2b:0d:3c:a4:49:e1:66:01:d6:
5a:0d:00:7d:fe:b6:0f:e3:fd:1e:6b:c6:6d:82:2a:60:32:ab:
1d:06:66:49:5f:81:30:ad:d4:51:19:1f:f5:b2:01:b5:6e:1e:
cc:de:9a:3d:31:3c:5b:37:e1:dd:1c:99:f2:cc:89:2d:35:76:
d7:2e:3a:87:67:bc:64:f1:be:64:04:e7:ae:0b:80:3d:ed:68:
2f:2a:d0:86:25:1c:c6:95:3f:85:2b:6a:1c:c3:cc:4f:2d:59:
5d:0b:9e:62:38:47:38:15:33:a9:f2:fa:2c:56:91:05:8a:0f:
cf:a8:1b:5f:54:a9:fc:a1:7b:cf:ed:54:c2:cf:0c:cc:e6:4e:
bf:81:aa:9d:51:ff:fc:7c:0a:d2:ff:d6:59:e4:10:c2:69:4a:
c8:e6:67:1e:68:e0:53:15:51:ad:8f:a5:c1:81:3a:77:5b:0b:
8a:70:10:24
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEudeCU+UhkMEtjdr6lUujPkV9qswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC
NTMwNjMzNjAeFw0yNTAyMDIwNjU1MDJaFw0yNjAyMDEwNzAwMDJaMDMxMTAvBgNV
BAMTKDdBOEVFRENGMTFBODc5OTQwREJDOEEwMDBERUFCMTcyQ0JDMDM4QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfG/qqlrQSLNawJKvVwAdyNvV
4dQGF7R1XiHRpTThqqJdErxs0PXBjSSezjJLYJn7cyQ2UWQVuczcD9PpZelu6V/2
1JGYm8LyhUbeglUxpwTitACcj+N8Nl//AY5lhFCrBXmAOpJE1O6Is+BnfegdYsHY
NoquhxIWoizHRX2d+hCVWb1+II4+QTjx9Km7Z6+hhOEBnlWMlACz85GaRVUWpy+y
2lYbzHwr9bWgjMlxsjy0guqJ8HqHlbsmznABrjK631rhSwWk3WtFY51krVxxzOgY
Qpt13RW5GmmwW59VlNtRdg9GEci1lp05t6sStMPVeZBEAdgBWa9f7PvkFQH/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUeo7tzxGoeZQNvIoADeqxcsvAOLwwHwYDVR0j
BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2
ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw
NjMzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2YWEzYmViLTU3NjEtNGMzNC04
OGQzLTAxNWNjYzY0MDAyZi8wLzMyMzAzMzJlMzEzNDM1MmUzNTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy5E6MA0GCSqG
SIb3DQEBCwUAA4IBAQBXhgUBW2wUpdtH1bsB0cIr/Axj/6IiCcAPCJi5R4kA2X04
Dc+kMaTmne3U76uqULQeZIUrtjtwDTCzKow1bKRB4FYL3dXakGhcI9k3icdCiZsr
DTykSeFmAdZaDQB9/rYP4/0ea8ZtgipgMqsdBmZJX4EwrdRRGR/1sgG1bh7M3po9
MTxbN+HdHJnyzIktNXbXLjqHZ7xk8b5kBOeuC4A97WgvKtCGJRzGlT+FK2ocw8xP
LVldC55iOEc4FTOp8vosVpEFig/PqBtfVKn8oXvP7VTCzwzM5k6/gaqdUf/8fArS
/9ZZ5BDCaUrI5mceaOBTFVGtj6XBgTp3WwuKcBAk
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:39:31 2025 by rpki-client