Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
File: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (raw, json)
Hash identifier: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=
Subject key identifier: 0C:44:54:55:68:96:97:CE:B9:F5:82:99:61:AC:E6:32:EA:5B:6D:DA
Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Certificate serial: 73B8DAFD64A0F3B7AF2942D0E1A2A25315D5F741
Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
Signing time: Fri 07 Feb 2025 07:01:18 +0000
ROA not before: Fri 07 Feb 2025 06:56:18 +0000
ROA not after: Fri 06 Feb 2026 07:01:18 +0000
asID: 152399
IP address blocks: 36.50.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b8:da:fd:64:a0:f3:b7:af:29:42:d0:e1:a2:a2:53:15:d5:f7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Validity
Not Before: Feb 7 06:56:18 2025 GMT
Not After : Feb 6 07:01:18 2026 GMT
Subject: CN=0C445455689697CEB9F5829961ACE632EA5B6DDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:1f:5c:5f:cf:f6:83:50:b8:53:1c:f6:c3:
19:0a:2c:de:4c:14:c4:38:31:b8:1f:78:ef:5c:bb:
3e:a5:02:8a:f8:ff:4f:ec:12:95:19:51:0b:5c:a0:
ee:5a:72:17:59:08:a1:85:25:99:70:fe:bd:00:3b:
4c:80:5e:6b:81:34:27:87:9e:89:a8:82:6a:14:81:
53:ed:24:e3:ea:42:ea:05:5c:83:bd:f0:9e:3f:38:
11:7d:4e:dc:60:27:fd:65:e6:c1:a2:db:39:7a:84:
60:81:ee:67:a4:ab:e5:8c:04:05:28:b6:c8:12:21:
2b:aa:89:42:85:5e:d0:3f:7d:6a:6a:3e:5d:5a:3e:
a3:5e:01:75:d5:d5:20:48:82:44:b8:b1:8c:2c:d9:
93:a4:51:96:4d:25:2d:59:f1:d8:7c:a9:61:4c:1c:
a7:5d:d0:97:a4:a1:7d:c5:0d:20:cf:2b:57:59:20:
6a:ac:7f:fa:2d:6a:0b:c9:18:41:95:1a:8b:64:8f:
b7:9e:14:af:9a:95:00:ad:f3:cb:f2:c1:75:95:33:
b3:13:ba:b0:80:ee:59:3a:5e:7f:aa:dd:ff:dc:b4:
3f:3f:39:65:ec:3e:2c:dd:3c:37:ca:e7:ed:30:74:
fb:1d:fe:64:da:84:aa:60:3e:6b:d6:da:d2:0e:6a:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:44:54:55:68:96:97:CE:B9:F5:82:99:61:AC:E6:32:EA:5B:6D:DA
X509v3 Authority Key Identifier:
keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.97.0/24
Signature Algorithm: sha256WithRSAEncryption
76:7b:59:8e:43:1f:bb:c4:38:f7:b2:13:f1:d5:a5:af:1e:cc:
b7:c5:cb:43:f8:bd:ee:dc:db:4f:8f:ef:e2:eb:97:4c:78:0b:
0b:7e:d8:c1:2b:99:75:26:33:d6:4f:bb:d6:2a:d3:cc:cc:c9:
be:db:05:54:f7:04:37:f9:29:fa:50:a5:ae:ad:e0:aa:67:ca:
6c:71:7b:e1:61:a0:5a:f5:d4:ad:ab:a4:f9:3a:40:bb:99:4e:
51:35:28:b1:ba:66:50:bc:f9:7a:28:da:aa:50:12:ae:ca:21:
85:6f:2f:ed:57:7a:a3:d8:13:17:4c:ab:e6:49:91:c0:bf:ef:
f2:ef:53:b4:6c:a0:41:12:32:a3:55:67:03:59:20:e3:c4:97:
7b:dd:f1:61:9f:ed:9b:87:ad:7d:63:32:e5:fc:99:b6:4e:61:
b3:93:74:85:74:35:00:69:34:e9:4f:a9:fc:8c:eb:ba:47:05:
07:75:1f:d7:a6:cc:c4:54:38:6b:98:0b:e8:16:71:fb:db:76:
51:26:91:b3:65:89:18:e6:33:39:f0:b4:41:9b:b6:54:f8:2e:
53:3e:e7:9c:2e:49:72:ce:e9:54:48:69:6a:9d:e7:e0:e3:6d:
15:99:8a:64:42:38:80:69:c2:21:6f:00:da:ce:dc:3b:60:cd:
63:93:07:89
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUc7ja/WSg87evKULQ4aKiUxXV90EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0
ODRCM0ZEQTAeFw0yNTAyMDcwNjU2MThaFw0yNjAyMDYwNzAxMThaMDMxMTAvBgNV
BAMTKDBDNDQ1NDU1Njg5Njk3Q0VCOUY1ODI5OTYxQUNFNjMyRUE1QjZEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClox9cX8/2g1C4Uxz2wxkKLN5M
FMQ4MbgfeO9cuz6lAor4/0/sEpUZUQtcoO5achdZCKGFJZlw/r0AO0yAXmuBNCeH
nomogmoUgVPtJOPqQuoFXIO98J4/OBF9TtxgJ/1l5sGi2zl6hGCB7mekq+WMBAUo
tsgSISuqiUKFXtA/fWpqPl1aPqNeAXXV1SBIgkS4sYws2ZOkUZZNJS1Z8dh8qWFM
HKdd0JekoX3FDSDPK1dZIGqsf/otagvJGEGVGotkj7eeFK+alQCt88vywXWVM7MT
urCA7lk6Xn+q3f/ctD8/OWXsPizdPDfK5+0wdPsd/mTahKpgPmvW2tIOagyzAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUDERUVWiWl8659YKZYazmMupbbdowHwYDVR0j
BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx
RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC
M0ZEQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4YzA3NDQxLWNkOWQtNGQ4NS1h
YWI0LTY1ZjVkZDRlZDdlMC8wLzMzMzYyZTM1MzAyZTM5MzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzMzM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkMmEwDQYJKoZIhvcN
AQELBQADggEBAHZ7WY5DH7vEOPeyE/HVpa8ezLfFy0P4ve7c20+P7+Lrl0x4Cwt+
2MErmXUmM9ZPu9Yq08zMyb7bBVT3BDf5KfpQpa6t4Kpnymxxe+FhoFr11K2rpPk6
QLuZTlE1KLG6ZlC8+Xoo2qpQEq7KIYVvL+1XeqPYExdMq+ZJkcC/7/LvU7RsoEES
MqNVZwNZIOPEl3vd8WGf7ZuHrX1jMuX8mbZOYbOTdIV0NQBpNOlPqfyM67pHBQd1
H9emzMRUOGuYC+gWcfvbdlEmkbNliRjmMznwtEGbtlT4LlM+55wuSXLO6VRIaWqd
5+DjbRWZimRCOIBpwiFvANrO3DtgzWOTB4k=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:51 2025 by rpki-client