Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa
File: 3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa (raw, json)
Hash identifier: NHYWr2woBW9iMoKm8UJ/j001iZnX8w4XNG1fwCnHf/E=
Subject key identifier: E3:11:05:F0:AA:F7:C3:82:83:0E:F1:1A:E5:65:95:57:39:DD:1B:AD
Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial: 471CBFBA2531C217171F1DB61A0F82B12E568008
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa
Signing time: Tue 04 Jun 2024 10:16:50 +0000
ROA not before: Tue 04 Jun 2024 10:11:50 +0000
ROA not after: Tue 03 Jun 2025 10:16:50 +0000
asID: 149707
IP address blocks: 202.154.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1c:bf:ba:25:31:c2:17:17:1f:1d:b6:1a:0f:82:b1:2e:56:80:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Validity
Not Before: Jun 4 10:11:50 2024 GMT
Not After : Jun 3 10:16:50 2025 GMT
Subject: CN=E31105F0AAF7C382830EF11AE565955739DD1BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:96:3c:76:a7:68:0d:01:29:35:50:c3:bd:
e1:c5:a7:36:69:38:a7:b7:ec:47:69:36:27:f8:3c:
41:40:36:6f:cf:76:1a:74:c9:3e:cf:6b:eb:84:16:
84:4c:19:07:39:28:83:3b:4c:ef:cd:67:63:8d:76:
0a:9f:58:70:da:30:46:ff:31:49:9f:ff:6e:52:31:
7a:f0:08:03:2c:b6:b7:0d:1c:ae:fe:0d:2b:e9:48:
ff:43:dd:d2:4d:f4:7a:fa:40:05:58:ac:62:a4:54:
fd:d6:e0:aa:da:b3:e8:b2:ae:3c:a1:df:e1:8f:1b:
0c:f8:09:aa:34:3f:43:41:93:c6:fb:1a:c5:35:be:
19:bf:56:9e:2a:37:64:4a:f8:1c:f2:fb:47:ea:da:
c5:06:a4:8d:0d:0e:10:27:5d:c1:52:df:78:0d:9b:
ff:3e:38:68:9c:11:c1:82:74:29:7d:c1:9c:f9:f2:
50:e5:f4:b0:cf:9c:1a:21:ef:2f:00:28:a4:fe:1e:
22:48:4f:bd:6f:b8:f7:0e:cc:f6:d8:45:a7:eb:bb:
9d:c7:bd:cd:ce:b4:4d:5c:13:3d:01:3b:0d:44:44:
84:73:36:7e:14:aa:a5:80:0d:de:cc:51:e3:df:00:
c2:11:b5:e7:78:75:5b:c6:b5:69:a4:58:2b:e9:e0:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:11:05:F0:AA:F7:C3:82:83:0E:F1:1A:E5:65:95:57:39:DD:1B:AD
X509v3 Authority Key Identifier:
keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.12.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:49:c6:bc:a0:57:d5:23:c3:7e:fc:43:1a:f0:51:99:b6:bb:
c0:85:20:c5:b4:1d:54:50:62:4b:43:c3:24:34:e9:bf:30:9c:
ae:c3:b1:a2:b2:3c:a2:15:6b:d6:89:75:f8:5d:e7:ca:86:6f:
55:6b:8e:d7:90:d6:02:10:68:8d:6f:0d:7b:a9:f1:31:0d:57:
16:35:43:dc:ef:93:9e:33:51:a1:23:95:26:c8:40:12:11:68:
47:a8:d3:94:07:0f:23:f9:3c:38:52:59:86:81:2d:dc:8f:49:
31:62:06:4d:2b:b4:39:fa:c0:f6:97:2b:6e:7d:16:c9:c7:b9:
a6:92:e3:c8:a2:d2:39:c1:d1:8d:83:8c:aa:4d:15:7c:80:e4:
3e:55:5a:55:dc:64:9c:c5:ce:a7:3f:e3:9c:30:5b:77:75:11:
b4:99:94:9a:43:b5:83:ac:5f:3c:99:d4:25:45:7a:3c:de:4d:
4f:b3:e8:2d:ed:27:3a:f0:89:b5:c3:8c:53:10:a8:2c:50:34:
e9:84:6e:b7:0b:d5:e7:3a:b6:65:26:da:9b:d2:cc:73:a6:c0:
8d:6c:55:ea:85:eb:cd:f6:45:26:97:5d:fc:8a:30:f1:95:49:
f3:d9:c8:3e:ea:f5:b8:29:5a:cf:9f:a3:ae:97:3c:25:28:d4:
f6:8b:0d:7c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURxy/uiUxwhcXHx22Gg+CsS5WgAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5
QUU5MjdGNjAeFw0yNDA2MDQxMDExNTBaFw0yNTA2MDMxMDE2NTBaMDMxMTAvBgNV
BAMTKEUzMTEwNUYwQUFGN0MzODI4MzBFRjExQUU1NjU5NTU3MzlERDFCQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLZY8dqdoDQEpNVDDveHFpzZp
OKe37EdpNif4PEFANm/Pdhp0yT7Pa+uEFoRMGQc5KIM7TO/NZ2ONdgqfWHDaMEb/
MUmf/25SMXrwCAMstrcNHK7+DSvpSP9D3dJN9Hr6QAVYrGKkVP3W4Kras+iyrjyh
3+GPGwz4Cao0P0NBk8b7GsU1vhm/Vp4qN2RK+Bzy+0fq2sUGpI0NDhAnXcFS33gN
m/8+OGicEcGCdCl9wZz58lDl9LDPnBoh7y8AKKT+HiJIT71vuPcOzPbYRafru53H
vc3OtE1cEz0BOw1ERIRzNn4UqqWADd7MUePfAMIRted4dVvGtWmkWCvp4GLXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU4xEF8Kr3w4KDDvEa5WWVVzndG60wHwYDVR0j
BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG
MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5
MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05
MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypoMMA0GCSqG
SIb3DQEBCwUAA4IBAQC4Sca8oFfVI8N+/EMa8FGZtrvAhSDFtB1UUGJLQ8MkNOm/
MJyuw7GisjyiFWvWiXX4XefKhm9Va47XkNYCEGiNbw17qfExDVcWNUPc75OeM1Gh
I5UmyEASEWhHqNOUBw8j+Tw4UlmGgS3cj0kxYgZNK7Q5+sD2lytufRbJx7mmkuPI
otI5wdGNg4yqTRV8gOQ+VVpV3GScxc6nP+OcMFt3dRG0mZSaQ7WDrF88mdQlRXo8
3k1Ps+gt7Sc68Im1w4xTEKgsUDTphG63C9XnOrZlJtqb0sxzpsCNbFXqhevN9kUm
l138ijDxlUnz2cg+6vW4KVrPn6OulzwlKNT2iw18
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:23 2025 by rpki-client