Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa
File: 3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa (raw, json)
Hash identifier: 89fPROhZUZi50QkEt+kZi8eXkrlknS00tp8+CAUNlvs=
Subject key identifier: A9:26:0E:3D:17:0F:7C:32:3C:9B:05:77:E0:6A:2B:CE:AB:D1:52:AF
Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial: 7C9EBDF2909EE9A71C67CA5523BFC82FACA8A59E
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa
Signing time: Wed 11 Sep 2024 11:00:01 +0000
ROA not before: Wed 11 Sep 2024 10:55:01 +0000
ROA not after: Wed 10 Sep 2025 11:00:01 +0000
asID: 141607
IP address blocks: 202.154.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:9e:bd:f2:90:9e:e9:a7:1c:67:ca:55:23:bf:c8:2f:ac:a8:a5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Validity
Not Before: Sep 11 10:55:01 2024 GMT
Not After : Sep 10 11:00:01 2025 GMT
Subject: CN=A9260E3D170F7C323C9B0577E06A2BCEABD152AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:3d:24:a7:83:49:41:f7:28:67:55:97:84:
81:d2:38:ec:51:24:43:60:3a:c6:1a:5a:d0:0f:89:
6d:e3:27:79:1b:d2:d4:27:12:84:51:f8:16:77:4d:
49:9e:bc:bd:50:09:a4:89:5b:09:7b:9a:52:31:7d:
34:34:f8:85:1c:e7:35:25:c8:3b:6a:77:be:7a:fb:
68:e4:c3:60:71:69:e1:7f:8d:6d:71:fe:81:df:20:
32:15:52:21:20:81:da:cf:de:18:aa:20:a4:2e:96:
c8:5f:9d:fb:44:e7:aa:1d:9e:54:0e:65:07:c4:5d:
9b:1a:da:e7:5c:f2:f2:89:8b:26:03:65:71:47:85:
5d:11:5b:ba:ca:e4:a0:83:a7:d1:7d:f1:b0:80:85:
2d:e7:08:1a:5a:2b:36:f2:f6:21:cf:cf:26:cb:ca:
33:a8:0f:7d:9c:2e:36:6f:6c:a2:0f:55:20:32:4f:
5e:a6:2f:ca:d4:40:61:fc:00:c2:0c:2c:7f:6f:e1:
9c:14:83:2f:70:ee:da:26:6b:aa:f6:c7:68:a8:48:
a8:16:e2:63:c1:85:71:b2:41:0f:c6:21:be:54:10:
32:86:f1:f7:2f:05:58:ae:d6:95:52:04:26:bd:ae:
1e:e3:c1:40:72:94:fe:70:98:b2:7e:9c:03:67:01:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:26:0E:3D:17:0F:7C:32:3C:9B:05:77:E0:6A:2B:CE:AB:D1:52:AF
X509v3 Authority Key Identifier:
keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31372e302f32342d3234203d3e20313431363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.17.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8c:c5:cc:b5:ea:a3:97:4b:f8:12:2a:6a:27:21:8e:26:b1:
91:d8:7d:b6:11:5a:6c:32:33:17:fa:b1:f4:73:c4:84:02:4e:
aa:09:26:88:b7:aa:da:d1:33:6a:d5:e4:6d:1c:9f:9d:ad:1f:
d2:14:82:77:3a:83:16:c7:01:0b:ad:cc:2e:82:af:63:34:4a:
ef:d0:67:9d:94:09:4e:1f:64:b5:b5:5f:70:05:bf:d4:cb:d7:
c3:f4:c5:7b:bb:7d:07:df:bf:10:33:98:2c:ed:fe:2b:e2:52:
f5:8b:22:2d:c1:86:bd:3f:b4:ab:51:57:b0:1c:05:d9:33:e4:
ea:8a:d5:9b:20:4c:95:02:0f:2c:6d:47:68:99:9a:aa:26:08:
00:a1:9e:e5:fe:30:00:7d:b7:bb:45:40:e4:db:e2:fc:19:fb:
70:ec:de:b7:b7:a4:8c:0c:b9:bb:8e:9e:7d:1f:bb:0d:a8:4f:
0f:9e:5c:53:ec:f3:0d:9b:47:2c:2d:01:e7:c6:bc:2a:da:2e:
d6:ba:5d:37:39:f3:80:8f:08:f7:78:90:4d:52:0c:f4:b1:f1:
14:48:f0:3a:c9:11:c1:d1:ec:1d:05:b0:74:59:a8:21:45:73:
7a:b7:1f:24:7d:ee:98:bc:27:fb:e1:96:de:21:e4:85:26:f7:
e9:68:75:ac
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfJ698pCe6accZ8pVI7/IL6yopZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5
QUU5MjdGNjAeFw0yNDA5MTExMDU1MDFaFw0yNTA5MTAxMTAwMDFaMDMxMTAvBgNV
BAMTKEE5MjYwRTNEMTcwRjdDMzIzQzlCMDU3N0UwNkEyQkNFQUJEMTUyQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHj0kp4NJQfcoZ1WXhIHSOOxR
JENgOsYaWtAPiW3jJ3kb0tQnEoRR+BZ3TUmevL1QCaSJWwl7mlIxfTQ0+IUc5zUl
yDtqd756+2jkw2BxaeF/jW1x/oHfIDIVUiEggdrP3hiqIKQulshfnftE56odnlQO
ZQfEXZsa2udc8vKJiyYDZXFHhV0RW7rK5KCDp9F98bCAhS3nCBpaKzby9iHPzybL
yjOoD32cLjZvbKIPVSAyT16mL8rUQGH8AMIMLH9v4ZwUgy9w7toma6r2x2ioSKgW
4mPBhXGyQQ/GIb5UEDKG8fcvBViu1pVSBCa9rh7jwUBylP5wmLJ+nANnAYdTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqSYOPRcPfDI8mwV34GorzqvRUq8wHwYDVR0j
BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG
MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5
MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05
MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypoRMA0GCSqG
SIb3DQEBCwUAA4IBAQABjMXMteqjl0v4EipqJyGOJrGR2H22EVpsMjMX+rH0c8SE
Ak6qCSaIt6ra0TNq1eRtHJ+drR/SFIJ3OoMWxwELrcwugq9jNErv0GedlAlOH2S1
tV9wBb/Uy9fD9MV7u30H378QM5gs7f4r4lL1iyItwYa9P7SrUVewHAXZM+TqitWb
IEyVAg8sbUdomZqqJggAoZ7l/jAAfbe7RUDk2+L8Gftw7N63t6SMDLm7jp59H7sN
qE8PnlxT7PMNm0csLQHnxrwq2i7Wul03OfOAjwj3eJBNUgz0sfEUSPA6yRHB0ewd
BbB0WaghRXN6tx8kfe6YvCf74ZbeIeSFJvfpaHWs
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:59 2025 by rpki-client