Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa
File: 3230322e3135342e33322e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier: DXBBTTa5VR7TK6Q1LOLMBpTKsjoeuaRI9YBN3Kwe908=
Subject key identifier: C4:5E:B2:F1:ED:F5:FF:9C:31:B3:11:FF:79:02:C3:AB:AB:E1:16:2C
Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial: 4EE5BB0D14B67981EC02F47B697E3F5D302010EB
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa
Signing time: Wed 21 Aug 2024 11:00:50 +0000
ROA not before: Wed 21 Aug 2024 10:55:50 +0000
ROA not after: Wed 20 Aug 2025 11:00:50 +0000
asID: 4434
IP address blocks: 202.154.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e5:bb:0d:14:b6:79:81:ec:02:f4:7b:69:7e:3f:5d:30:20:10:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Validity
Not Before: Aug 21 10:55:50 2024 GMT
Not After : Aug 20 11:00:50 2025 GMT
Subject: CN=C45EB2F1EDF5FF9C31B311FF7902C3ABABE1162C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:a1:87:e1:57:b6:37:f1:ab:8c:e9:85:8b:
0c:48:28:b7:bb:99:20:ea:ad:42:b2:c7:34:ab:a8:
8c:b1:88:a1:ec:a1:88:7f:a3:0b:44:24:af:14:d8:
46:3d:b8:f1:30:de:00:17:b1:bd:bc:8a:40:40:a2:
a0:99:a0:2c:28:3d:53:81:7c:b6:1f:f0:ad:cf:94:
c2:b3:8c:27:c0:ee:12:e7:11:75:f9:e0:d3:b5:26:
ec:8b:8c:a0:0a:46:d1:65:b8:1e:8a:99:52:29:bf:
22:78:10:93:e3:46:3a:fa:88:31:af:98:f4:ec:6c:
75:94:c1:89:51:75:58:6f:fd:be:71:27:94:aa:c6:
aa:bc:8d:6d:c3:4f:4f:7f:9a:a9:26:3e:30:f9:d5:
82:6e:9a:06:40:9e:a9:08:ba:ac:b9:c3:fb:55:19:
56:5d:c7:cc:76:12:61:1e:33:f1:97:c7:c5:61:08:
0c:8f:d7:e8:eb:35:75:c1:b7:25:3a:af:b9:ac:75:
b3:23:b9:95:62:72:d7:b5:c6:be:48:92:7a:6a:35:
51:7a:db:d4:9c:87:18:cd:9b:29:cc:63:39:b3:42:
9d:d8:3a:9b:09:5d:8d:12:44:6d:f7:5b:af:6d:18:
ac:b1:d8:29:2b:2d:f3:81:dc:8a:6a:23:c5:9f:d5:
28:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5E:B2:F1:ED:F5:FF:9C:31:B3:11:FF:79:02:C3:AB:AB:E1:16:2C
X509v3 Authority Key Identifier:
keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.32.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:8f:c7:f8:58:c5:1a:31:79:d3:79:0a:29:77:67:d1:b3:f3:
61:de:20:61:12:9e:8a:15:a2:3d:af:e6:6a:e5:c5:3f:5c:d5:
98:25:0e:39:31:ca:52:45:f5:fb:35:2d:ef:6d:65:7c:e6:eb:
a4:21:9b:54:55:a5:8c:40:51:a3:c7:d8:d1:83:5f:42:67:e4:
69:66:a6:5a:af:f2:be:15:3b:93:68:a6:7f:d5:fc:f0:e2:4f:
a2:9e:9d:15:ba:de:3f:32:c4:93:3c:f0:73:5a:88:37:da:e2:
c4:00:d8:7c:1e:0a:49:15:c2:28:42:29:d6:e2:69:3b:53:89:
1c:c7:2b:e7:c5:2f:4e:27:e2:3d:05:26:32:e9:7e:38:97:4f:
64:0d:97:d3:7d:11:7e:2f:01:26:b8:49:91:75:55:68:7b:51:
28:72:2d:7a:93:f0:a9:c0:69:19:0a:aa:f0:c4:9c:32:b3:ca:
fe:f4:82:80:38:25:71:56:89:75:1a:4f:a3:7b:1e:cb:5b:8a:
9c:81:18:36:ac:a0:f8:7d:72:8f:d1:5b:c0:30:7d:e6:07:97:
3d:87:e0:0a:84:3b:68:1e:c5:77:ee:f4:5b:8c:85:bd:a2:41:
a0:74:1c:a9:d7:4d:46:33:d2:5e:a2:bc:e6:8e:92:74:f3:00:
f7:33:59:2f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUTuW7DRS2eYHsAvR7aX4/XTAgEOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5
QUU5MjdGNjAeFw0yNDA4MjExMDU1NTBaFw0yNTA4MjAxMTAwNTBaMDMxMTAvBgNV
BAMTKEM0NUVCMkYxRURGNUZGOUMzMUIzMTFGRjc5MDJDM0FCQUJFMTE2MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqKGH4Ve2N/GrjOmFiwxIKLe7
mSDqrUKyxzSrqIyxiKHsoYh/owtEJK8U2EY9uPEw3gAXsb28ikBAoqCZoCwoPVOB
fLYf8K3PlMKzjCfA7hLnEXX54NO1JuyLjKAKRtFluB6KmVIpvyJ4EJPjRjr6iDGv
mPTsbHWUwYlRdVhv/b5xJ5Sqxqq8jW3DT09/mqkmPjD51YJumgZAnqkIuqy5w/tV
GVZdx8x2EmEeM/GXx8VhCAyP1+jrNXXBtyU6r7msdbMjuZVicte1xr5IknpqNVF6
29SchxjNmynMYzmzQp3YOpsJXY0SRG33W69tGKyx2CkrLfOB3IpqI8Wf1ShrAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUxF6y8e31/5wxsxH/eQLDq6vhFiwwHwYDVR0j
BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG
MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5
MjdGNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05
MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMzMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmiAwDQYJKoZIhvcN
AQELBQADggEBAK6Px/hYxRoxedN5Cil3Z9Gz82HeIGESnooVoj2v5mrlxT9c1Zgl
DjkxylJF9fs1Le9tZXzm66Qhm1RVpYxAUaPH2NGDX0Jn5Glmplqv8r4VO5Nopn/V
/PDiT6KenRW63j8yxJM88HNaiDfa4sQA2HweCkkVwihCKdbiaTtTiRzHK+fFL04n
4j0FJjLpfjiXT2QNl9N9EX4vASa4SZF1VWh7UShyLXqT8KnAaRkKqvDEnDKzyv70
goA4JXFWiXUaT6N7HstbipyBGDasoPh9co/RW8AwfeYHlz2H4AqEO2gexXfu9FuM
hb2iQaB0HKnXTUYz0l6ivOaOknTzAPczWS8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:06:19 2025 by rpki-client