Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139322e302f32312d3234203d3e203338313534.roa
File: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (raw, json)
Hash identifier: x0OQqyyh84xdArHozU+dSgyqUpzyJ86TNYhGyZIH4/4=
Subject key identifier: E0:79:46:D5:84:94:76:5C:EE:67:B5:0D:22:25:4B:4B:51:7C:08:91
Certificate issuer: /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73
Certificate serial: 642F87D2AF3E29191CE286173946CEB29704CE18
Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139322e302f32312d3234203d3e203338313534.roa
Signing time: Fri 31 Jan 2025 08:00:01 +0000
ROA not before: Fri 31 Jan 2025 07:55:01 +0000
ROA not after: Fri 30 Jan 2026 08:00:01 +0000
asID: 38154
IP address blocks: 116.58.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2f:87:d2:af:3e:29:19:1c:e2:86:17:39:46:ce:b2:97:04:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73
Validity
Not Before: Jan 31 07:55:01 2025 GMT
Not After : Jan 30 08:00:01 2026 GMT
Subject: CN=E07946D58494765CEE67B50D22254B4B517C0891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:e8:15:38:48:d3:70:b4:ca:a7:37:2a:a1:
48:84:a9:ae:cd:d1:2f:8c:ca:f2:f5:35:77:48:9b:
99:18:06:8d:72:a5:5e:47:ba:d2:74:98:08:a5:8b:
c5:3f:c7:d4:fc:d6:aa:3e:65:f0:78:dc:a7:1e:f1:
a9:32:48:57:62:b3:49:7b:c2:90:76:6f:75:42:3a:
e4:b5:20:ae:a1:2a:17:3b:ba:f9:ae:7b:5a:65:a0:
63:c5:7f:07:e5:85:9a:67:2e:ef:6e:38:f0:a5:da:
41:ad:43:dc:bd:7a:78:3e:79:da:fb:d0:50:b1:21:
b6:4e:66:b4:b9:d8:58:36:47:96:82:48:c1:74:cf:
16:25:7e:70:41:df:b4:9b:df:97:d0:12:cc:f4:a5:
51:82:03:dd:76:00:89:fc:0e:3a:64:dc:d5:9a:b2:
86:f2:db:cf:4a:df:a6:fd:4c:c9:bb:44:88:54:96:
6d:34:a2:70:80:c3:fb:ca:82:58:cb:e5:87:48:7f:
32:47:03:31:91:2d:f6:1d:07:1d:50:87:ff:e0:45:
8c:31:e0:d0:31:ac:35:38:f3:c0:ae:76:fb:2a:3e:
fa:59:b9:c3:6d:60:ab:aa:b2:0a:76:46:3e:2b:ce:
0c:c6:2d:1d:fe:12:5c:58:d0:8f:d5:22:10:16:fb:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:79:46:D5:84:94:76:5C:EE:67:B5:0D:22:25:4B:4B:51:7C:08:91
X509v3 Authority Key Identifier:
keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139322e302f32312d3234203d3e203338313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.58.192.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:78:9d:ab:9f:da:80:41:e5:76:26:a0:5a:cb:21:89:0c:38:
7f:7a:ae:ca:12:f8:bc:f9:ba:9e:47:cf:37:13:0a:19:e4:2f:
85:d3:e5:48:8c:85:6b:0b:fb:43:09:76:b4:89:4a:f8:35:40:
a2:0d:1b:d6:13:5e:42:cf:e1:cc:e6:ba:11:9a:69:1e:79:0f:
cb:86:19:34:b8:6f:18:f3:b8:4e:47:f8:43:fc:e3:90:89:14:
20:01:07:bf:ef:49:bd:93:08:77:83:4e:65:a4:d1:8f:a4:43:
5f:ba:bd:f1:79:23:c5:50:35:27:ac:28:39:1b:13:1e:b3:91:
b8:e3:22:42:90:fb:32:72:8c:10:96:9e:7c:29:85:6e:e6:26:
79:3b:b0:fc:d6:54:60:1d:62:e0:6e:2e:b0:e8:9d:6a:f0:52:
f6:be:0c:fa:6d:a2:3b:68:19:42:7f:c8:30:18:d8:1d:b0:f3:
2c:29:7d:ce:d5:cd:1d:db:aa:79:a7:5a:a9:a0:4f:4a:cd:8f:
c4:56:89:f9:a4:10:17:29:e6:cf:de:c0:03:8d:ed:b0:54:33:
fb:c5:8b:fe:41:1b:cf:7c:42:a7:ee:3c:79:65:48:d9:55:d9:
ed:8d:14:9c:e0:4d:4e:0d:ad:b2:55:09:81:f3:ce:44:8c:0c:
3a:3b:e9:5b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZC+H0q8+KRkc4oYXOUbOspcEzhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgz
Q0QwN0M3MzAeFw0yNTAxMzEwNzU1MDFaFw0yNjAxMzAwODAwMDFaMDMxMTAvBgNV
BAMTKEUwNzk0NkQ1ODQ5NDc2NUNFRTY3QjUwRDIyMjU0QjRCNTE3QzA4OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwg+gVOEjTcLTKpzcqoUiEqa7N
0S+MyvL1NXdIm5kYBo1ypV5HutJ0mAili8U/x9T81qo+ZfB43Kce8akySFdis0l7
wpB2b3VCOuS1IK6hKhc7uvmue1ploGPFfwflhZpnLu9uOPCl2kGtQ9y9eng+edr7
0FCxIbZOZrS52Fg2R5aCSMF0zxYlfnBB37Sb35fQEsz0pVGCA912AIn8Djpk3NWa
soby289K36b9TMm7RIhUlm00onCAw/vKgljL5YdIfzJHAzGRLfYdBx1Qh//gRYwx
4NAxrDU488CudvsqPvpZucNtYKuqsgp2Rj4rzgzGLR3+ElxY0I/VIhAW+53pAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU4HlG1YSUdlzuZ7UNIiVLS1F8CJEwHwYDVR0j
BBgwFoAUrNoCL38+KKbhMdqA1MQY6DzQfHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmViYjY4YS04YTVkLTQxMWMtOGJiMy04MzM0MjMxMDBiNmUvMC9BQ0RBMDIyRjdG
M0UyOEE2RTEzMURBODBENEM0MThFODNDRDA3QzczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgzQ0Qw
N0M3My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmZWJiNjhhLThhNWQtNDExYy04
YmIzLTgzMzQyMzEwMGI2ZS8wLzMxMzEzNjJlMzUzODJlMzEzOTMyMmUzMDJmMzIz
MTJkMzIzNDIwM2QzZTIwMzMzODMxMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3Q6wDANBgkqhkiG
9w0BAQsFAAOCAQEAW3idq5/agEHldiagWsshiQw4f3quyhL4vPm6nkfPNxMKGeQv
hdPlSIyFawv7Qwl2tIlK+DVAog0b1hNeQs/hzOa6EZppHnkPy4YZNLhvGPO4Tkf4
Q/zjkIkUIAEHv+9JvZMId4NOZaTRj6RDX7q98XkjxVA1J6woORsTHrORuOMiQpD7
MnKMEJaefCmFbuYmeTuw/NZUYB1i4G4usOidavBS9r4M+m2iO2gZQn/IMBjYHbDz
LCl9ztXNHduqeadaqaBPSs2PxFaJ+aQQFynmz97AA43tsFQz+8WL/kEbz3xCp+48
eWVI2VXZ7Y0UnOBNTg2tslUJgfPORIwMOjvpWw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:42 2025 by rpki-client