Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37372e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37372e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: 9DQPSz8dPD4buS4lBZNVbR8e62TrznKJIf7Jo80b/eQ=
Subject key identifier: 87:6E:4E:0D:FA:C9:C1:88:9C:C4:38:8F:BE:56:CB:F7:34:9D:7D:5A
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 31B0306E34A48ACA688DBA33842A398A9F3C2F5C
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37372e302f32342d3234203d3e203137363731.roa
Signing time: Sat 15 Jun 2024 12:01:53 +0000
ROA not before: Sat 15 Jun 2024 11:56:53 +0000
ROA not after: Sat 14 Jun 2025 12:01:53 +0000
asID: 17671
IP address blocks: 202.47.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b0:30:6e:34:a4:8a:ca:68:8d:ba:33:84:2a:39:8a:9f:3c:2f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Jun 15 11:56:53 2024 GMT
Not After : Jun 14 12:01:53 2025 GMT
Subject: CN=876E4E0DFAC9C1889CC4388FBE56CBF7349D7D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:b9:c7:68:da:4a:f8:4b:95:44:65:6b:50:
b4:ef:ef:10:23:61:60:e8:83:9a:03:c8:9d:79:b9:
71:b0:41:b6:cc:5f:97:c8:d4:db:f9:7f:f7:c3:1d:
3c:ed:fc:a5:51:c2:41:47:63:e6:e4:c9:99:44:14:
65:aa:73:42:48:d7:47:4c:9c:bb:fd:1a:64:3c:e4:
20:5a:54:42:c1:1d:2b:cc:29:23:16:1b:05:22:a8:
a4:a3:a5:44:ad:19:63:96:97:99:a2:d9:96:02:b1:
a4:79:1b:29:13:36:b0:16:cc:b2:a6:25:3f:c0:2f:
99:44:c9:61:77:77:8b:dd:2d:04:2e:53:56:89:08:
ef:66:2d:65:7d:43:93:80:86:e7:a9:c0:eb:22:ff:
90:c6:97:1b:f1:68:05:a2:a4:57:17:94:82:36:0c:
d0:cc:10:d6:f3:6d:21:59:a5:15:97:a1:3d:27:69:
4e:12:7a:0d:00:60:17:72:8f:34:96:d5:a0:63:a8:
0f:16:58:47:9f:f3:4a:ec:b1:9e:88:79:85:9c:de:
d8:64:79:4f:f9:bc:39:0d:08:f9:a6:81:66:e7:e9:
a3:f8:6b:50:20:47:1a:10:3d:48:b6:ae:86:e6:65:
aa:e2:d6:b5:d8:39:12:46:8e:74:dd:a7:72:a3:13:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:4E:0D:FA:C9:C1:88:9C:C4:38:8F:BE:56:CB:F7:34:9D:7D:5A
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37372e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:44:6d:46:e9:60:b3:1e:0d:0d:8e:e5:57:72:71:ae:8d:66:
67:95:8d:6b:3e:8e:4b:f9:ab:49:63:7f:98:83:dd:de:aa:3a:
c0:65:e4:b3:2a:0a:c9:9c:a5:44:0a:2a:4a:e1:dc:8e:9e:48:
09:ee:e8:3c:50:73:ec:11:d8:86:40:54:e9:17:ff:73:a6:98:
b6:ad:6e:a7:b5:a9:50:a0:09:9c:6f:01:a8:fe:b5:e9:08:3c:
6e:8f:93:77:d7:06:e5:6c:6f:11:2c:05:84:a8:b6:94:e2:f3:
83:32:68:07:6c:b6:a0:73:10:a5:bf:da:1d:b9:83:04:74:fc:
94:67:d7:f1:28:bb:e3:67:e4:ed:0e:f9:d4:3c:15:dc:21:8d:
ef:d5:e1:80:39:0e:c9:f8:ec:ed:dc:02:b4:6d:bb:de:33:8f:
f3:43:7e:1f:04:e2:f2:a5:a7:59:00:63:7d:49:ed:58:68:49:
fd:5c:cb:36:33:da:6f:d5:c2:32:08:e6:c0:8f:c7:df:60:64:
2f:31:04:ae:55:d9:a1:fb:ba:11:54:5f:17:95:85:c6:8a:4c:
a8:78:c0:a1:09:52:5d:5e:6e:5b:44:53:0d:f6:ee:ea:2b:2c:
5c:9e:14:de:df:ea:b1:6d:4b:1c:90:a8:d3:36:4d:c4:19:43:
7e:f0:e5:cd
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUMbAwbjSkispojbozhCo5ip88L1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw
NTY0QUIyNTAeFw0yNDA2MTUxMTU2NTNaFw0yNTA2MTQxMjAxNTNaMDMxMTAvBgNV
BAMTKDg3NkU0RTBERkFDOUMxODg5Q0M0Mzg4RkJFNTZDQkY3MzQ5RDdENUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfjbnHaNpK+EuVRGVrULTv7xAj
YWDog5oDyJ15uXGwQbbMX5fI1Nv5f/fDHTzt/KVRwkFHY+bkyZlEFGWqc0JI10dM
nLv9GmQ85CBaVELBHSvMKSMWGwUiqKSjpUStGWOWl5mi2ZYCsaR5GykTNrAWzLKm
JT/AL5lEyWF3d4vdLQQuU1aJCO9mLWV9Q5OAhuepwOsi/5DGlxvxaAWipFcXlII2
DNDMENbzbSFZpRWXoT0naU4Seg0AYBdyjzSW1aBjqA8WWEef80rssZ6IeYWc3thk
eU/5vDkNCPmmgWbn6aP4a1AgRxoQPUi2robmZari1rXYORJGjnTdp3KjE2IjAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUh25ODfrJwYicxDiPvlbL9zSdfVowHwYDVR0j
BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND
RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0
QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL00wDQYJKoZIhvcN
AQELBQADggEBAD9EbUbpYLMeDQ2O5Vdyca6NZmeVjWs+jkv5q0ljf5iD3d6qOsBl
5LMqCsmcpUQKKkrh3I6eSAnu6DxQc+wR2IZAVOkX/3OmmLatbqe1qVCgCZxvAaj+
tekIPG6Pk3fXBuVsbxEsBYSotpTi84MyaAdstqBzEKW/2h25gwR0/JRn1/Eou+Nn
5O0O+dQ8Fdwhje/V4YA5Dsn47O3cArRtu94zj/NDfh8E4vKlp1kAY31J7VhoSf1c
yzYz2m/VwjII5sCPx99gZC8xBK5V2aH7uhFUXxeVhcaKTKh4wKEJUl1ebltEUw32
7uorLFyeFN7f6rFtSxyQqNM2TcQZQ37w5c0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:10 2025 by rpki-client