Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa
File: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier: z3oujUIzdkfwfVAu7GxNc2o8SfOMUyinAWnvZ5gqzec=
Subject key identifier: 53:BF:15:0E:67:A4:B8:BA:AB:B3:F7:CA:49:B2:77:9D:23:F5:EC:C2
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 3494AD28B2186C2702919323303096A19FEAFFA4
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa
Signing time: Tue 18 Jun 2024 06:00:00 +0000
ROA not before: Tue 18 Jun 2024 05:55:00 +0000
ROA not after: Tue 17 Jun 2025 06:00:00 +0000
asID: 38143
IP address blocks: 202.169.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:94:ad:28:b2:18:6c:27:02:91:93:23:30:30:96:a1:9f:ea:ff:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Jun 18 05:55:00 2024 GMT
Not After : Jun 17 06:00:00 2025 GMT
Subject: CN=53BF150E67A4B8BAABB3F7CA49B2779D23F5ECC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:a8:2d:1c:fa:5b:12:38:e7:cd:0c:85:58:
53:77:bf:70:e3:80:7c:88:be:5c:24:fc:69:a0:8e:
34:15:26:32:51:1d:ec:1f:02:54:8b:2d:c0:60:15:
89:c6:db:f1:81:72:a5:7a:b4:4b:46:ca:dd:f0:19:
10:b2:50:fc:cc:62:ea:e8:e8:bb:a8:eb:29:d7:c2:
71:f2:ef:b6:27:dd:ce:80:92:cd:28:59:e0:54:55:
94:6b:09:81:4d:d1:43:c6:43:2b:d1:63:45:9d:56:
80:7c:7a:b6:0d:83:ed:ab:a3:ad:b7:ff:4f:cb:40:
53:5f:a8:91:ba:5e:3f:36:1d:77:36:68:f7:ba:94:
06:66:f4:b1:b8:9c:ed:21:38:57:1a:a4:f6:56:c9:
00:6a:b8:d7:09:66:49:17:99:57:19:6e:bb:f4:50:
85:05:fb:78:d0:7f:21:d2:61:c8:f7:8a:30:2b:75:
70:d7:27:f6:df:db:a3:8b:96:91:cb:88:cc:08:6f:
bf:3c:3e:67:31:c2:37:6f:d7:56:2a:8e:e6:ca:47:
81:a4:72:b4:5e:6b:0b:fe:5f:c1:7f:7f:4b:c9:7d:
3b:0c:ab:35:fb:f6:bb:2e:82:fa:0d:fd:6f:d5:5e:
4a:98:3d:01:c4:01:a6:b6:1f:a2:c3:d0:4f:3c:b9:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BF:15:0E:67:A4:B8:BA:AB:B3:F7:CA:49:B2:77:9D:23:F5:EC:C2
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:60:a4:93:4f:ca:f5:00:19:bc:82:31:2e:48:e2:78:d2:dd:
25:f1:d6:d1:37:e4:e0:f8:0d:4f:e6:b7:ab:dc:47:67:c9:97:
49:78:a8:17:5a:6f:e7:47:b4:72:13:51:6f:08:78:aa:65:c8:
bd:01:d6:1d:a6:f1:d5:dd:58:52:a5:26:f5:99:48:6c:f8:6d:
88:48:91:58:6c:2e:1c:7a:55:f8:f4:b3:86:ab:ad:5d:39:b6:
27:1a:d7:42:42:63:30:55:aa:80:3b:c5:41:91:fe:cf:9d:e0:
8c:d4:3b:bd:01:2d:75:cb:32:d3:cc:3a:9d:29:44:08:b8:a5:
56:e5:c1:fa:50:d6:80:bd:a9:0c:61:32:cc:a0:87:13:b3:ef:
7e:e9:37:c7:6c:9e:76:b7:19:e6:75:41:ac:14:c4:10:2f:d3:
74:86:29:e8:f4:42:b4:84:72:e4:3f:b7:1c:a9:d7:f8:1d:0e:
6d:95:1e:60:70:0c:b9:2f:9a:b8:1d:8f:99:ef:57:61:cb:5a:
7c:88:f5:c4:aa:fe:a7:c5:1c:af:8d:4d:dc:76:11:6f:e2:a1:
73:a7:30:74:0b:cc:41:77:4c:c5:af:98:ed:df:02:59:c2:02:
40:e0:8c:b1:bd:5a:8b:de:d9:7b:88:27:5e:43:8f:3e:8e:ed:
d6:f2:ec:ff
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUNJStKLIYbCcCkZMjMDCWoZ/q/6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC
MUNFMDMyNTAeFw0yNDA2MTgwNTU1MDBaFw0yNTA2MTcwNjAwMDBaMDMxMTAvBgNV
BAMTKDUzQkYxNTBFNjdBNEI4QkFBQkIzRjdDQTQ5QjI3NzlEMjNGNUVDQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAKgtHPpbEjjnzQyFWFN3v3Dj
gHyIvlwk/GmgjjQVJjJRHewfAlSLLcBgFYnG2/GBcqV6tEtGyt3wGRCyUPzMYuro
6Luo6ynXwnHy77Yn3c6Aks0oWeBUVZRrCYFN0UPGQyvRY0WdVoB8erYNg+2ro623
/0/LQFNfqJG6Xj82HXc2aPe6lAZm9LG4nO0hOFcapPZWyQBquNcJZkkXmVcZbrv0
UIUF+3jQfyHSYcj3ijArdXDXJ/bf26OLlpHLiMwIb788Pmcxwjdv11YqjubKR4Gk
crReawv+X8F/f0vJfTsMqzX79rsugvoN/W/VXkqYPQHEAaa2H6LD0E88uaflAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUU78VDmekuLqrs/fKSbJ3nSP17MIwHwYDVR0j
BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG
Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF
MDMyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i
OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqnyMA0GCSqG
SIb3DQEBCwUAA4IBAQANYKSTT8r1ABm8gjEuSOJ40t0l8dbRN+Tg+A1P5rer3Edn
yZdJeKgXWm/nR7RyE1FvCHiqZci9AdYdpvHV3VhSpSb1mUhs+G2ISJFYbC4celX4
9LOGq61dObYnGtdCQmMwVaqAO8VBkf7PneCM1Du9AS11yzLTzDqdKUQIuKVW5cH6
UNaAvakMYTLMoIcTs+9+6TfHbJ52txnmdUGsFMQQL9N0hino9EK0hHLkP7ccqdf4
HQ5tlR5gcAy5L5q4HY+Z71dhy1p8iPXEqv6nxRyvjU3cdhFv4qFzpzB0C8xBd0zF
r5jt3wJZwgJA4IyxvVqL3tl7iCdeQ48+ju3W8uz/
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:27 2025 by rpki-client