Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/3230332e38312e3138342e302f32312d3234203d3e203234353338.roa
File: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (raw, json)
Hash identifier: MMjEYaklE81WaDCrUueGQmjdNC6x98nzJuWl2kfKoDE=
Subject key identifier: 5A:48:3D:FB:42:E0:AA:69:56:E8:9C:4B:7C:F1:DC:32:2B:9B:B7:EB
Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232
Certificate serial: 17211AA3606ED3548CE0CB98A213FA18ED4B5FF6
Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/3230332e38312e3138342e302f32312d3234203d3e203234353338.roa
Signing time: Thu 07 Nov 2024 07:00:00 +0000
ROA not before: Thu 07 Nov 2024 06:55:00 +0000
ROA not after: Thu 06 Nov 2025 07:00:00 +0000
asID: 24538
IP address blocks: 203.81.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:21:1a:a3:60:6e:d3:54:8c:e0:cb:98:a2:13:fa:18:ed:4b:5f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232
Validity
Not Before: Nov 7 06:55:00 2024 GMT
Not After : Nov 6 07:00:00 2025 GMT
Subject: CN=5A483DFB42E0AA6956E89C4B7CF1DC322B9BB7EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:ff:91:d0:bf:ea:e7:6e:be:60:cd:f8:ef:
e8:c4:93:99:04:91:dd:12:bc:85:ae:19:ef:50:d5:
86:13:cc:1c:a2:d2:22:f2:0f:fd:59:4c:fa:dd:f3:
71:d9:2c:9f:30:d4:15:78:2e:77:c0:82:dd:b8:a3:
a5:ce:e4:b7:2e:03:a2:64:3b:b8:45:22:ab:72:5a:
2c:18:21:85:07:59:f9:3d:8b:85:6d:7b:ea:17:04:
39:6e:fe:e2:8d:d2:bd:6d:e4:44:89:8f:2f:15:a1:
fc:a7:80:15:97:a1:7c:dd:39:50:b2:68:62:3e:97:
e9:f1:f6:40:80:89:dd:6a:b0:1d:a1:06:54:1a:6f:
1e:01:a1:f4:6b:b9:c0:5c:cb:b2:6f:90:68:3e:d1:
25:b4:28:a7:da:99:6f:e5:9c:c2:bc:49:41:09:9f:
ee:ee:d7:a7:6d:64:0a:66:b8:2e:23:6b:ef:30:b3:
75:49:19:a7:19:f6:bb:b1:75:aa:c2:64:44:9b:d8:
7a:39:73:d9:ad:93:90:e7:85:dc:ae:3d:b7:fd:80:
9c:e2:46:81:aa:90:23:a9:c6:36:af:82:6c:5a:7d:
f2:d4:4c:f4:ea:c8:a5:27:2f:e4:a0:7f:01:64:dc:
cd:91:39:b9:bd:16:54:da:7e:d0:0e:99:d7:cc:c4:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:3D:FB:42:E0:AA:69:56:E8:9C:4B:7C:F1:DC:32:2B:9B:B7:EB
X509v3 Authority Key Identifier:
keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/3230332e38312e3138342e302f32312d3234203d3e203234353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.81.184.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:9a:11:88:e6:69:b9:c1:a6:5d:7b:8b:9c:9a:27:d8:43:83:
3d:9e:91:20:f2:94:0b:0c:35:79:2b:4c:ac:a8:b6:42:4c:17:
45:98:a7:f2:cb:d0:46:1b:50:34:f1:bb:52:8a:be:fb:68:43:
00:55:c4:1f:7f:f2:98:b5:82:45:21:34:34:aa:47:94:52:0c:
97:18:19:1e:72:99:9c:ce:cf:d9:68:da:df:36:f3:f9:23:72:
f6:13:03:f9:e2:d7:e9:e7:83:2e:e4:75:22:80:16:3f:9d:c4:
33:aa:1a:43:ad:72:fb:92:4d:4c:6b:25:2d:c6:77:04:e9:41:
51:e8:e1:8e:53:b3:d7:66:07:a5:48:4e:f2:40:61:57:a0:66:
79:cc:ad:b7:62:39:29:4d:ce:e7:68:2e:f0:b3:4f:5c:19:bd:
c8:93:e1:e8:fa:54:b9:6b:ac:86:d5:46:4c:08:99:3f:c2:1f:
a2:36:3e:82:2c:fc:03:e6:29:0b:cc:0a:8e:fd:33:ba:f8:67:
f7:0f:6a:8a:7d:4d:4f:f7:8a:d1:43:ea:26:fd:55:1f:12:32:
a9:19:12:2a:bf:93:20:b5:0f:12:ca:3e:76:4b:3b:27:7b:02:
4a:69:7c:e0:7a:c7:6b:c0:ad:57:85:6e:5f:9f:47:21:7b:2b:
c6:ba:9e:76
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFyEao2Bu01SM4MuYohP6GO1LX/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1
NkJGMDIzMjAeFw0yNDExMDcwNjU1MDBaFw0yNTExMDYwNzAwMDBaMDMxMTAvBgNV
BAMTKDVBNDgzREZCNDJFMEFBNjk1NkU4OUM0QjdDRjFEQzMyMkI5QkI3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcv+R0L/q526+YM347+jEk5kE
kd0SvIWuGe9Q1YYTzByi0iLyD/1ZTPrd83HZLJ8w1BV4LnfAgt24o6XO5LcuA6Jk
O7hFIqtyWiwYIYUHWfk9i4Vte+oXBDlu/uKN0r1t5ESJjy8VofyngBWXoXzdOVCy
aGI+l+nx9kCAid1qsB2hBlQabx4BofRrucBcy7JvkGg+0SW0KKfamW/lnMK8SUEJ
n+7u16dtZApmuC4ja+8ws3VJGacZ9ruxdarCZESb2Ho5c9mtk5DnhdyuPbf9gJzi
RoGqkCOpxjavgmxaffLUTPTqyKUnL+SgfwFk3M2RObm9FlTaftAOmdfMxOODAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWkg9+0LgqmlW6JxLfPHcMiubt+swHwYDVR0j
BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2
NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG
MDIzMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxYTI5YTc1LWM1YjktNDc1Yi05
ZDk2LTZkMWExNWVhZTI0ZC8wLzMyMzAzMzJlMzgzMTJlMzEzODM0MmUzMDJmMzIz
MTJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8tRuDANBgkqhkiG
9w0BAQsFAAOCAQEArZoRiOZpucGmXXuLnJon2EODPZ6RIPKUCww1eStMrKi2QkwX
RZin8svQRhtQNPG7Uoq++2hDAFXEH3/ymLWCRSE0NKpHlFIMlxgZHnKZnM7P2Wja
3zbz+SNy9hMD+eLX6eeDLuR1IoAWP53EM6oaQ61y+5JNTGslLcZ3BOlBUejhjlOz
12YHpUhO8kBhV6Bmecytt2I5KU3O52gu8LNPXBm9yJPh6PpUuWushtVGTAiZP8If
ojY+giz8A+YpC8wKjv0zuvhn9w9qin1NT/eK0UPqJv1VHxIyqRkSKr+TILUPEso+
dks7J3sCSml84HrHa8CtV4VuX59HIXsrxrqedg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:18:59 2025 by rpki-client