Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35382e302f32342d3234203d3e203435333132.roa
File: 3230322e38312e35382e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier: vN5n9PhqQpTM7HWXjcndl5RxHQWa7HzL5zU/2GxM5Dk=
Subject key identifier: C2:B2:67:ED:29:0D:A2:73:42:D6:46:8C:02:93:FA:38:A0:8E:F0:59
Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial: 40841A7A5E9F81B6D66C4ED35AA113C5C781AB06
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35382e302f32342d3234203d3e203435333132.roa
Signing time: Tue 17 Dec 2024 08:33:31 +0000
ROA not before: Tue 17 Dec 2024 08:28:31 +0000
ROA not after: Tue 16 Dec 2025 08:33:31 +0000
asID: 45312
IP address blocks: 202.81.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:84:1a:7a:5e:9f:81:b6:d6:6c:4e:d3:5a:a1:13:c5:c7:81:ab:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Validity
Not Before: Dec 17 08:28:31 2024 GMT
Not After : Dec 16 08:33:31 2025 GMT
Subject: CN=C2B267ED290DA27342D6468C0293FA38A08EF059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:36:06:86:c8:7e:8f:4c:0f:0b:e1:9f:20:
4e:a7:f2:af:f1:bb:9f:ce:10:95:ae:31:6c:5c:75:
16:5a:44:9d:e0:03:80:41:de:f2:34:50:41:ef:69:
d5:60:61:99:5d:b5:f7:44:09:ef:da:56:ab:4e:d2:
1f:0a:65:ad:27:69:a5:58:1a:43:7f:b6:51:d2:ef:
79:32:02:a8:38:28:7c:cd:28:81:0b:0e:e8:d6:b8:
5b:78:66:50:ac:e9:c3:79:a2:4b:d0:db:60:ea:f3:
d7:2f:0f:97:a8:47:ed:a5:d4:4c:58:95:66:fb:05:
ee:f2:e0:ff:bc:20:ba:6f:01:a8:f6:b8:63:ea:44:
58:fc:f7:4d:6a:62:ba:13:56:ac:5c:2d:8a:f5:aa:
bf:25:e3:dc:a7:4d:7e:64:a6:e7:2f:6b:ac:0f:ad:
75:3b:a9:58:e5:af:7d:7e:90:0f:21:ac:b6:b8:58:
4d:39:9c:f2:29:1e:1b:7a:d2:80:35:cc:6d:18:1f:
75:37:ee:1e:f0:8a:2e:57:4c:17:9c:ed:cc:62:e1:
f1:ba:cf:85:75:3d:c7:ef:b0:07:95:3f:a7:ed:3d:
40:b1:a7:13:f7:4f:fa:35:11:87:c3:c3:9a:1f:24:
67:9c:05:ee:4b:b9:f4:d6:c8:5c:29:06:d8:10:8a:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B2:67:ED:29:0D:A2:73:42:D6:46:8C:02:93:FA:38:A0:8E:F0:59
X509v3 Authority Key Identifier:
keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35382e302f32342d3234203d3e203435333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.81.58.0/24
Signature Algorithm: sha256WithRSAEncryption
76:31:84:4d:09:9a:25:2f:bc:0f:a0:44:ec:49:16:88:08:9a:
79:86:85:76:67:ec:18:6b:ea:b7:ea:30:79:64:53:8a:ed:d5:
00:c5:24:20:66:46:8d:c2:bb:13:66:13:2f:c7:bc:0f:e2:a4:
db:79:82:85:f2:da:a8:bc:c7:f3:85:d6:17:a1:30:98:ac:9f:
3f:d9:a2:20:ed:e1:06:1c:4e:59:5e:42:38:82:48:f4:07:b5:
d1:30:f7:aa:86:e6:e8:1e:04:f0:51:48:d6:16:b9:83:e7:4e:
28:41:bc:2c:78:79:10:af:87:10:9b:c8:47:73:e4:5b:d9:f1:
ce:be:f1:a9:11:cc:de:4f:15:f7:ff:b8:56:c4:38:37:11:15:
0a:16:77:67:23:70:a6:c4:f0:1d:05:df:f9:42:d2:c3:38:4d:
d6:eb:01:0b:0e:b4:c8:cf:32:c0:63:f2:cb:20:a1:4d:91:5c:
a1:00:ac:18:9b:1f:d6:0e:82:c8:dc:02:c8:14:e9:d3:06:10:
a9:0e:9c:8a:59:df:92:a9:67:65:f5:4f:74:92:06:b0:9d:d9:
d0:c3:c3:38:c8:6f:08:f7:d3:52:70:57:de:cc:86:b5:2f:41:
57:21:08:1d:b1:78:d8:e6:ba:e1:ad:1a:32:a6:d1:7a:16:aa:
94:8b:97:ec
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQIQael6fgbbWbE7TWqETxceBqwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB
MEJGQzQ0MTAeFw0yNDEyMTcwODI4MzFaFw0yNTEyMTYwODMzMzFaMDMxMTAvBgNV
BAMTKEMyQjI2N0VEMjkwREEyNzM0MkQ2NDY4QzAyOTNGQTM4QTA4RUYwNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8jYGhsh+j0wPC+GfIE6n8q/x
u5/OEJWuMWxcdRZaRJ3gA4BB3vI0UEHvadVgYZldtfdECe/aVqtO0h8KZa0naaVY
GkN/tlHS73kyAqg4KHzNKIELDujWuFt4ZlCs6cN5okvQ22Dq89cvD5eoR+2l1ExY
lWb7Be7y4P+8ILpvAaj2uGPqRFj8901qYroTVqxcLYr1qr8l49ynTX5kpucva6wP
rXU7qVjlr31+kA8hrLa4WE05nPIpHht60oA1zG0YH3U37h7wii5XTBec7cxi4fG6
z4V1PcfvsAeVP6ftPUCxpxP3T/o1EYfDw5ofJGecBe5LufTWyFwpBtgQirxFAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUwrJn7SkNonNC1kaMApP6OKCO8FkwHwYDVR0j
BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4
NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG
QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h
MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzUzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUTowDQYJKoZIhvcN
AQELBQADggEBAHYxhE0JmiUvvA+gROxJFogImnmGhXZn7Bhr6rfqMHlkU4rt1QDF
JCBmRo3CuxNmEy/HvA/ipNt5goXy2qi8x/OF1hehMJisnz/ZoiDt4QYcTlleQjiC
SPQHtdEw96qG5ugeBPBRSNYWuYPnTihBvCx4eRCvhxCbyEdz5FvZ8c6+8akRzN5P
Fff/uFbEODcRFQoWd2cjcKbE8B0F3/lC0sM4TdbrAQsOtMjPMsBj8ssgoU2RXKEA
rBibH9YOgsjcAsgU6dMGEKkOnIpZ35KpZ2X1T3SSBrCd2dDDwzjIbwj301JwV97M
hrUvQVchCB2xeNjmuuGtGjKm0XoWqpSLl+w=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:54 2025 by rpki-client