Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35392e302f32342d3234203d3e203435333132.roa
File: 3230322e38312e35392e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier: 4+nrvsMtTrOadPYq+zTDzq1xFyWspefPwPdKI6ZoM6I=
Subject key identifier: E5:83:AD:C3:AB:ED:FA:F0:CF:1F:89:5F:B9:D0:4A:C0:42:FC:98:A1
Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial: 1D2BAA55B5055168261996FB698CB61EB3930D0D
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35392e302f32342d3234203d3e203435333132.roa
Signing time: Tue 17 Dec 2024 08:33:43 +0000
ROA not before: Tue 17 Dec 2024 08:28:43 +0000
ROA not after: Tue 16 Dec 2025 08:33:43 +0000
asID: 45312
IP address blocks: 202.81.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2b:aa:55:b5:05:51:68:26:19:96:fb:69:8c:b6:1e:b3:93:0d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Validity
Not Before: Dec 17 08:28:43 2024 GMT
Not After : Dec 16 08:33:43 2025 GMT
Subject: CN=E583ADC3ABEDFAF0CF1F895FB9D04AC042FC98A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:8d:c4:37:4c:d4:5a:24:39:b7:4d:de:3f:
55:30:4f:06:6e:98:c9:4b:46:b1:bb:28:7b:65:f3:
2b:75:7d:ff:bb:8b:9c:bf:12:52:f0:e2:44:10:98:
c7:1e:9f:2d:17:e4:70:af:7b:0b:5f:b9:ab:55:ed:
f6:6b:cc:f8:46:99:f7:96:2e:63:aa:95:a3:1d:44:
82:b3:32:0e:70:7d:f3:e3:3d:5c:dd:13:f5:a1:16:
a9:d2:53:24:7c:92:f9:4e:0e:93:b0:83:e0:ed:88:
9b:a3:f2:75:3d:f5:24:ca:69:96:33:cd:a1:c8:4a:
ca:25:45:44:a4:11:b4:a1:cd:f5:60:d8:d1:d3:67:
41:23:4b:a5:1d:0d:64:f3:69:c3:e1:9c:69:cc:18:
da:c2:a1:4a:1f:8c:55:95:ea:c4:96:02:80:54:d0:
f7:32:a9:2d:a6:4a:4f:4f:86:6d:8e:72:af:e1:02:
ff:66:0a:bf:c2:f4:a7:b6:41:1f:02:d9:00:cb:63:
6a:46:6b:c9:89:7b:6a:5e:9e:1e:c9:b9:d0:da:64:
02:9b:b8:2b:a3:91:37:c6:4e:40:4a:07:a9:4d:43:
b7:8a:ae:6b:4b:53:b7:30:e9:74:29:b8:01:9a:e5:
9c:fe:01:e2:2d:48:30:8e:14:ff:53:9b:e5:f1:76:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:83:AD:C3:AB:ED:FA:F0:CF:1F:89:5F:B9:D0:4A:C0:42:FC:98:A1
X509v3 Authority Key Identifier:
keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35392e302f32342d3234203d3e203435333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.81.59.0/24
Signature Algorithm: sha256WithRSAEncryption
76:30:5e:eb:08:25:0d:64:9e:1d:f3:c5:14:56:ab:bf:2e:c2:
75:e2:53:02:de:cc:58:5c:22:55:51:7d:b1:9b:3f:d7:60:2b:
2f:a8:2d:c9:d0:7d:fe:f6:58:92:da:a4:a4:ff:38:f4:b0:e6:
a2:e4:69:73:3c:34:76:e0:1a:6c:77:35:dd:cf:53:d9:8a:5e:
db:77:be:6b:a6:f8:93:d2:71:d8:e0:d0:d2:86:74:36:24:dc:
46:44:a6:9f:a3:1e:c1:b8:18:48:c4:98:86:0c:f9:11:bf:3a:
56:86:8f:6b:1c:64:22:9a:81:d5:5a:8b:e8:7f:df:30:e6:44:
e6:e8:ae:1f:6b:6c:b8:66:7b:e4:48:0b:99:23:49:8b:d6:b1:
5c:9c:35:0f:60:a7:fa:06:cc:9b:2b:c0:6e:81:86:71:bc:80:
1c:a9:3e:a2:8b:e5:11:6b:e8:52:75:c7:1d:6a:cb:ca:d7:e4:
62:ef:fc:b6:bf:11:28:f6:88:5a:0c:dd:a7:11:79:3c:bc:57:
f3:17:ea:dd:6c:47:ca:4c:aa:97:6a:55:0d:90:65:a0:2d:6c:
62:f4:d2:f8:a1:7a:e4:87:d9:a0:e0:96:b2:27:cd:af:c7:ee:
81:ad:f6:cc:c0:39:70:ce:c2:3b:d1:fd:fd:d1:0b:bc:da:2a:
4f:24:b3:92
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUHSuqVbUFUWgmGZb7aYy2HrOTDQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB
MEJGQzQ0MTAeFw0yNDEyMTcwODI4NDNaFw0yNTEyMTYwODMzNDNaMDMxMTAvBgNV
BAMTKEU1ODNBREMzQUJFREZBRjBDRjFGODk1RkI5RDA0QUMwNDJGQzk4QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkY3EN0zUWiQ5t03eP1UwTwZu
mMlLRrG7KHtl8yt1ff+7i5y/ElLw4kQQmMceny0X5HCvewtfuatV7fZrzPhGmfeW
LmOqlaMdRIKzMg5wffPjPVzdE/WhFqnSUyR8kvlODpOwg+DtiJuj8nU99STKaZYz
zaHISsolRUSkEbShzfVg2NHTZ0EjS6UdDWTzacPhnGnMGNrCoUofjFWV6sSWAoBU
0PcyqS2mSk9Phm2Ocq/hAv9mCr/C9Ke2QR8C2QDLY2pGa8mJe2penh7JudDaZAKb
uCujkTfGTkBKB6lNQ7eKrmtLU7cw6XQpuAGa5Zz+AeItSDCOFP9Tm+XxdkCNAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU5YOtw6vt+vDPH4lfudBKwEL8mKEwHwYDVR0j
BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4
NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG
QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h
MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzUzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUTswDQYJKoZIhvcN
AQELBQADggEBAHYwXusIJQ1knh3zxRRWq78uwnXiUwLezFhcIlVRfbGbP9dgKy+o
LcnQff72WJLapKT/OPSw5qLkaXM8NHbgGmx3Nd3PU9mKXtt3vmum+JPScdjg0NKG
dDYk3EZEpp+jHsG4GEjEmIYM+RG/OlaGj2scZCKagdVai+h/3zDmROborh9rbLhm
e+RIC5kjSYvWsVycNQ9gp/oGzJsrwG6BhnG8gBypPqKL5RFr6FJ1xx1qy8rX5GLv
/La/ESj2iFoM3acReTy8V/MX6t1sR8pMqpdqVQ2QZaAtbGL00viheuSH2aDglrIn
za/H7oGt9szAOXDOwjvR/f3RC7zaKk8ks5I=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:54 2025 by rpki-client