Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa
File: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (raw, json)
Hash identifier: JqPwBzOb9IGp/J3IK4HU+cGl2mSkMSYQ3owKhX9duIs=
Subject key identifier: 5B:98:52:1B:D7:B4:C8:34:AA:95:3D:2E:6C:B3:35:83:59:9F:41:6D
Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial: 0884DB468B82B10B926327E989FDA9B7F97A3ABB
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa
Signing time: Sat 15 Feb 2025 08:00:02 +0000
ROA not before: Sat 15 Feb 2025 07:55:02 +0000
ROA not after: Sat 14 Feb 2026 08:00:02 +0000
asID: 45289
IP address blocks: 120.89.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:84:db:46:8b:82:b1:0b:92:63:27:e9:89:fd:a9:b7:f9:7a:3a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Validity
Not Before: Feb 15 07:55:02 2025 GMT
Not After : Feb 14 08:00:02 2026 GMT
Subject: CN=5B98521BD7B4C834AA953D2E6CB33583599F416D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:f5:58:04:ea:21:dc:e6:21:f0:b2:1f:44:
9b:84:71:4e:0a:7f:ad:23:9c:fb:1c:c5:28:4a:49:
5f:9e:a6:d1:c2:b4:ac:2f:cf:04:27:96:34:36:9d:
60:c3:22:d8:cc:22:89:1f:4b:7a:4b:8c:77:df:93:
6b:3d:5b:73:d9:7a:0d:95:81:be:39:04:86:c8:3e:
d6:e1:64:1a:f2:67:8c:e9:d7:4a:89:30:26:e9:89:
8e:1e:2c:34:31:83:92:16:be:38:99:da:21:d6:19:
58:5a:32:d0:5b:64:e1:e0:95:8a:c4:c3:31:c3:47:
93:04:1a:d1:9e:62:a8:b8:d2:32:70:3b:3c:db:73:
4e:49:2e:1e:96:72:d0:59:3a:74:dc:86:fb:27:2f:
f4:11:57:f5:62:71:2e:23:7a:89:2b:a8:7e:79:56:
8e:fe:63:60:47:8e:c2:b7:79:bf:d2:ed:e2:0d:fc:
65:b6:67:85:35:1d:f6:21:5d:e1:b8:20:89:99:3f:
f0:f8:e2:97:b1:58:09:c4:43:ac:db:6b:36:9d:e9:
3b:fa:02:2d:af:20:7b:0f:06:cf:59:a5:79:f4:07:
0e:ad:5c:d3:b8:8e:42:98:84:b5:f8:91:00:a8:e8:
41:b4:59:e6:f4:57:6a:a3:5c:e9:b0:79:c2:f8:5a:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:98:52:1B:D7:B4:C8:34:AA:95:3D:2E:6C:B3:35:83:59:9F:41:6D
X509v3 Authority Key Identifier:
keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38392e302f32342d3234203d3e203435323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.89.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:7b:ab:c4:b4:65:f1:db:65:88:4b:59:47:cc:cf:5c:e0:0f:
5b:ac:7d:12:d9:33:74:7f:3c:7c:dc:9e:f9:db:66:07:cc:60:
80:ae:5f:cc:08:84:f3:6c:06:f0:9f:ec:c2:b6:96:8d:f9:67:
7d:5f:ab:dd:2f:8e:ac:b9:2b:1e:35:46:99:b6:f5:1f:2b:17:
c2:70:b7:4e:fa:97:7c:42:16:c0:08:3c:c4:0e:0c:b4:85:c8:
69:62:1e:b1:49:38:92:f2:69:3f:93:16:67:6b:1a:5f:ac:61:
39:30:38:a3:79:24:96:1d:ee:ec:ff:8a:32:3f:63:16:80:b3:
b8:01:52:16:e0:54:9d:56:f7:02:6a:6d:f8:cd:31:7c:af:e0:
72:62:7e:19:80:6b:f5:3b:e0:d7:a0:94:00:a8:ea:7f:5a:f5:
6d:b9:73:e0:82:e4:19:b0:14:f3:0f:47:8c:76:bd:67:ce:0b:
88:dc:5b:a3:3a:e0:ca:a0:ba:01:e4:1f:fe:20:f1:9c:b6:b2:
29:c8:5c:51:cc:cd:c5:39:3c:53:90:12:9b:67:2e:8e:8f:6a:
6c:75:05:04:f6:7e:fd:16:04:2a:a2:75:79:7d:1c:a1:37:6d:
df:c9:75:62:7a:ac:55:51:cc:fa:c0:2d:a8:f2:60:44:90:c0:
2d:b6:f4:86
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUCITbRouCsQuSYyfpif2pt/l6OrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx
MkU0RkQ2MTAeFw0yNTAyMTUwNzU1MDJaFw0yNjAyMTQwODAwMDJaMDMxMTAvBgNV
BAMTKDVCOTg1MjFCRDdCNEM4MzRBQTk1M0QyRTZDQjMzNTgzNTk5RjQxNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiPVYBOoh3OYh8LIfRJuEcU4K
f60jnPscxShKSV+eptHCtKwvzwQnljQ2nWDDItjMIokfS3pLjHffk2s9W3PZeg2V
gb45BIbIPtbhZBryZ4zp10qJMCbpiY4eLDQxg5IWvjiZ2iHWGVhaMtBbZOHglYrE
wzHDR5MEGtGeYqi40jJwOzzbc05JLh6WctBZOnTchvsnL/QRV/VicS4jeokrqH55
Vo7+Y2BHjsK3eb/S7eIN/GW2Z4U1HfYhXeG4IImZP/D44pexWAnEQ6zbazad6Tv6
Ai2vIHsPBs9ZpXn0Bw6tXNO4jkKYhLX4kQCo6EG0Web0V2qjXOmwecL4WrIdAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUW5hSG9e0yDSqlT0ubLM1g1mfQW0wHwYDVR0j
BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3
RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0
RkQ2MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBkLWNlNzktNDIxNi1h
NjJiLWUzZDUwY2M3OTQ0Mi8wLzMxMzIzMDJlMzgzOTJlMzgzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzMjM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB4WVkwDQYJKoZIhvcN
AQELBQADggEBALR7q8S0ZfHbZYhLWUfMz1zgD1usfRLZM3R/PHzcnvnbZgfMYICu
X8wIhPNsBvCf7MK2lo35Z31fq90vjqy5Kx41Rpm29R8rF8Jwt076l3xCFsAIPMQO
DLSFyGliHrFJOJLyaT+TFmdrGl+sYTkwOKN5JJYd7uz/ijI/YxaAs7gBUhbgVJ1W
9wJqbfjNMXyv4HJifhmAa/U74NeglACo6n9a9W25c+CC5BmwFPMPR4x2vWfOC4jc
W6M64MqgugHkH/4g8Zy2sinIXFHMzcU5PFOQEptnLo6Pamx1BQT2fv0WBCqidXl9
HKE3bd/JdWJ6rFVRzPrALajyYESQwC229IY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:32 2025 by rpki-client