Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3131302e39322e37342e302f32332d3234203d3e203538333835.roa
File: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (raw, json)
Hash identifier: XgxFmfrvLr/HS422k6dRWPfIUiiCoQbGouQtaJJQX4Y=
Subject key identifier: 93:45:67:D9:16:45:00:D1:99:22:00:B5:CB:1F:D2:2E:79:75:53:E8
Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538
Certificate serial: 06BB6AE7FD80C43F8DAE5360017FB66C9126CF37
Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3131302e39322e37342e302f32332d3234203d3e203538333835.roa
Signing time: Mon 23 Dec 2024 16:59:26 +0000
ROA not before: Mon 23 Dec 2024 16:54:26 +0000
ROA not after: Mon 22 Dec 2025 16:59:26 +0000
asID: 58385
IP address blocks: 110.92.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:bb:6a:e7:fd:80:c4:3f:8d:ae:53:60:01:7f:b6:6c:91:26:cf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538
Validity
Not Before: Dec 23 16:54:26 2024 GMT
Not After : Dec 22 16:59:26 2025 GMT
Subject: CN=934567D9164500D1992200B5CB1FD22E797553E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:11:6b:dc:ee:64:90:5c:19:f7:10:53:a1:
d0:9a:6d:1e:e8:8d:ab:5a:ce:b9:be:e8:62:fd:2f:
c5:de:df:fb:0a:9a:c0:fa:b5:aa:14:6f:ea:ca:db:
d6:17:20:b2:1b:8e:d5:21:81:58:ab:72:ce:c5:1c:
1f:63:90:fe:b4:7e:4f:fc:02:33:70:57:3a:3f:82:
aa:5e:d4:0e:a5:1d:a3:14:2c:7c:48:49:5b:3a:22:
4a:6d:6b:ad:19:a7:29:cd:34:c7:0f:0c:c5:28:6d:
89:71:b0:29:81:be:b1:b1:ff:25:52:ff:ce:79:08:
df:24:0c:69:d8:28:3d:91:56:a9:78:36:e4:28:0e:
da:8a:6d:ed:ad:e3:59:d0:32:e1:de:2f:50:d2:df:
c9:35:db:c1:fc:25:7c:06:00:b0:88:8c:97:a7:0b:
b3:60:35:2b:5c:d2:02:5b:e7:18:3b:19:cc:b2:c0:
37:67:03:b3:54:df:0a:64:c2:ed:6c:f6:5c:6d:d6:
70:73:29:2f:61:bd:4d:63:72:cd:81:af:10:53:04:
df:29:a6:89:83:f7:68:eb:94:89:27:a8:58:f2:d3:
a0:ef:98:70:9f:da:7d:59:2a:af:c4:30:63:31:d3:
1d:1f:2b:c7:6a:e9:cf:6a:2a:5c:8f:4a:d0:d0:07:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:45:67:D9:16:45:00:D1:99:22:00:B5:CB:1F:D2:2E:79:75:53:E8
X509v3 Authority Key Identifier:
keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/3131302e39322e37342e302f32332d3234203d3e203538333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.92.74.0/23
Signature Algorithm: sha256WithRSAEncryption
41:7d:aa:a5:ce:5f:28:e7:1e:ad:08:92:20:59:20:ce:3a:da:
ce:15:0e:7a:58:17:5e:43:ab:06:44:b6:be:52:81:d6:53:28:
2f:da:fa:21:a8:c9:45:0b:f7:39:e3:8e:96:bd:a9:dd:c4:e1:
78:4c:05:41:b6:0c:4e:a5:0a:6a:fc:c3:e6:13:42:82:14:e6:
0c:74:d9:50:20:ef:d9:b8:6c:0c:4c:1d:ec:78:26:85:48:9d:
84:96:8b:48:17:5a:1e:ad:5a:be:ce:4b:bf:8c:4a:68:b6:72:
ac:0b:ee:35:36:74:73:fc:6c:77:11:bf:1a:a2:ec:5a:d9:dd:
74:9a:35:7a:69:ad:34:cb:b2:34:a1:7c:ec:0c:4a:aa:55:44:
25:d1:69:2b:b2:e2:62:a9:59:d0:82:d0:6f:cf:16:2e:3c:1a:
5d:2c:15:91:b3:f0:5f:64:63:97:e4:9a:16:26:0b:19:43:98:
3e:4d:ab:54:ff:5a:10:ad:24:d4:0c:20:32:31:cd:85:cc:52:
a2:df:b3:26:62:7b:ce:60:b5:3d:f5:18:6d:81:14:97:3d:41:
87:56:a9:cc:f6:93:10:93:b0:1b:78:9f:ff:dc:a3:f4:de:a4:
c8:1b:9d:6d:82:11:5b:1f:1a:39:4b:7a:53:71:cd:8d:77:60:
28:4f:85:20
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUBrtq5/2AxD+NrlNgAX+2bJEmzzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz
NDNGNTUzODAeFw0yNDEyMjMxNjU0MjZaFw0yNTEyMjIxNjU5MjZaMDMxMTAvBgNV
BAMTKDkzNDU2N0Q5MTY0NTAwRDE5OTIyMDBCNUNCMUZEMjJFNzk3NTUzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BBFr3O5kkFwZ9xBTodCabR7o
jatazrm+6GL9L8Xe3/sKmsD6taoUb+rK29YXILIbjtUhgVircs7FHB9jkP60fk/8
AjNwVzo/gqpe1A6lHaMULHxISVs6Ikpta60ZpynNNMcPDMUobYlxsCmBvrGx/yVS
/855CN8kDGnYKD2RVql4NuQoDtqKbe2t41nQMuHeL1DS38k128H8JXwGALCIjJen
C7NgNStc0gJb5xg7GcyywDdnA7NU3wpkwu1s9lxt1nBzKS9hvU1jcs2BrxBTBN8p
pomD92jrlIknqFjy06DvmHCf2n1ZKq/EMGMx0x0fK8dq6c9qKlyPStDQB2mnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUk0Vn2RZFANGZIgC1yx/SLnl1U+gwHwYDVR0j
BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw
RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG
NTUzOC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzOTI1Mzg4LTM1YzYtNDFkNy05
ZGM0LWRiNGQxMThkMTM1YS8wLzMxMzEzMDJlMzkzMjJlMzczNDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFuXEowDQYJKoZIhvcN
AQELBQADggEBAEF9qqXOXyjnHq0IkiBZIM462s4VDnpYF15DqwZEtr5SgdZTKC/a
+iGoyUUL9znjjpa9qd3E4XhMBUG2DE6lCmr8w+YTQoIU5gx02VAg79m4bAxMHex4
JoVInYSWi0gXWh6tWr7OS7+MSmi2cqwL7jU2dHP8bHcRvxqi7FrZ3XSaNXpprTTL
sjShfOwMSqpVRCXRaSuy4mKpWdCC0G/PFi48Gl0sFZGz8F9kY5fkmhYmCxlDmD5N
q1T/WhCtJNQMIDIxzYXMUqLfsyZie85gtT31GG2BFJc9QYdWqcz2kxCTsBt4n//c
o/TepMgbnW2CEVsfGjlLelNxzY13YChPhSA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:38 2025 by rpki-client