Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa
File: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (raw, json)
Hash identifier: vY8tbOcXriyCtT6FUxDmURMpeDa3xL/alWeAEYVK8DM=
Subject key identifier: 70:C5:59:2F:C3:0E:49:AE:A3:82:17:12:B5:87:DE:9F:0B:65:F5:6A
Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Certificate serial: 7798253FF1385E74B1E24F4D59F07C7E4553828D
Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa
Signing time: Fri 10 Jan 2025 04:00:01 +0000
ROA not before: Fri 10 Jan 2025 03:55:01 +0000
ROA not after: Fri 09 Jan 2026 04:00:01 +0000
asID: 9340
IP address blocks: 202.153.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:98:25:3f:f1:38:5e:74:b1:e2:4f:4d:59:f0:7c:7e:45:53:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Validity
Not Before: Jan 10 03:55:01 2025 GMT
Not After : Jan 9 04:00:01 2026 GMT
Subject: CN=70C5592FC30E49AEA3821712B587DE9F0B65F56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:09:80:75:03:aa:8a:f9:0e:3c:77:99:2d:
83:13:03:f6:89:5c:39:d7:5e:da:6d:04:3a:a4:4b:
ba:f7:34:64:73:1b:5a:c8:bd:5a:79:aa:e8:1d:c8:
42:28:98:9f:ed:d7:8a:10:c3:c4:06:0d:d5:4b:60:
95:9a:6a:f6:94:a1:4d:2f:0e:c4:ed:69:1d:c8:6f:
02:08:95:b1:75:52:87:ab:4f:9f:08:e4:00:2e:17:
d8:cc:10:7e:8e:49:f1:e2:84:24:d8:97:1f:02:e5:
c3:fb:5b:6a:e1:14:9f:0b:55:cf:fd:5b:8c:51:a1:
f3:b4:07:55:0e:da:78:98:78:c2:7e:02:9e:5b:29:
9f:29:c8:c9:90:ae:c9:88:9d:36:bf:11:74:da:4e:
8b:db:a0:bf:11:eb:c9:71:de:e3:2d:d0:36:9d:7a:
18:0d:ba:d2:85:08:1b:e4:65:7f:77:73:74:f1:41:
96:2d:fb:65:0f:9e:e7:f3:ef:a2:92:83:af:fc:69:
d5:11:98:81:d4:72:15:fa:e3:63:ce:c0:91:a5:9e:
0d:2c:be:ab:cf:5a:d2:8f:ab:6c:87:91:6c:09:90:
59:e5:63:66:a7:55:23:ca:5e:1e:91:f4:f5:94:84:
0e:49:d6:fb:05:61:5e:d2:46:c6:bf:2f:18:b3:28:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:59:2F:C3:0E:49:AE:A3:82:17:12:B5:87:DE:9F:0B:65:F5:6A
X509v3 Authority Key Identifier:
keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.153.224.0/19
Signature Algorithm: sha256WithRSAEncryption
52:44:d5:b2:19:87:5b:21:68:b6:f0:f3:bd:33:cb:1a:e1:07:
0f:8f:83:7c:1b:ff:53:7c:dc:f1:bc:07:7d:58:01:a9:c3:be:
54:92:64:aa:92:8e:a0:e7:cd:64:a5:5c:38:82:8c:f2:0e:52:
e7:a7:73:2b:9e:bf:99:a9:9e:d9:c4:8f:5e:02:2d:9e:c4:06:
21:ec:8d:15:18:b4:06:33:e8:14:a3:1a:0f:3f:ca:1e:93:bb:
0d:79:f1:a3:fb:59:5f:95:d2:29:8f:38:22:9f:9c:21:26:58:
15:0c:5f:b1:6b:e7:71:f2:e6:e4:a6:db:2a:93:a3:ab:4c:32:
09:49:71:8e:9b:ac:53:7c:eb:f5:4e:da:bb:fd:b6:65:35:54:
28:26:0b:c5:a9:c3:58:a1:fd:9e:ef:17:f6:47:59:ca:40:6b:
d1:24:12:d0:5a:70:c9:7f:96:96:b6:ff:1a:cb:95:9c:0c:68:
af:84:67:ef:38:e2:a7:08:8d:2e:48:1c:22:8a:13:f3:05:5c:
0f:4d:35:e3:84:a9:9a:b7:83:44:51:51:41:89:a6:76:23:c5:
9a:15:e9:46:55:73:23:ad:3b:49:b9:e8:db:2d:69:99:17:42:
f5:de:77:19:98:6d:f2:4f:c5:29:88:0f:66:dd:02:01:4b:2b:
49:42:6e:d6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUd5glP/E4XnSx4k9NWfB8fkVTgo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0
RDRGODMwODAeFw0yNTAxMTAwMzU1MDFaFw0yNjAxMDkwNDAwMDFaMDMxMTAvBgNV
BAMTKDcwQzU1OTJGQzMwRTQ5QUVBMzgyMTcxMkI1ODdERTlGMEI2NUY1NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKwmAdQOqivkOPHeZLYMTA/aJ
XDnXXtptBDqkS7r3NGRzG1rIvVp5qugdyEIomJ/t14oQw8QGDdVLYJWaavaUoU0v
DsTtaR3IbwIIlbF1UoerT58I5AAuF9jMEH6OSfHihCTYlx8C5cP7W2rhFJ8LVc/9
W4xRofO0B1UO2niYeMJ+Ap5bKZ8pyMmQrsmInTa/EXTaTovboL8R68lx3uMt0Dad
ehgNutKFCBvkZX93c3TxQZYt+2UPnufz76KSg6/8adURmIHUchX642POwJGlng0s
vqvPWtKPq2yHkWwJkFnlY2anVSPKXh6R9PWUhA5J1vsFYV7SRsa/LxizKBANAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUcMVZL8MOSa6jghcStYfenwtl9WowHwYDVR0j
BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy
MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG
ODMwOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1YjFlNTdlLWEwZjEtNDY3Zi1h
NDZmLTU1YTMxNTdiMGQ2NS8wLzMyMzAzMjJlMzEzNTMzMmUzMjMyMzQyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzOTMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqZ4DANBgkqhkiG
9w0BAQsFAAOCAQEAUkTVshmHWyFotvDzvTPLGuEHD4+DfBv/U3zc8bwHfVgBqcO+
VJJkqpKOoOfNZKVcOIKM8g5S56dzK56/mame2cSPXgItnsQGIeyNFRi0BjPoFKMa
Dz/KHpO7DXnxo/tZX5XSKY84Ip+cISZYFQxfsWvncfLm5KbbKpOjq0wyCUlxjpus
U3zr9U7au/22ZTVUKCYLxanDWKH9nu8X9kdZykBr0SQS0FpwyX+Wlrb/GsuVnAxo
r4Rn7zjipwiNLkgcIooT8wVcD00144SpmreDRFFRQYmmdiPFmhXpRlVzI607Sbno
2y1pmRdC9d53GZht8k/FKYgPZt0CAUsrSUJu1g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:32:22 2025 by rpki-client