Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135362e302f32342d3234203d3e203338343936.roa
File: 3232332e32372e3135362e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: XAIlaR7/ZxZ1vV/hVRUSBCzfwAJoGGYwOkpKoUkE74g=
Subject key identifier: 83:C5:F7:39:60:8F:E2:55:0A:68:90:62:B2:35:07:1E:6F:BB:88:76
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 7CC020B7D15F6FA67D2542B01611985FC4A3B30A
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135362e302f32342d3234203d3e203338343936.roa
Signing time: Fri 24 May 2024 05:02:16 +0000
ROA not before: Fri 24 May 2024 04:57:16 +0000
ROA not after: Fri 23 May 2025 05:02:16 +0000
asID: 38496
IP address blocks: 223.27.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c0:20:b7:d1:5f:6f:a6:7d:25:42:b0:16:11:98:5f:c4:a3:b3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: May 24 04:57:16 2024 GMT
Not After : May 23 05:02:16 2025 GMT
Subject: CN=83C5F739608FE2550A689062B235071E6FBB8876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:27:27:18:41:b1:c3:10:43:e0:a1:cf:a7:
b6:a8:bd:87:fb:4f:86:16:51:1d:a2:ec:8a:4d:7c:
f3:e3:da:46:5f:2f:1d:9f:7e:5f:1d:c8:ba:dc:8e:
a0:12:7a:1b:76:a2:f8:8a:3b:db:69:52:33:c6:85:
25:b0:94:4f:a2:24:ae:19:33:a6:b8:5c:8e:32:aa:
bc:f1:c8:77:3d:2a:48:b8:99:b9:00:88:f1:b3:28:
5b:7a:76:86:18:19:e0:a4:47:40:75:7b:f0:cf:85:
ec:c6:8f:35:bc:db:ea:3b:75:4a:dc:69:f6:36:ac:
55:95:fb:6a:de:d5:3b:d4:86:a0:16:37:a8:27:10:
5e:b5:7f:65:98:b4:8b:dd:14:7a:c3:ae:4d:16:4f:
0a:be:1e:b1:30:c5:03:37:d1:1b:1d:40:80:6f:0d:
83:3a:82:49:f0:76:25:c9:3c:a9:8b:2e:75:ae:ff:
39:03:13:ab:85:1b:69:b1:f1:76:71:8d:cb:36:50:
c3:c9:ca:2c:84:f6:b4:cd:11:45:b2:76:d8:19:20:
aa:cf:5f:8e:53:31:4a:58:4b:f0:f6:14:ca:5a:03:
9c:6c:a5:bd:55:64:9d:b7:23:d2:93:13:b5:e2:b1:
3b:5e:6a:14:03:62:ee:12:12:f7:17:c7:a9:2e:d2:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:F7:39:60:8F:E2:55:0A:68:90:62:B2:35:07:1E:6F:BB:88:76
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135362e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:7a:63:8d:ae:3c:b3:de:d6:5e:a4:00:02:da:23:0f:57:82:
98:a4:e3:de:f3:86:df:15:db:e4:99:30:15:22:12:ec:34:80:
16:ce:2b:ab:a6:a4:33:50:14:63:81:43:d3:25:e5:35:83:b3:
d1:68:40:d1:55:43:c7:14:f4:ab:56:59:37:fb:6f:e5:a3:1a:
8a:2a:19:99:79:d4:d8:57:ce:76:ba:4f:6f:85:ee:07:f4:78:
28:b7:b1:75:53:cd:3c:26:95:fc:79:24:72:4a:36:b0:fc:ee:
4a:36:45:83:16:07:24:13:7f:0b:a9:c4:e2:24:1e:8d:90:97:
e6:69:b8:1a:4e:81:3c:92:3d:93:9e:98:4b:d1:4b:d7:9d:2e:
4b:02:e1:7c:3a:f7:f0:78:e8:9c:49:be:a9:96:1c:59:c2:a4:
38:ae:a0:ac:85:22:9d:f9:37:7c:6c:f3:bf:3e:f9:fc:a7:49:
a5:b4:13:d0:c9:55:10:11:b6:b1:d2:7e:52:3f:94:22:02:76:
f3:ee:1d:9e:f3:30:b9:08:89:b0:3d:aa:c4:99:6e:9c:d8:1d:
aa:fe:50:3e:2d:d2:f1:c6:43:66:97:87:f8:c1:6c:d2:f9:d5:
0f:10:42:d0:c4:19:31:f9:fb:aa:fb:31:c7:fc:fd:92:4b:eb:
bb:38:b2:93
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfMAgt9Ffb6Z9JUKwFhGYX8SjswowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA1MjQwNDU3MTZaFw0yNTA1MjMwNTAyMTZaMDMxMTAvBgNV
BAMTKDgzQzVGNzM5NjA4RkUyNTUwQTY4OTA2MkIyMzUwNzFFNkZCQjg4NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcCicnGEGxwxBD4KHPp7aovYf7
T4YWUR2i7IpNfPPj2kZfLx2ffl8dyLrcjqASeht2oviKO9tpUjPGhSWwlE+iJK4Z
M6a4XI4yqrzxyHc9Kki4mbkAiPGzKFt6doYYGeCkR0B1e/DPhezGjzW82+o7dUrc
afY2rFWV+2re1TvUhqAWN6gnEF61f2WYtIvdFHrDrk0WTwq+HrEwxQM30RsdQIBv
DYM6gknwdiXJPKmLLnWu/zkDE6uFG2mx8XZxjcs2UMPJyiyE9rTNEUWydtgZIKrP
X45TMUpYS/D2FMpaA5xspb1VZJ23I9KTE7XisTteahQDYu4SEvcXx6ku0g0tAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUg8X3OWCP4lUKaJBisjUHHm+7iHYwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzIzMzJlMzIzNzJlMzEzNTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bnDANBgkqhkiG
9w0BAQsFAAOCAQEAtHpjja48s97WXqQAAtojD1eCmKTj3vOG3xXb5JkwFSIS7DSA
Fs4rq6akM1AUY4FD0yXlNYOz0WhA0VVDxxT0q1ZZN/tv5aMaiioZmXnU2FfOdrpP
b4XuB/R4KLexdVPNPCaV/Hkkcko2sPzuSjZFgxYHJBN/C6nE4iQejZCX5mm4Gk6B
PJI9k56YS9FL150uSwLhfDr38HjonEm+qZYcWcKkOK6grIUinfk3fGzzvz75/KdJ
pbQT0MlVEBG2sdJ+Uj+UIgJ28+4dnvMwuQiJsD2qxJlunNgdqv5QPi3S8cZDZpeH
+MFs0vnVDxBC0MQZMfn7qvsxx/z9kkvruziykw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:56 2025 by rpki-client