Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203338353036.roa
File: 3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (raw, json)
Hash identifier: /6+jvg8KiTmrNLO4t1shH85dllFWeXwB6Znb1zuownA=
Subject key identifier: F7:BD:BE:98:F9:44:74:D4:C5:60:6B:4B:C8:83:7B:C0:52:0B:C0:C7
Certificate issuer: /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial: 414171C41800219FA21F2B45F3476C3F31FB7C81
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203338353036.roa
Signing time: Thu 31 Oct 2024 13:00:00 +0000
ROA not before: Thu 31 Oct 2024 12:55:00 +0000
ROA not after: Thu 30 Oct 2025 13:00:00 +0000
asID: 38506
IP address blocks: 111.92.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:41:71:c4:18:00:21:9f:a2:1f:2b:45:f3:47:6c:3f:31:fb:7c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Validity
Not Before: Oct 31 12:55:00 2024 GMT
Not After : Oct 30 13:00:00 2025 GMT
Subject: CN=F7BDBE98F94474D4C5606B4BC8837BC0520BC0C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:a8:e2:76:38:ba:33:50:2e:c3:45:f4:29:
2b:a2:6d:7e:5a:4d:4e:fe:48:85:47:34:69:00:74:
86:02:5e:8c:58:5e:13:5d:ff:eb:79:66:5c:53:89:
e3:23:3e:ca:9c:d5:04:1d:ff:e3:f1:2d:d1:9e:55:
ed:55:6b:40:dc:6e:8e:6f:ba:ef:51:4b:83:78:0e:
f9:07:bc:f8:fa:cd:70:c6:fb:3f:66:89:31:95:48:
05:4e:5e:87:54:4d:1c:36:df:42:35:ef:b5:58:af:
f7:70:06:cf:21:9d:b9:20:d3:c3:b5:0c:63:b2:1a:
85:45:7d:b8:e1:e2:27:ea:2a:28:53:57:8e:73:c3:
9f:89:85:8d:4c:41:95:fe:81:f2:35:b6:3b:90:97:
3a:1d:df:70:f3:aa:38:31:3a:16:21:cf:bc:81:75:
a4:cf:5a:28:3b:f8:50:d1:02:69:42:e8:f1:90:82:
cd:f3:26:34:ff:46:90:a2:49:66:ba:ed:74:56:c7:
89:01:44:7c:4d:0d:4e:10:28:9f:51:95:33:b1:60:
83:9f:71:e9:a4:00:8c:02:65:1d:e3:e5:86:a1:e7:
25:6c:e3:1e:41:9d:ec:a8:3f:34:36:04:5f:6e:d6:
cd:bd:fe:e8:12:4e:93:7d:c8:8a:ce:07:42:eb:ed:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BD:BE:98:F9:44:74:D4:C5:60:6B:4B:C8:83:7B:C0:52:0B:C0:C7
X509v3 Authority Key Identifier:
keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136322e302f32342d3234203d3e203338353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.92.162.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:4a:46:47:fe:a8:d8:65:ad:16:52:6e:0c:fb:b3:40:63:6d:
87:cc:c2:9b:c7:c3:f7:3e:9b:9e:d4:34:53:ee:9c:9c:a0:b2:
c4:b9:0d:e4:14:02:8a:07:65:f2:c7:53:b2:f9:4d:e1:c4:83:
2c:1b:70:7e:aa:b7:a6:97:ef:bb:1c:62:7b:6b:eb:4b:e9:c2:
87:03:5e:42:c3:33:46:8c:35:00:c3:55:94:50:9d:0f:f1:91:
1b:b9:33:4d:8e:ef:f4:f3:e8:6c:16:66:65:fb:59:39:59:b2:
86:97:0f:11:63:2d:74:82:a2:24:80:38:d4:19:2b:30:ee:48:
4f:d8:d8:2f:1a:10:a5:81:b4:c6:cc:7c:65:36:03:c5:e4:e3:
8a:38:74:41:69:15:77:19:c4:f1:03:2e:02:12:a3:93:91:d8:
51:e0:18:3d:28:e7:81:a3:a8:28:35:99:ed:f6:99:cf:33:b0:
23:81:dd:f9:95:d2:29:5f:3f:3e:da:98:f4:ba:35:ed:55:e0:
f0:74:62:41:ea:5c:f3:48:fd:d4:c9:1a:66:c7:4b:d6:77:2a:
43:23:13:c8:75:bc:48:fd:aa:b4:a0:07:78:da:32:38:cb:af:
2d:e7:51:42:05:1b:bf:c1:9e:1d:a7:9b:13:60:fd:20:05:98:
62:f0:2a:05
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQUFxxBgAIZ+iHytF80dsPzH7fIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy
MTg4ODY2RjAeFw0yNDEwMzExMjU1MDBaFw0yNTEwMzAxMzAwMDBaMDMxMTAvBgNV
BAMTKEY3QkRCRTk4Rjk0NDc0RDRDNTYwNkI0QkM4ODM3QkMwNTIwQkMwQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaIajidji6M1Auw0X0KSuibX5a
TU7+SIVHNGkAdIYCXoxYXhNd/+t5ZlxTieMjPsqc1QQd/+PxLdGeVe1Va0Dcbo5v
uu9RS4N4DvkHvPj6zXDG+z9miTGVSAVOXodUTRw230I177VYr/dwBs8hnbkg08O1
DGOyGoVFfbjh4ifqKihTV45zw5+JhY1MQZX+gfI1tjuQlzod33DzqjgxOhYhz7yB
daTPWig7+FDRAmlC6PGQgs3zJjT/RpCiSWa67XRWx4kBRHxNDU4QKJ9RlTOxYIOf
cemkAIwCZR3j5Yah5yVs4x5BneyoPzQ2BF9u1s29/ugSTpN9yIrOB0Lr7a3rAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU972+mPlEdNTFYGtLyIN7wFILwMcwHwYDVR0j
BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB
MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4
ODY2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i
YmRmLTc2NDU3MWZiYWNlNy8wLzMxMzEzMTJlMzkzMjJlMzEzNjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG9cojANBgkqhkiG
9w0BAQsFAAOCAQEAjUpGR/6o2GWtFlJuDPuzQGNth8zCm8fD9z6bntQ0U+6cnKCy
xLkN5BQCigdl8sdTsvlN4cSDLBtwfqq3ppfvuxxie2vrS+nChwNeQsMzRow1AMNV
lFCdD/GRG7kzTY7v9PPobBZmZftZOVmyhpcPEWMtdIKiJIA41BkrMO5IT9jYLxoQ
pYG0xsx8ZTYDxeTjijh0QWkVdxnE8QMuAhKjk5HYUeAYPSjngaOoKDWZ7faZzzOw
I4Hd+ZXSKV8/PtqY9Lo17VXg8HRiQepc80j91MkaZsdL1ncqQyMTyHW8SP2qtKAH
eNoyOMuvLedRQgUbv8GeHaebE2D9IAWYYvAqBQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:54:04 2025 by rpki-client