Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133352e302f32342d3234203d3e2039373934.roa
File: 3131352e3137382e3133352e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: fjb/qzLIkhtnuNXyvFj+SVoNMwwG3ArD5aY1ScWtZ2A=
Subject key identifier: 79:F8:CC:70:63:58:DD:10:35:93:0A:07:C2:6F:3C:14:F2:A4:EA:9F
Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial: 617587E1A7C509AB50959D0396F3B1A04C17A392
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133352e302f32342d3234203d3e2039373934.roa
Signing time: Sat 01 Feb 2025 10:00:00 +0000
ROA not before: Sat 01 Feb 2025 09:55:00 +0000
ROA not after: Sat 31 Jan 2026 10:00:00 +0000
asID: 9794
IP address blocks: 115.178.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:75:87:e1:a7:c5:09:ab:50:95:9d:03:96:f3:b1:a0:4c:17:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Validity
Not Before: Feb 1 09:55:00 2025 GMT
Not After : Jan 31 10:00:00 2026 GMT
Subject: CN=79F8CC706358DD1035930A07C26F3C14F2A4EA9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:f7:ec:99:50:33:12:e8:fe:90:cc:fd:25:
9a:22:e1:13:90:c2:78:35:d7:bc:79:7d:d8:76:f4:
f4:b9:d4:e9:c3:d5:33:de:b0:e7:ce:e4:9b:63:f2:
47:04:14:79:f3:7f:67:15:c1:27:ec:a7:0d:9d:00:
a3:96:65:8f:bf:56:af:74:0f:86:ea:19:62:f1:af:
ef:3c:6a:da:8a:61:87:c0:14:57:1c:2a:3d:75:1c:
84:2c:0a:0c:95:42:11:d0:88:ef:e7:c3:28:60:44:
2d:af:7c:f8:e1:55:9d:96:e3:9c:be:fe:3f:ec:79:
97:f2:a4:c6:c2:d3:2c:2e:a5:dc:1c:29:8b:4d:ac:
c6:7a:71:ae:fd:86:4c:fd:61:c7:c1:d5:c3:f8:1d:
0e:5d:67:76:d0:4d:89:c8:4c:46:78:56:ea:10:cd:
26:02:d6:20:6b:00:a9:dd:93:ca:40:84:ae:fe:da:
4a:32:da:db:d1:10:5e:99:09:82:63:19:df:83:b2:
03:67:cd:27:53:59:2b:17:b2:45:64:05:a8:f5:e5:
99:8f:df:36:29:19:5e:8f:2d:41:51:4d:f7:02:01:
d5:71:2b:02:b8:e8:9f:c8:fc:0c:65:30:b6:0e:99:
f9:2e:d6:ad:5e:ed:1a:58:2b:d8:d9:08:5b:cb:5b:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F8:CC:70:63:58:DD:10:35:93:0A:07:C2:6F:3C:14:F2:A4:EA:9F
X509v3 Authority Key Identifier:
keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133352e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.135.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4c:24:ef:a2:89:f0:60:d0:b5:b0:da:44:4f:7a:68:bf:e2:
d3:8c:c1:4e:b9:85:db:88:a3:67:58:49:16:fc:7b:17:da:09:
d9:d4:43:75:a9:a1:a6:99:73:2d:19:f5:5d:c5:07:17:62:c2:
98:9a:82:91:d4:25:a2:6c:9a:0a:c8:35:81:61:9c:ba:70:3a:
8d:d8:82:08:0d:34:0d:38:00:01:21:d3:e6:8d:aa:09:29:f7:
69:65:6f:22:cc:d8:86:28:53:da:ea:19:18:03:c7:59:76:35:
64:85:e7:5f:fe:60:87:6c:5c:51:86:c6:07:7f:34:7d:d6:f5:
a3:33:3b:40:a0:7a:66:9e:21:3a:51:e5:01:26:cd:01:c8:ca:
04:8a:38:5a:d4:94:4f:23:91:70:95:56:74:1b:6c:2f:c6:d3:
24:72:4c:3c:84:44:5f:36:44:4e:5f:55:88:6b:f2:ee:ef:8e:
e7:d4:e3:59:93:54:4f:e3:06:85:15:d7:21:c4:28:90:5b:85:
52:ff:88:3d:77:65:20:fa:81:26:dd:92:22:4c:fe:ce:d9:5a:
d7:13:91:98:4c:91:1d:c2:e3:16:77:ae:9b:4e:7f:90:1d:6c:
f5:6f:a6:d2:70:e8:af:ae:8e:30:a7:c4:35:89:20:79:57:d5:
97:56:37:dd
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYXWH4afFCatQlZ0DlvOxoEwXo5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3
NjNDRjM2MTAeFw0yNTAyMDEwOTU1MDBaFw0yNjAxMzExMDAwMDBaMDMxMTAvBgNV
BAMTKDc5RjhDQzcwNjM1OEREMTAzNTkzMEEwN0MyNkYzQzE0RjJBNEVBOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJPfsmVAzEuj+kMz9JZoi4ROQ
wng117x5fdh29PS51OnD1TPesOfO5Jtj8kcEFHnzf2cVwSfspw2dAKOWZY+/Vq90
D4bqGWLxr+88atqKYYfAFFccKj11HIQsCgyVQhHQiO/nwyhgRC2vfPjhVZ2W45y+
/j/seZfypMbC0ywupdwcKYtNrMZ6ca79hkz9YcfB1cP4HQ5dZ3bQTYnITEZ4VuoQ
zSYC1iBrAKndk8pAhK7+2koy2tvREF6ZCYJjGd+DsgNnzSdTWSsXskVkBaj15ZmP
3zYpGV6PLUFRTfcCAdVxKwK46J/I/AxlMLYOmfku1q1e7RpYK9jZCFvLW7bpAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUefjMcGNY3RA1kwoHwm88FPKk6p8wHwYDVR0j
BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG
QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND
RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTMzMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHOyhzANBgkqhkiG
9w0BAQsFAAOCAQEAaUwk76KJ8GDQtbDaRE96aL/i04zBTrmF24ijZ1hJFvx7F9oJ
2dRDdamhpplzLRn1XcUHF2LCmJqCkdQlomyaCsg1gWGcunA6jdiCCA00DTgAASHT
5o2qCSn3aWVvIszYhihT2uoZGAPHWXY1ZIXnX/5gh2xcUYbGB380fdb1ozM7QKB6
Zp4hOlHlASbNAcjKBIo4WtSUTyORcJVWdBtsL8bTJHJMPIREXzZETl9ViGvy7u+O
59TjWZNUT+MGhRXXIcQokFuFUv+IPXdlIPqBJt2SIkz+ztla1xORmEyRHcLjFneu
m05/kB1s9W+m0nDor66OMKfENYkgeVfVl1Y33Q==
-----END CERTIFICATE-----
Generated at Wed Apr 9 11:15:45 2025 by rpki-client