Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa
File: 3230322e3134382e31332e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: Y0lVW49rFP5/3jKy+A+QvYTD9cg/wLZpxdgodSxigL0=
Subject key identifier: 56:47:08:B3:2D:F6:0A:2C:15:33:89:FE:00:DF:54:01:E5:2A:DC:75
Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial: 5F3B1618F20C3A69A330BE9CD7925B99D7893364
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa
Signing time: Mon 01 Jul 2024 01:02:59 +0000
ROA not before: Mon 01 Jul 2024 00:57:59 +0000
ROA not after: Mon 30 Jun 2025 01:02:59 +0000
asID: 38778
IP address blocks: 202.148.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:3b:16:18:f2:0c:3a:69:a3:30:be:9c:d7:92:5b:99:d7:89:33:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Validity
Not Before: Jul 1 00:57:59 2024 GMT
Not After : Jun 30 01:02:59 2025 GMT
Subject: CN=564708B32DF60A2C153389FE00DF5401E52ADC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:e6:a8:6e:0c:9b:ad:d9:c8:50:b7:15:7a:
f4:b9:51:8e:4b:17:3b:fa:63:aa:33:83:d6:73:97:
e3:ae:42:2f:1f:d2:86:fd:2d:c4:cd:66:00:06:21:
a5:13:2d:f3:be:93:7e:2c:71:22:d5:d0:b8:52:d2:
3c:0f:06:0f:f3:70:06:b8:76:5a:5c:8e:80:58:a8:
00:36:ef:5d:b9:3a:e4:0e:01:8e:cf:91:68:6c:a4:
c6:ce:5a:5c:e9:56:6f:ea:c7:5b:4d:a1:6f:64:f4:
0f:1c:7c:ed:cc:89:2f:45:80:08:6c:64:7a:91:66:
df:82:19:8a:7b:5d:e0:8b:e2:5c:50:53:04:ad:54:
a1:48:9d:e8:1d:97:05:b2:b2:97:b0:07:76:f6:37:
42:bf:64:00:12:97:8f:8a:fe:9f:c6:b4:ef:89:46:
5e:3f:e7:0f:26:df:55:e4:f2:c0:0e:e9:8c:e8:08:
44:0d:c9:02:5c:03:7c:01:da:e3:53:88:94:8d:2c:
01:bd:c2:2a:fa:52:09:bb:51:b5:01:14:bd:23:c4:
ce:bc:57:22:19:c3:89:b9:65:cc:32:ac:c1:10:4a:
8a:76:e9:7d:88:8f:35:d2:bb:76:d9:6c:7f:e7:1c:
d0:31:ba:3e:bf:8f:c8:94:cd:e8:01:e2:f1:5b:7e:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:08:B3:2D:F6:0A:2C:15:33:89:FE:00:DF:54:01:E5:2A:DC:75
X509v3 Authority Key Identifier:
keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.13.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a1:7b:fe:50:a5:ea:0c:76:a2:60:7d:e8:10:31:5d:6d:4a:
ca:2e:8e:1a:2f:a6:4e:5d:a9:24:7a:10:fd:00:e1:32:ee:97:
22:0e:50:20:bb:d9:c7:26:ff:c0:08:46:6d:49:b1:3b:13:79:
2a:c6:b8:5e:80:17:fd:67:53:ec:37:6c:95:6a:7f:f7:0e:ff:
b3:64:17:1e:71:c3:0e:71:8d:75:70:00:0f:9f:a2:38:71:f2:
ae:17:a8:0f:78:0b:d6:b4:18:a5:2c:91:d9:e7:7c:5d:36:3c:
ff:b5:86:98:d4:85:62:8c:8e:f8:f2:b7:95:51:29:2a:60:01:
22:a7:5f:f7:eb:10:44:fc:07:45:8c:62:47:e0:72:9b:8d:4b:
0b:c4:ab:39:6d:97:5c:37:f3:ce:72:81:3d:49:ae:ee:17:99:
94:40:9b:30:b8:60:cd:ae:95:f1:cd:b8:f3:f8:5d:a9:5f:8a:
e1:02:09:7f:ae:47:5c:02:4f:d7:3f:ed:f7:85:da:70:d9:2b:
97:b3:d9:22:40:e0:40:f3:1d:b2:59:d4:8f:66:05:a8:d3:a4:
1e:fd:4c:7e:75:04:66:02:b0:93:07:49:82:6a:fd:df:36:8b:
ed:af:2a:6a:a0:89:27:27:a4:46:d3:60:4a:9a:c7:30:00:76:
7c:9d:48:f2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXzsWGPIMOmmjML6c15JbmdeJM2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3
NjNDRjM2MTAeFw0yNDA3MDEwMDU3NTlaFw0yNTA2MzAwMTAyNTlaMDMxMTAvBgNV
BAMTKDU2NDcwOEIzMkRGNjBBMkMxNTMzODlGRTAwREY1NDAxRTUyQURDNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvg+aobgybrdnIULcVevS5UY5L
Fzv6Y6ozg9Zzl+OuQi8f0ob9LcTNZgAGIaUTLfO+k34scSLV0LhS0jwPBg/zcAa4
dlpcjoBYqAA27125OuQOAY7PkWhspMbOWlzpVm/qx1tNoW9k9A8cfO3MiS9FgAhs
ZHqRZt+CGYp7XeCL4lxQUwStVKFInegdlwWyspewB3b2N0K/ZAASl4+K/p/GtO+J
Rl4/5w8m31Xk8sAO6YzoCEQNyQJcA3wB2uNTiJSNLAG9wir6Ugm7UbUBFL0jxM68
VyIZw4m5ZcwyrMEQSop26X2IjzXSu3bZbH/nHNAxuj6/j8iUzegB4vFbfs+FAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVkcIsy32CiwVM4n+AN9UAeUq3HUwHwYDVR0j
BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG
QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND
RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqUDTANBgkqhkiG
9w0BAQsFAAOCAQEAIKF7/lCl6gx2omB96BAxXW1Kyi6OGi+mTl2pJHoQ/QDhMu6X
Ig5QILvZxyb/wAhGbUmxOxN5Ksa4XoAX/WdT7DdslWp/9w7/s2QXHnHDDnGNdXAA
D5+iOHHyrheoD3gL1rQYpSyR2ed8XTY8/7WGmNSFYoyO+PK3lVEpKmABIqdf9+sQ
RPwHRYxiR+Bym41LC8SrOW2XXDfzznKBPUmu7heZlECbMLhgza6V8c248/hdqV+K
4QIJf65HXAJP1z/t94XacNkrl7PZIkDgQPMdslnUj2YFqNOkHv1MfnUEZgKwkwdJ
gmr93zaL7a8qaqCJJyekRtNgSprHMAB2fJ1I8g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:01 2025 by rpki-client