Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34372e302f32342d3234203d3e203338313635.roa
File: 3131362e31322e34372e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier: VkpiL8Y7mHWjGrDnn9dycUumTBP5vDeYhhkpZFuYCSw=
Subject key identifier: 1A:70:B3:C5:28:D2:40:F0:AC:B0:44:83:99:91:13:09:90:BC:8A:4F
Certificate issuer: /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial: 1D4B460B2B98AA4D476D2B266ACC484BDA5111D4
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34372e302f32342d3234203d3e203338313635.roa
Signing time: Mon 27 Jan 2025 02:00:02 +0000
ROA not before: Mon 27 Jan 2025 01:55:02 +0000
ROA not after: Mon 26 Jan 2026 02:00:02 +0000
asID: 38165
IP address blocks: 116.12.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:4b:46:0b:2b:98:aa:4d:47:6d:2b:26:6a:cc:48:4b:da:51:11:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Validity
Not Before: Jan 27 01:55:02 2025 GMT
Not After : Jan 26 02:00:02 2026 GMT
Subject: CN=1A70B3C528D240F0ACB044839991130990BC8A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:06:e6:c8:25:13:16:2f:ca:57:64:c8:9e:
38:de:58:21:6e:87:3a:8d:fa:21:04:df:65:e7:bc:
70:b4:95:93:1c:33:2d:94:e1:3e:85:a4:0c:30:44:
8b:d1:36:7c:09:3f:cc:1b:84:02:1e:2a:4d:5d:2e:
ff:3d:eb:3d:d3:fb:b1:78:2b:a7:db:67:09:2b:5e:
3e:26:a4:0e:09:c4:04:50:95:97:81:97:26:8a:4c:
c6:68:e1:57:59:22:3f:10:b6:24:d7:d1:56:9f:9a:
b2:41:83:0a:4b:ef:49:cc:3e:2d:aa:e3:96:4b:db:
a1:c7:b6:11:1a:db:54:f8:f3:16:f0:81:66:37:35:
24:74:75:f0:52:ec:15:24:f9:17:1d:73:ba:a4:91:
cc:4c:83:69:a2:e0:35:2c:00:83:30:f5:dc:e0:e1:
2a:c0:71:ec:28:89:eb:f0:ce:bd:19:ac:b5:ba:a8:
f4:71:73:03:08:b3:5b:c9:20:0f:3b:09:fd:8a:50:
1b:6a:7a:12:7a:af:34:88:82:9b:0f:44:16:e7:3b:
3f:c4:bd:3c:4e:09:42:55:37:41:4c:ad:c8:09:8a:
9c:81:ad:a4:7b:13:a3:84:9c:90:2a:56:da:f8:f1:
67:be:9d:44:29:57:b2:ec:78:ce:90:ba:7e:97:ba:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:70:B3:C5:28:D2:40:F0:AC:B0:44:83:99:91:13:09:90:BC:8A:4F
X509v3 Authority Key Identifier:
keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34372e302f32342d3234203d3e203338313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.12.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ea:6e:b3:89:06:52:99:45:59:b9:9e:b1:03:67:1d:ec:72:
a5:02:e3:bd:f6:63:ba:55:36:a7:f3:3e:ed:d6:79:e4:0e:03:
c9:91:55:26:b4:ab:ef:32:91:98:b3:dc:26:31:bd:dc:04:ec:
ce:cd:d1:72:62:fb:b3:c9:95:d1:e8:75:c3:34:90:49:54:0a:
ae:01:0f:6b:e6:7c:72:31:d5:22:88:9b:f2:81:ce:58:58:99:
30:12:7d:b7:71:a1:e2:1f:95:c7:f0:3f:65:5c:3c:ac:5d:5d:
c8:fb:e9:85:23:1d:a5:23:36:fb:6f:e4:c2:78:0f:f2:97:f5:
92:6f:1b:dd:18:bd:04:5a:ad:f2:2f:18:44:39:d4:a6:26:c6:
93:99:3a:a4:f1:e8:5f:c5:f1:24:7e:e9:4c:a6:1d:84:68:f5:
f5:53:1d:2e:f5:91:5c:39:77:c1:cb:e3:ec:2b:40:15:57:de:
00:cc:39:60:f4:10:e1:8f:20:7a:0c:8e:79:62:70:42:d2:d1:
6c:e7:6a:8b:d3:3a:bf:d0:b6:c8:9c:ee:ca:3d:e9:64:26:84:
cc:9c:58:28:12:26:6e:e7:b1:e3:3c:54:d4:85:6a:54:50:c9:
7c:48:42:6f:2c:56:e5:9a:54:b1:69:64:76:dc:65:32:6a:3d:
7d:bc:49:2c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUHUtGCyuYqk1HbSsmasxIS9pREdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5
NzlEMTA1MzAeFw0yNTAxMjcwMTU1MDJaFw0yNjAxMjYwMjAwMDJaMDMxMTAvBgNV
BAMTKDFBNzBCM0M1MjhEMjQwRjBBQ0IwNDQ4Mzk5OTExMzA5OTBCQzhBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZQbmyCUTFi/KV2TInjjeWCFu
hzqN+iEE32XnvHC0lZMcMy2U4T6FpAwwRIvRNnwJP8wbhAIeKk1dLv896z3T+7F4
K6fbZwkrXj4mpA4JxARQlZeBlyaKTMZo4VdZIj8QtiTX0VafmrJBgwpL70nMPi2q
45ZL26HHthEa21T48xbwgWY3NSR0dfBS7BUk+Rcdc7qkkcxMg2mi4DUsAIMw9dzg
4SrAcewoievwzr0ZrLW6qPRxcwMIs1vJIA87Cf2KUBtqehJ6rzSIgpsPRBbnOz/E
vTxOCUJVN0FMrcgJipyBraR7E6OEnJAqVtr48We+nUQpV7LseM6Qun6XuuoHAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUGnCzxSjSQPCssESDmZETCZC8ik8wHwYDVR0j
BBgwFoAU8sIkFL8I/Aiwrr9E+vhahZedEFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzQ0OGMxMS1mOGQzLTQ1N2QtOGUyMi04NDg4N2FiMjJhMzAvMC9GMkMyMjQxNEJG
MDhGQzA4QjBBRUJGNDRGQUY4NUE4NTk3OUQxMDUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5NzlE
MTA1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04
ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzEzNjJlMzEzMjJlMzQzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0DC8wDQYJKoZIhvcN
AQELBQADggEBAIzqbrOJBlKZRVm5nrEDZx3scqUC4732Y7pVNqfzPu3WeeQOA8mR
VSa0q+8ykZiz3CYxvdwE7M7N0XJi+7PJldHodcM0kElUCq4BD2vmfHIx1SKIm/KB
zlhYmTASfbdxoeIflcfwP2VcPKxdXcj76YUjHaUjNvtv5MJ4D/KX9ZJvG90YvQRa
rfIvGEQ51KYmxpOZOqTx6F/F8SR+6UymHYRo9fVTHS71kVw5d8HL4+wrQBVX3gDM
OWD0EOGPIHoMjnlicELS0WznaovTOr/Qtsic7so96WQmhMycWCgSJm7nseM8VNSF
alRQyXxIQm8sVuWaVLFpZHbcZTJqPX28SSw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:22 2025 by rpki-client