Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31322e302f32322d3234203d3e203436303233.roa
File: 3137352e3130362e31322e302f32322d3234203d3e203436303233.roa (raw, json)
Hash identifier: U2NDrk8rvhpz0IpEXhH7HHmYlT33QtFEZAc5u8YtFok=
Subject key identifier: D3:E6:9B:AB:C9:90:74:82:33:40:E5:A9:B0:C8:A1:90:C1:96:35:7B
Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial: 18E433A1B551CF000F559E0684126E045C12649D
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31322e302f32322d3234203d3e203436303233.roa
Signing time: Tue 12 Nov 2024 12:33:59 +0000
ROA not before: Tue 12 Nov 2024 12:28:59 +0000
ROA not after: Tue 11 Nov 2025 12:33:59 +0000
asID: 46023
IP address blocks: 175.106.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e4:33:a1:b5:51:cf:00:0f:55:9e:06:84:12:6e:04:5c:12:64:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Validity
Not Before: Nov 12 12:28:59 2024 GMT
Not After : Nov 11 12:33:59 2025 GMT
Subject: CN=D3E69BABC99074823340E5A9B0C8A190C196357B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:cf:b4:88:48:b6:f7:25:91:79:c9:de:1e:
3a:3c:06:b2:2f:82:80:0f:f8:1c:75:50:8c:7c:22:
69:c3:d2:f0:58:47:98:3b:4b:fd:7c:ba:a1:b8:ae:
c2:fa:e4:75:71:c8:1a:ee:63:d7:6a:9a:8b:56:57:
31:0a:0e:bb:14:78:16:4f:ac:c9:0e:6e:73:f3:79:
54:ae:b0:af:6f:74:6f:12:27:d3:79:dd:d0:ea:e6:
56:a5:a2:27:6f:d7:e9:05:47:dd:ed:54:26:62:e0:
d6:59:2f:8c:d2:de:8e:38:0e:0f:9d:96:c8:d0:6b:
8a:80:67:81:c0:a3:93:f5:83:e7:c7:7b:b3:7b:9e:
9e:a1:1d:db:ea:69:cf:0e:8b:0b:0f:59:27:f6:47:
92:d8:aa:66:8e:0d:4c:89:aa:bd:82:d1:73:9c:ea:
0d:ea:f4:d4:12:e5:f9:05:bb:4d:b3:00:a0:44:24:
2f:d5:61:6f:8e:7f:88:e0:fd:21:61:ce:3b:64:28:
bb:4b:8e:86:25:99:e4:df:10:12:8d:5b:07:b8:fd:
db:ad:ed:3a:3e:36:85:9b:0c:58:79:cc:6e:35:68:
6f:c5:e3:2c:2c:c9:07:25:7d:ed:57:b5:ad:03:26:
ae:b1:35:d3:af:3b:3b:d6:04:32:21:0e:4b:a8:6c:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:9B:AB:C9:90:74:82:33:40:E5:A9:B0:C8:A1:90:C1:96:35:7B
X509v3 Authority Key Identifier:
keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31322e302f32322d3234203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.106.12.0/22
Signature Algorithm: sha256WithRSAEncryption
77:9c:01:a4:e0:6d:55:16:86:2e:43:fa:fa:38:a0:43:11:ee:
ab:98:e5:b2:10:3a:1d:d3:be:2e:af:82:f0:b2:99:f0:e0:55:
1c:ae:36:90:79:3c:82:2e:56:5c:ee:bc:c5:6b:af:31:86:53:
c9:0b:db:f9:82:67:f2:2c:6f:7f:54:da:b3:40:df:56:07:59:
d1:bb:dc:9a:82:d8:4b:9f:36:8c:6c:a3:5d:f1:39:1e:b9:d7:
23:01:57:56:63:d8:0f:75:8b:3a:76:4a:fb:35:0d:60:35:b1:
bc:84:03:a7:90:08:72:81:7f:63:65:ee:7f:76:d8:f1:ee:84:
42:ff:1a:58:c5:b8:22:a5:3f:3b:40:fc:4a:94:e5:40:a0:25:
2d:ed:77:91:d1:21:dd:5a:a2:92:47:5b:ef:b8:5a:08:66:20:
f7:a1:6e:e0:01:90:7e:27:ee:f1:59:53:65:17:58:4e:91:ae:
0b:a2:38:17:f6:f7:31:ef:93:4e:45:fd:78:c4:5e:57:d0:1b:
9d:a9:8d:de:3a:cc:03:93:ff:fd:e7:06:e7:3e:73:b5:7e:98:
83:88:d5:25:ab:64:b6:36:2b:37:7a:34:f3:49:f1:09:54:53:
56:04:aa:4d:7b:46:fa:98:7a:eb:2d:c9:c5:f3:aa:8e:cb:c4:
53:ff:7e:47
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGOQzobVRzwAPVZ4GhBJuBFwSZJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3
NjRBNDY5NTAeFw0yNDExMTIxMjI4NTlaFw0yNTExMTExMjMzNTlaMDMxMTAvBgNV
BAMTKEQzRTY5QkFCQzk5MDc0ODIzMzQwRTVBOUIwQzhBMTkwQzE5NjM1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnh8+0iEi29yWRecneHjo8BrIv
goAP+Bx1UIx8ImnD0vBYR5g7S/18uqG4rsL65HVxyBruY9dqmotWVzEKDrsUeBZP
rMkObnPzeVSusK9vdG8SJ9N53dDq5laloidv1+kFR93tVCZi4NZZL4zS3o44Dg+d
lsjQa4qAZ4HAo5P1g+fHe7N7np6hHdvqac8OiwsPWSf2R5LYqmaODUyJqr2C0XOc
6g3q9NQS5fkFu02zAKBEJC/VYW+Of4jg/SFhzjtkKLtLjoYlmeTfEBKNWwe4/dut
7To+NoWbDFh5zG41aG/F4ywsyQclfe1Xta0DJq6xNdOvOzvWBDIhDkuobE2RAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU0+abq8mQdIIzQOWpsMihkMGWNXswHwYDVR0j
BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx
M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB
NDY5NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTk4NWIwLWUxN2EtNDIxYi05
NjU1LTAzMjQ1YTAxYWVmOC8wLzMxMzczNTJlMzEzMDM2MmUzMTMyMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAq9qDDANBgkqhkiG
9w0BAQsFAAOCAQEAd5wBpOBtVRaGLkP6+jigQxHuq5jlshA6HdO+Lq+C8LKZ8OBV
HK42kHk8gi5WXO68xWuvMYZTyQvb+YJn8ixvf1Tas0DfVgdZ0bvcmoLYS582jGyj
XfE5HrnXIwFXVmPYD3WLOnZK+zUNYDWxvIQDp5AIcoF/Y2Xuf3bY8e6EQv8aWMW4
IqU/O0D8SpTlQKAlLe13kdEh3Vqikkdb77haCGYg96Fu4AGQfifu8VlTZRdYTpGu
C6I4F/b3Me+TTkX9eMReV9AbnamN3jrMA5P//ecG5z5ztX6Yg4jVJatktjYrN3o0
80nxCVRTVgSqTXtG+ph66y3JxfOqjsvEU/9+Rw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:37 2025 by rpki-client