Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32302e302f32332d3233203d3e20313431363733.roa
File: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (raw, json)
Hash identifier: tuC8MEUEcdj4aejYW8E3scwSN6FZSzAw4TVHzmh9NqA=
Subject key identifier: 0B:C0:7A:E6:B3:E3:39:EB:A4:C1:84:2B:AB:BA:F4:43:99:27:63:9A
Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial: 26DE7355463CF1DAEB6BD6C772281D34DF18286A
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32302e302f32332d3233203d3e20313431363733.roa
Signing time: Wed 13 Mar 2024 05:00:00 +0000
ROA not before: Wed 13 Mar 2024 04:55:00 +0000
ROA not after: Wed 12 Mar 2025 05:00:00 +0000
asID: 141673
IP address blocks: 202.57.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:de:73:55:46:3c:f1:da:eb:6b:d6:c7:72:28:1d:34:df:18:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Validity
Not Before: Mar 13 04:55:00 2024 GMT
Not After : Mar 12 05:00:00 2025 GMT
Subject: CN=0BC07AE6B3E339EBA4C1842BABBAF4439927639A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:89:2f:fd:25:5f:b6:b1:fc:5f:17:49:e6:
1f:73:02:0b:bb:10:f0:b3:11:5b:00:4a:71:99:9f:
aa:0d:6d:b3:db:1e:8f:59:a2:a8:e1:2d:52:97:b7:
4d:66:dc:b0:7a:29:dd:c4:c5:ab:7f:03:1f:de:54:
fa:fc:43:ed:d7:f0:9c:e9:7b:ba:4b:d5:35:6a:1a:
df:38:06:fc:61:95:40:d4:4b:71:2e:e7:90:a5:86:
60:b0:40:30:c1:03:45:21:34:4d:5b:a1:c6:a1:e1:
3c:2c:6d:27:05:49:7f:bb:cc:b1:53:3d:80:50:98:
31:46:4f:5c:ff:0c:71:df:73:52:22:ea:7d:bf:9b:
57:e3:ea:08:b4:73:02:7f:8c:36:ba:82:ac:0c:62:
ac:df:c2:b2:74:13:06:4b:a8:b3:ff:74:40:48:0b:
c8:f7:3d:9d:28:5c:40:7d:28:80:53:6f:13:db:02:
50:bf:d9:7c:c3:32:e2:e9:5d:77:21:0c:4e:7a:69:
c0:c9:da:f2:e5:f4:19:b0:d7:58:38:0e:88:88:d9:
48:d4:23:09:fc:b3:ed:53:74:14:f4:21:40:5c:b6:
b0:79:c4:ee:0f:f0:af:c7:5b:59:d2:04:22:6d:9d:
b9:17:d8:3b:e7:a2:c7:94:ba:42:d5:2e:a3:a4:72:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C0:7A:E6:B3:E3:39:EB:A4:C1:84:2B:AB:BA:F4:43:99:27:63:9A
X509v3 Authority Key Identifier:
keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32302e302f32332d3233203d3e20313431363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.20.0/23
Signature Algorithm: sha256WithRSAEncryption
27:bd:e8:92:c1:1e:76:29:51:a5:d8:07:3a:a2:9c:19:fb:d1:
7f:bb:ae:94:96:e8:98:16:59:1f:14:16:58:85:18:53:79:b8:
12:f1:32:9d:29:78:f8:4f:41:a2:55:a3:d7:55:6c:e0:7a:02:
0d:ae:fb:13:69:f8:34:dd:6d:21:28:b7:c4:3e:87:f9:14:e7:
13:59:cf:08:fd:a1:f7:ec:86:87:96:0d:1f:9f:cc:c7:97:1b:
3b:db:9b:a8:87:32:47:e9:29:d0:1d:b4:27:1a:53:cf:d0:1d:
5b:0b:8d:7e:9c:f5:12:64:2d:c2:78:58:dd:66:1f:b3:89:fd:
1a:58:27:d4:b7:7a:79:74:c3:91:18:46:60:e6:40:cf:e1:30:
04:9b:9d:30:14:28:d9:09:fc:d2:b0:66:d7:6b:af:da:88:70:
a6:97:62:15:f4:b6:40:b4:9f:22:8e:b1:c5:03:2f:e3:46:6f:
f1:81:83:41:16:a4:da:27:5a:6d:59:c0:32:4c:fa:f8:a9:7d:
7c:1e:4f:17:c6:70:6d:62:89:0b:6c:8b:dd:29:e4:29:53:09:
77:fc:05:7a:7a:12:0d:25:b8:84:dd:df:07:84:3f:30:af:db:
cb:8d:51:41:27:3d:f3:ef:6d:ec:ec:d1:fb:8a:86:e2:31:09:
06:40:57:67
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJt5zVUY88drra9bHcigdNN8YKGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3
Qjg1OUJENTAeFw0yNDAzMTMwNDU1MDBaFw0yNTAzMTIwNTAwMDBaMDMxMTAvBgNV
BAMTKDBCQzA3QUU2QjNFMzM5RUJBNEMxODQyQkFCQkFGNDQzOTkyNzYzOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5d4kv/SVftrH8XxdJ5h9zAgu7
EPCzEVsASnGZn6oNbbPbHo9ZoqjhLVKXt01m3LB6Kd3Exat/Ax/eVPr8Q+3X8Jzp
e7pL1TVqGt84BvxhlUDUS3Eu55ClhmCwQDDBA0UhNE1bocah4TwsbScFSX+7zLFT
PYBQmDFGT1z/DHHfc1Ii6n2/m1fj6gi0cwJ/jDa6gqwMYqzfwrJ0EwZLqLP/dEBI
C8j3PZ0oXEB9KIBTbxPbAlC/2XzDMuLpXXchDE56acDJ2vLl9Bmw11g4DoiI2UjU
Iwn8s+1TdBT0IUBctrB5xO4P8K/HW1nSBCJtnbkX2DvnoseUukLVLqOkchhZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUC8B65rPjOeukwYQrq7r0Q5knY5owHwYDVR0j
BBgwFoAUH5ae6bCDjSIVYRioiLgb8nuFm9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZDNmMDk1Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMC8xRjk2OUVFOUIw
ODM4RDIyMTU2MTE4QTg4OEI4MUJGMjdCODU5QkQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3Qjg1
OUJENS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkM2YwOTViLTcxMzAtNDEyMi1h
ZjI1LTdkMmU3YTExYjFiMS8wLzMyMzAzMjJlMzUzNzJlMzIzMDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzQzMTM2MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAco5FDANBgkqhkiG
9w0BAQsFAAOCAQEAJ73oksEedilRpdgHOqKcGfvRf7uulJbomBZZHxQWWIUYU3m4
EvEynSl4+E9BolWj11Vs4HoCDa77E2n4NN1tISi3xD6H+RTnE1nPCP2h9+yGh5YN
H5/Mx5cbO9ubqIcyR+kp0B20JxpTz9AdWwuNfpz1EmQtwnhY3WYfs4n9Glgn1Ld6
eXTDkRhGYOZAz+EwBJudMBQo2Qn80rBm12uv2ohwppdiFfS2QLSfIo6xxQMv40Zv
8YGDQRak2idabVnAMkz6+Kl9fB5PF8ZwbWKJC2yL3SnkKVMJd/wFenoSDSW4hN3f
B4Q/MK/by41RQSc98+9t7OzR+4qG4jEJBkBXZw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:09 2025 by rpki-client