Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232312e302f32342d3234203d3e203538333639.roa
File: 32372e3132332e3232312e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: B8ISkQ1a1AzTucAQNKPFqBF8UeXFjuz2gMEMk9qaPmc=
Subject key identifier: 77:57:61:BF:07:3D:BC:C9:20:CB:6D:75:0E:59:64:65:A4:85:38:6C
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 4914EDF280E01743336DA14AB4180A91BD14F2D9
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232312e302f32342d3234203d3e203538333639.roa
Signing time: Mon 01 Jul 2024 01:04:33 +0000
ROA not before: Mon 01 Jul 2024 00:59:33 +0000
ROA not after: Mon 30 Jun 2025 01:04:33 +0000
asID: 58369
IP address blocks: 27.123.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:14:ed:f2:80:e0:17:43:33:6d:a1:4a:b4:18:0a:91:bd:14:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Jul 1 00:59:33 2024 GMT
Not After : Jun 30 01:04:33 2025 GMT
Subject: CN=775761BF073DBCC920CB6D750E596465A485386C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:6d:e6:70:c6:34:46:2d:3c:37:00:b4:8e:
db:83:d7:f9:a6:b1:f9:1b:42:e5:a4:ba:94:20:e7:
e7:49:cb:21:23:96:17:3b:f2:f2:31:f9:7a:35:05:
61:55:de:91:9a:c5:dc:0e:c5:04:26:37:f0:cc:17:
21:53:52:04:9e:ef:f8:32:28:86:7f:d5:bf:52:df:
03:cc:50:34:f1:c1:b8:82:0c:cd:07:2b:f5:83:c4:
18:e5:56:7b:51:33:8b:58:02:19:06:7a:36:93:2e:
88:7f:12:4c:e1:0c:6e:a3:92:bd:4d:59:0f:33:44:
8c:ef:b3:5f:3f:9c:7b:9c:16:e1:57:6d:32:31:b7:
a5:69:9f:56:2a:69:10:2a:92:c3:c8:62:cf:80:84:
89:b5:a1:7a:24:6a:78:52:dd:2d:c2:83:22:3d:33:
b4:ac:6a:7f:34:3f:83:00:b1:0f:ee:35:c3:80:37:
16:db:83:61:f8:b7:e8:37:e0:3b:24:7a:cb:38:56:
2f:7d:f9:b4:0c:fb:80:05:99:08:28:95:ce:e0:f4:
0b:e5:e0:b6:d0:68:38:b0:24:81:f7:8f:46:0a:a2:
9e:60:7a:b8:b1:b5:05:9d:b7:08:e6:9e:42:a7:d4:
56:90:dd:c0:3c:9b:55:49:57:b2:a8:5c:b4:9f:84:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:57:61:BF:07:3D:BC:C9:20:CB:6D:75:0E:59:64:65:A4:85:38:6C
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232312e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.123.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:36:f4:03:f6:8b:38:78:c6:20:e3:63:be:f9:6f:b2:78:a1:
23:5f:2c:f2:e7:20:8f:b0:62:6d:af:d4:0b:38:35:f6:bf:0e:
89:86:ad:4d:d2:91:33:3e:fa:43:72:b2:23:e5:0a:a0:31:74:
4f:77:51:bc:15:a1:c4:f6:6f:97:c5:ad:7e:f3:bd:10:8a:90:
dd:69:55:f0:34:2d:21:3f:61:d4:e2:7b:6c:ab:a7:25:b8:a0:
c5:44:9c:b4:ae:b4:a9:d3:a0:61:82:06:cb:8a:22:3a:29:ba:
db:67:43:73:57:31:2e:d6:66:a0:31:17:00:06:b4:06:cb:f1:
1a:ac:34:76:d5:a4:1c:e3:f8:07:0e:72:ff:76:38:5e:0b:ba:
d3:37:eb:68:4b:9a:da:d9:32:12:e4:e9:9e:70:6c:fc:ee:82:
ad:aa:be:04:a8:b2:4b:72:a3:2d:cb:c7:50:be:06:af:cd:5c:
2d:58:3f:a4:fc:c7:aa:1f:79:ab:f0:4f:25:77:09:20:04:83:
c4:de:0a:24:6e:be:21:bb:54:97:59:9d:c6:2f:55:b9:70:82:
04:1e:9b:f3:b6:17:44:26:11:07:a8:79:8c:5b:6c:3c:56:81:
be:44:bf:19:db:a4:a1:d9:28:34:88:a9:0f:53:cc:ff:4e:ee:
a1:0f:d4:03
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSRTt8oDgF0MzbaFKtBgKkb0U8tkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yNDA3MDEwMDU5MzNaFw0yNTA2MzAwMTA0MzNaMDMxMTAvBgNV
BAMTKDc3NTc2MUJGMDczREJDQzkyMENCNkQ3NTBFNTk2NDY1QTQ4NTM4NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48G3mcMY0Ri08NwC0jtuD1/mm
sfkbQuWkupQg5+dJyyEjlhc78vIx+Xo1BWFV3pGaxdwOxQQmN/DMFyFTUgSe7/gy
KIZ/1b9S3wPMUDTxwbiCDM0HK/WDxBjlVntRM4tYAhkGejaTLoh/EkzhDG6jkr1N
WQ8zRIzvs18/nHucFuFXbTIxt6Vpn1YqaRAqksPIYs+AhIm1oXokanhS3S3CgyI9
M7Ssan80P4MAsQ/uNcOANxbbg2H4t+g34Dskess4Vi99+bQM+4AFmQgolc7g9Avl
4LbQaDiwJIH3j0YKop5gerixtQWdtwjmnkKn1FaQ3cA8m1VJV7KoXLSfhL6tAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUd1dhvwc9vMkgy211DllkZaSFOGwwHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMyMzcyZTMxMzIzMzJlMzIzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABt73TANBgkqhkiG
9w0BAQsFAAOCAQEAHjb0A/aLOHjGIONjvvlvsnihI18s8ucgj7Biba/UCzg19r8O
iYatTdKRMz76Q3KyI+UKoDF0T3dRvBWhxPZvl8WtfvO9EIqQ3WlV8DQtIT9h1OJ7
bKunJbigxUSctK60qdOgYYIGy4oiOim622dDc1cxLtZmoDEXAAa0BsvxGqw0dtWk
HOP4Bw5y/3Y4Xgu60zfraEua2tkyEuTpnnBs/O6Craq+BKiyS3KjLcvHUL4Gr81c
LVg/pPzHqh95q/BPJXcJIASDxN4KJG6+IbtUl1mdxi9VuXCCBB6b87YXRCYRB6h5
jFtsPFaBvkS/GdukodkoNIipD1PM/07uoQ/UAw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:29 2025 by rpki-client