Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa
File: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (raw, json)
Hash identifier: sSIdllnvg4M1DGs8YGmNKZNiURvN96H1MMo+ucCRqd8=
Subject key identifier: B8:1B:4F:69:9B:B6:6B:DE:B2:05:0E:CA:0D:28:9C:82:4C:79:35:57
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 428B75C3E0697EE61DFFAA698A8C66381CC744E9
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa
Signing time: Sun 13 Oct 2024 21:39:58 +0000
ROA not before: Sun 13 Oct 2024 21:34:58 +0000
ROA not after: Sun 12 Oct 2025 21:39:58 +0000
asID: 202673
IP address blocks: 122.128.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8b:75:c3:e0:69:7e:e6:1d:ff:aa:69:8a:8c:66:38:1c:c7:44:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Oct 13 21:34:58 2024 GMT
Not After : Oct 12 21:39:58 2025 GMT
Subject: CN=B81B4F699BB66BDEB2050ECA0D289C824C793557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:7b:49:ed:9d:11:10:81:a8:67:8c:38:30:
d7:3e:8a:57:99:dc:61:8f:22:33:74:87:bc:f9:5b:
da:4c:19:15:29:11:ea:18:d3:97:22:ea:95:fe:54:
c1:2f:2a:7a:3a:b9:61:ee:b6:d0:16:9e:f3:f8:9c:
b8:12:a3:3c:84:59:3a:44:74:27:46:bb:ac:21:57:
5f:ca:ae:d0:a7:80:d4:03:4c:21:0b:25:92:0c:bb:
f3:fc:e2:12:6b:96:0e:f7:4d:2d:27:86:fe:92:d7:
76:07:84:20:a5:a5:a7:2a:55:27:4e:2e:e2:43:b1:
1d:8d:e2:74:4d:f0:0f:17:57:e1:54:33:75:cb:19:
d8:16:3b:d4:18:3f:5c:d7:f2:1c:35:a6:02:ca:4b:
a7:53:00:a1:02:08:7e:11:da:df:26:41:d2:94:53:
fd:43:5d:4d:34:1a:9a:84:d7:e7:d3:88:32:cd:97:
f5:80:ec:1d:f1:2f:ca:b7:7f:63:a3:2c:25:ac:eb:
68:e3:21:69:46:e6:37:4e:f3:bc:ba:ca:5c:d9:e8:
03:26:60:d6:dd:7a:b0:7b:99:20:56:84:51:8d:88:
96:11:0d:87:72:c2:4e:f1:d7:6f:13:9f:fb:4b:d1:
92:65:b1:bc:1a:80:06:27:a9:e9:5d:b4:30:40:f2:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1B:4F:69:9B:B6:6B:DE:B2:05:0E:CA:0D:28:9C:82:4C:79:35:57
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.22.0/24
Signature Algorithm: sha256WithRSAEncryption
61:96:8e:19:c5:cd:92:cb:1a:8c:7c:d1:c0:b8:87:3d:f9:89:
4a:da:2f:ea:6d:f1:74:35:43:a2:a2:d9:46:d5:31:b7:2f:5b:
cc:03:48:0e:63:e4:09:4f:fc:7d:93:e9:df:e4:c5:4f:a9:45:
5d:a9:a1:81:9a:7c:79:46:56:5b:1e:13:02:2f:e9:61:a8:83:
f3:c7:a8:38:a3:a4:d7:d4:06:b0:51:ef:5f:7b:2d:09:32:66:
35:d4:3e:32:74:1b:42:22:ed:39:d3:ff:da:fd:f8:7f:5c:6e:
45:a9:72:59:e2:bb:e4:a2:b1:d3:7b:37:5a:9b:b3:4f:dc:88:
33:75:aa:39:80:fa:9a:df:78:0f:7f:32:a3:cd:40:0c:b6:24:
6c:e2:8c:51:8e:3b:dd:60:33:2d:c7:3a:d8:72:59:39:a8:9a:
55:39:59:98:95:b5:b3:28:66:40:9b:ef:7f:5f:bb:9d:a7:7d:
d5:ce:5d:c9:fe:53:48:91:88:62:01:c9:e1:10:aa:5f:1b:e1:
3f:46:78:3c:5a:ff:df:dd:b9:a8:e7:05:0c:9a:c4:34:49:f3:
8b:02:e1:46:b3:c0:a2:92:17:33:30:8b:63:7a:ec:e2:92:78:
62:ca:88:9b:3a:f5:4d:e5:82:6f:11:85:57:bd:0f:d9:05:de:
a6:d0:52:a2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQot1w+BpfuYd/6ppioxmOBzHROkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw
MjM4MTk0RjAeFw0yNDEwMTMyMTM0NThaFw0yNTEwMTIyMTM5NThaMDMxMTAvBgNV
BAMTKEI4MUI0RjY5OUJCNjZCREVCMjA1MEVDQTBEMjg5QzgyNEM3OTM1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQHtJ7Z0REIGoZ4w4MNc+ileZ
3GGPIjN0h7z5W9pMGRUpEeoY05ci6pX+VMEvKno6uWHuttAWnvP4nLgSozyEWTpE
dCdGu6whV1/KrtCngNQDTCELJZIMu/P84hJrlg73TS0nhv6S13YHhCClpacqVSdO
LuJDsR2N4nRN8A8XV+FUM3XLGdgWO9QYP1zX8hw1pgLKS6dTAKECCH4R2t8mQdKU
U/1DXU00GpqE1+fTiDLNl/WA7B3xL8q3f2OjLCWs62jjIWlG5jdO87y6ylzZ6AMm
YNbderB7mSBWhFGNiJYRDYdywk7x128Tn/tL0ZJlsbwagAYnqeldtDBA8rK9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUuBtPaZu2a96yBQ7KDSicgkx5NVcwHwYDVR0j
BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2
OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4
MTk0Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i
OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMDMyMzYzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeoAWMA0GCSqG
SIb3DQEBCwUAA4IBAQBhlo4Zxc2SyxqMfNHAuIc9+YlK2i/qbfF0NUOiotlG1TG3
L1vMA0gOY+QJT/x9k+nf5MVPqUVdqaGBmnx5RlZbHhMCL+lhqIPzx6g4o6TX1Aaw
Ue9fey0JMmY11D4ydBtCIu050//a/fh/XG5FqXJZ4rvkorHTezdam7NP3Igzdao5
gPqa33gPfzKjzUAMtiRs4oxRjjvdYDMtxzrYclk5qJpVOVmYlbWzKGZAm+9/X7ud
p33Vzl3J/lNIkYhiAcnhEKpfG+E/Rng8Wv/f3bmo5wUMmsQ0SfOLAuFGs8Cikhcz
MItjeuziknhiyoibOvVN5YJvEYVXvQ/ZBd6m0FKi
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:54 2025 by rpki-client