Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa
File: 3130312e302e342e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier: 8mh8KupdLyWQUvBNib+4skF1x/A11Hrwfuz1jJcLVAs=
Subject key identifier: A9:75:71:8D:70:7E:A2:EA:67:8A:4E:EF:6B:D3:1E:BD:DB:59:E2:0E
Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Certificate serial: 5458F3617792D034E028E8C603E58939A0E68F19
Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa
Signing time: Mon 15 Jul 2024 03:04:18 +0000
ROA not before: Mon 15 Jul 2024 02:59:18 +0000
ROA not after: Mon 14 Jul 2025 03:04:18 +0000
asID: 48465
IP address blocks: 101.0.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:58:f3:61:77:92:d0:34:e0:28:e8:c6:03:e5:89:39:a0:e6:8f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Validity
Not Before: Jul 15 02:59:18 2024 GMT
Not After : Jul 14 03:04:18 2025 GMT
Subject: CN=A975718D707EA2EA678A4EEF6BD31EBDDB59E20E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:ad:1f:bd:1d:dd:db:a1:1f:b9:3a:f6:63:
a8:4a:6b:09:00:6c:77:19:33:e0:51:d2:ab:08:4b:
34:b1:1b:db:ed:31:fd:a0:00:57:5a:c5:47:ad:31:
1d:08:8b:3c:c4:2a:aa:33:25:d9:f5:39:60:6c:21:
f6:97:57:73:69:fc:10:db:09:da:67:84:98:37:7b:
c7:9c:32:f6:35:d2:42:81:c2:e7:c2:83:e8:d9:dc:
43:3d:36:d9:18:f2:27:9d:c3:2d:e2:4f:2e:8f:a8:
bb:cc:26:ad:53:37:44:b7:c8:2f:5a:ae:02:34:50:
7b:28:8a:4a:ba:73:66:c3:11:d7:2c:c1:60:36:4d:
5c:09:2d:77:85:ab:42:2c:30:27:4f:5d:de:81:f5:
22:52:10:c2:5a:6b:b0:a0:f5:0f:6b:93:14:4e:d1:
fa:3a:93:80:2d:bc:72:82:52:ef:2f:cc:42:70:32:
14:76:2b:73:d4:2d:2b:83:c9:31:be:e0:d9:21:90:
37:ec:79:ef:33:b8:59:3e:de:25:19:79:f2:5c:00:
71:dc:2a:b5:48:55:20:46:6d:89:01:3b:6a:cb:11:
59:b6:52:01:3f:4c:e3:3e:00:b1:9b:ad:6d:ac:7d:
eb:cd:be:19:56:56:60:00:31:7e:df:68:94:db:15:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:75:71:8D:70:7E:A2:EA:67:8A:4E:EF:6B:D3:1E:BD:DB:59:E2:0E
X509v3 Authority Key Identifier:
keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.0.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:8a:88:83:17:9c:7b:81:fc:e8:4e:1f:91:75:a3:b0:22:c0:
45:17:c1:8c:c3:6a:a6:bf:48:7a:ae:af:1e:60:94:17:ff:78:
9c:6e:17:30:27:28:59:30:3f:17:8a:b4:16:83:27:35:f4:47:
57:c9:87:08:81:3c:3c:09:eb:64:24:e2:17:2f:96:8e:65:56:
c0:60:10:49:a8:89:ce:4f:9d:a4:28:e6:6d:0f:9a:1d:f4:8b:
26:64:98:19:64:99:57:f0:ee:fa:c7:bb:76:f7:fd:d7:b1:d1:
a7:5d:69:49:7f:1f:20:51:b0:5c:48:23:5b:d0:bf:9a:bc:4b:
2e:55:37:67:0b:b7:55:8a:ea:ca:7c:b1:0e:81:55:17:a5:14:
6e:1b:ea:4b:97:03:56:ca:81:4a:2c:4c:d7:ce:d2:54:da:0d:
2b:0b:1d:cc:c7:92:d5:1c:c5:d2:4c:6b:3a:94:0c:bc:cd:c2:
5d:58:2b:4a:23:6f:34:ad:41:c3:28:0f:e2:91:44:2a:45:09:
62:af:c3:ea:d2:4e:b6:3c:54:96:3b:a3:a0:c3:6f:28:21:e2:
4e:23:b6:68:47:84:a2:0b:f6:29:3c:3f:80:ae:21:27:f3:40:
f4:18:bb:37:ba:ff:10:08:02:b2:32:4f:86:09:e0:24:3c:02:
ba:2d:27:3b
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUVFjzYXeS0DTgKOjGA+WJOaDmjxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG
RTNFN0MzRTAeFw0yNDA3MTUwMjU5MThaFw0yNTA3MTQwMzA0MThaMDMxMTAvBgNV
BAMTKEE5NzU3MThENzA3RUEyRUE2NzhBNEVFRjZCRDMxRUJEREI1OUUyMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImK0fvR3d26EfuTr2Y6hKawkA
bHcZM+BR0qsISzSxG9vtMf2gAFdaxUetMR0IizzEKqozJdn1OWBsIfaXV3Np/BDb
CdpnhJg3e8ecMvY10kKBwufCg+jZ3EM9NtkY8iedwy3iTy6PqLvMJq1TN0S3yC9a
rgI0UHsoikq6c2bDEdcswWA2TVwJLXeFq0IsMCdPXd6B9SJSEMJaa7Cg9Q9rkxRO
0fo6k4AtvHKCUu8vzEJwMhR2K3PULSuDyTG+4NkhkDfsee8zuFk+3iUZefJcAHHc
KrVIVSBGbYkBO2rLEVm2UgE/TOM+ALGbrW2sfevNvhlWVmAAMX7faJTbFZttAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUqXVxjXB+oupnik7va9MevdtZ4g4wHwYDVR0j
BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD
QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF
N0MzRS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4
ZTYtNWRjNjI2YzI5MWQ0LzAvMzEzMDMxMmUzMDJlMzQyZTMwMmYzMjMyMmQzMjM0
MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZQAEMA0GCSqGSIb3DQEBCwUA
A4IBAQCdioiDF5x7gfzoTh+RdaOwIsBFF8GMw2qmv0h6rq8eYJQX/3icbhcwJyhZ
MD8XirQWgyc19EdXyYcIgTw8CetkJOIXL5aOZVbAYBBJqInOT52kKOZtD5od9Ism
ZJgZZJlX8O76x7t29/3XsdGnXWlJfx8gUbBcSCNb0L+avEsuVTdnC7dViurKfLEO
gVUXpRRuG+pLlwNWyoFKLEzXztJU2g0rCx3Mx5LVHMXSTGs6lAy8zcJdWCtKI280
rUHDKA/ikUQqRQlir8Pq0k62PFSWO6Ogw28oIeJOI7ZoR4SiC/YpPD+AriEn80D0
GLs3uv8QCAKyMk+GCeAkPAK6LSc7
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:31 2025 by rpki-client