Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3231302e37392e3230382e302f32302d3230203d3e203137393130.roa
File: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (raw, json)
Hash identifier: Elh39w1U+GBq3XiIsIcKakRKgH0ks1OQk6DpSiPwZ6E=
Subject key identifier: 66:98:CE:75:2D:97:69:95:0C:CD:A8:93:1C:58:3F:BF:55:49:8E:40
Certificate issuer: /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial: 5CD5D5A3EFFE737DB66D372006F5F86EC1D12266
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3231302e37392e3230382e302f32302d3230203d3e203137393130.roa
Signing time: Mon 01 Jul 2024 01:05:23 +0000
ROA not before: Mon 01 Jul 2024 01:00:23 +0000
ROA not after: Mon 30 Jun 2025 01:05:23 +0000
asID: 17910
IP address blocks: 210.79.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d5:d5:a3:ef:fe:73:7d:b6:6d:37:20:06:f5:f8:6e:c1:d1:22:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Validity
Not Before: Jul 1 01:00:23 2024 GMT
Not After : Jun 30 01:05:23 2025 GMT
Subject: CN=6698CE752D9769950CCDA8931C583FBF55498E40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:79:c0:34:a8:35:6e:57:14:44:7d:58:c6:
4f:49:a6:a6:10:15:10:1b:f7:84:a9:ac:81:f1:cb:
68:10:cd:3e:03:a3:7f:2a:20:2c:9b:f8:9f:f1:4e:
6f:a3:33:43:ca:28:59:5c:3c:03:7d:b1:ec:d3:7a:
af:5b:74:23:e2:ff:72:94:3b:98:e2:25:36:e4:f2:
48:f6:bb:bc:75:d2:b4:5e:a1:90:9b:e2:f5:9e:59:
85:90:4d:fc:f4:5a:09:41:7c:2d:02:6c:3f:89:f6:
8e:88:3a:dd:17:14:64:2b:a1:60:b0:28:c4:1b:a2:
b8:95:d1:bd:ce:bc:ed:a7:e4:83:52:41:52:e8:94:
4d:8b:90:35:71:84:bb:fe:4f:43:86:c3:f3:b4:54:
8b:83:17:46:92:f8:4c:14:0c:6b:63:19:5f:02:48:
da:11:dc:6f:36:68:17:02:78:25:67:21:b6:32:f2:
82:a1:ec:d0:b5:11:82:23:67:b5:f9:e7:21:2d:2a:
2f:10:76:32:48:29:60:f6:c0:a4:4f:6a:26:64:22:
5a:4e:2e:e2:4d:e0:cb:70:40:80:6c:0d:76:79:a0:
2b:3f:57:71:cc:76:ca:ad:1a:d7:6f:91:0d:f4:ed:
10:6f:4f:d5:2c:82:38:5f:68:6b:0b:34:40:2c:ff:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:98:CE:75:2D:97:69:95:0C:CD:A8:93:1C:58:3F:BF:55:49:8E:40
X509v3 Authority Key Identifier:
keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3231302e37392e3230382e302f32302d3230203d3e203137393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:96:5f:01:05:69:0c:c6:15:90:41:21:ed:96:e5:14:9d:46:
56:99:c5:6e:68:da:06:77:96:92:d2:25:0c:58:a9:ef:f3:98:
4e:6b:91:da:a6:22:48:ea:5f:16:e9:48:53:51:e3:a8:f5:6e:
6f:5f:f3:8f:3a:43:5c:f9:30:93:21:83:18:3c:ff:e8:f1:6c:
f0:51:b2:81:a9:ac:ef:17:2b:c1:57:e9:86:2d:2c:7b:91:e6:
4d:77:32:67:3c:3d:d6:76:fc:7f:a9:c5:fb:6d:51:8b:28:4c:
ac:e7:59:47:1b:3a:94:ae:ea:ed:96:34:0b:33:71:e9:f2:6b:
b8:e4:c8:a3:29:81:f1:5c:9b:d4:8b:15:64:3c:9d:2f:a1:e0:
0e:1e:b3:df:7d:27:3c:b4:b3:4a:57:ee:7c:68:0f:57:c5:67:
69:59:0f:8c:1c:12:1e:7a:17:02:70:ef:7a:2c:43:b9:71:d3:
1a:0b:a3:f1:1a:78:f5:cb:f6:96:73:e8:ae:7f:ab:88:e7:1c:
57:ec:5e:aa:f4:3d:33:67:8e:39:b7:b6:00:f2:cd:8b:b5:93:
17:47:d2:ff:7d:21:b0:2c:36:34:c6:7b:7c:e5:09:82:5d:4b:
99:83:1a:1f:71:32:ab:af:78:ee:df:0a:af:fe:ea:3e:9d:67:
a9:a5:f9:d5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXNXVo+/+c322bTcgBvX4bsHRImYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQw
QzM0QkVFRDAeFw0yNDA3MDEwMTAwMjNaFw0yNTA2MzAwMTA1MjNaMDMxMTAvBgNV
BAMTKDY2OThDRTc1MkQ5NzY5OTUwQ0NEQTg5MzFDNTgzRkJGNTU0OThFNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ1XnANKg1blcURH1Yxk9JpqYQ
FRAb94SprIHxy2gQzT4Do38qICyb+J/xTm+jM0PKKFlcPAN9sezTeq9bdCPi/3KU
O5jiJTbk8kj2u7x10rReoZCb4vWeWYWQTfz0WglBfC0CbD+J9o6IOt0XFGQroWCw
KMQboriV0b3OvO2n5INSQVLolE2LkDVxhLv+T0OGw/O0VIuDF0aS+EwUDGtjGV8C
SNoR3G82aBcCeCVnIbYy8oKh7NC1EYIjZ7X55yEtKi8QdjJIKWD2wKRPaiZkIlpO
LuJN4MtwQIBsDXZ5oCs/V3HMdsqtGtdvkQ307RBvT9UsgjhfaGsLNEAs/8rdAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUZpjOdS2XaZUMzaiTHFg/v1VJjkAwHwYDVR0j
BBgwFoAUFjX15Bl5g0G9xhXU4cauNAw0vu0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMC8xNjM1RjVFNDE5
Nzk4MzQxQkRDNjE1RDRFMUM2QUUzNDBDMzRCRUVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQwQzM0
QkVFRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2NDUwMDMyLTU0OTItNGE1YS05
NDNmLWJkYjQ3MzM0MTIzMy8wLzMyMzEzMDJlMzczOTJlMzIzMDM4MmUzMDJmMzIz
MDJkMzIzMDIwM2QzZTIwMzEzNzM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNJP0DANBgkqhkiG
9w0BAQsFAAOCAQEASpZfAQVpDMYVkEEh7ZblFJ1GVpnFbmjaBneWktIlDFip7/OY
TmuR2qYiSOpfFulIU1HjqPVub1/zjzpDXPkwkyGDGDz/6PFs8FGygams7xcrwVfp
hi0se5HmTXcyZzw91nb8f6nF+21RiyhMrOdZRxs6lK7q7ZY0CzNx6fJruOTIoymB
8Vyb1IsVZDydL6HgDh6z330nPLSzSlfufGgPV8VnaVkPjBwSHnoXAnDveixDuXHT
Gguj8Rp49cv2lnPorn+riOccV+xeqvQ9M2eOObe2APLNi7WTF0fS/30hsCw2NMZ7
fOUJgl1LmYMaH3Eyq6947t8Kr/7qPp1nqaX51Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:45 2025 by rpki-client