Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa
File: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (raw, json)
Hash identifier: s8fg30WIA14JUIcMS3F2iWvbH1sPMTJyCo51fPayB6w=
Subject key identifier: 62:6B:C5:C5:87:4D:F7:9E:81:7D:62:29:E2:12:6F:C3:54:4F:D5:99
Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D
Certificate serial: 4F4B8191848917B93E573282B2C244C176DCC9BB
Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa
Signing time: Mon 28 Oct 2024 11:00:02 +0000
ROA not before: Mon 28 Oct 2024 10:55:02 +0000
ROA not after: Mon 27 Oct 2025 11:00:02 +0000
asID: 138120
IP address blocks: 175.111.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:4b:81:91:84:89:17:b9:3e:57:32:82:b2:c2:44:c1:76:dc:c9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D
Validity
Not Before: Oct 28 10:55:02 2024 GMT
Not After : Oct 27 11:00:02 2025 GMT
Subject: CN=626BC5C5874DF79E817D6229E2126FC3544FD599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:ec:79:28:69:63:ca:7e:a9:d9:a8:e1:b0:
c8:f8:c9:49:81:7c:1d:6d:c6:a8:58:09:24:7f:3f:
96:2c:fc:cc:b0:b7:30:06:39:02:5c:d2:9a:35:f8:
86:8b:0b:c4:20:c7:a6:3d:67:c4:5b:bf:2c:76:d5:
cf:ea:5a:b6:b9:37:e7:17:6e:f6:42:f0:ab:9a:3a:
cc:f8:17:10:40:6c:9b:1e:92:de:9c:78:ab:a5:c8:
c2:1a:1a:93:a1:e9:89:23:b1:85:9d:5b:1c:95:2d:
4c:8e:17:7e:a3:9a:81:3e:9e:ae:0e:23:d3:79:c5:
29:03:bd:06:c7:6f:02:f6:38:a0:b5:d5:cb:24:b9:
a6:27:a2:46:16:87:0c:6c:ca:79:ac:c0:a7:4a:1a:
29:57:a8:56:0f:13:72:c3:50:a6:1e:de:9c:be:77:
95:f3:d6:60:de:8b:28:a4:b7:84:f9:e4:6e:f5:c2:
51:ec:bb:fd:3c:d4:23:6e:ad:ad:5b:74:b2:11:d4:
a5:b4:1f:0b:19:a9:70:72:f5:e2:fd:54:0c:5b:1f:
cc:d7:28:12:16:09:aa:a7:83:ac:58:5a:90:7f:d8:
ce:3f:0d:fb:f9:85:10:c6:d5:29:36:a6:15:2e:15:
46:a0:f5:05:37:f8:9e:a4:40:46:67:e4:d3:48:1b:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6B:C5:C5:87:4D:F7:9E:81:7D:62:29:E2:12:6F:C3:54:4F:D5:99
X509v3 Authority Key Identifier:
keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.111.98.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d0:95:f4:30:04:61:03:5c:0e:17:72:44:ca:62:05:65:0c:
63:86:a3:22:54:f7:13:cd:c6:a2:69:7e:cd:de:9e:26:1c:6e:
2a:2b:a9:a9:db:a9:ca:ea:aa:3d:bc:38:b9:de:92:a2:f4:80:
c2:1c:f7:92:ba:d9:96:13:78:66:df:ab:8f:60:17:52:ef:14:
15:e3:42:e0:7e:c9:aa:6f:6a:81:04:e3:49:0d:5f:f6:01:18:
d0:8b:8a:2c:ec:24:a3:bb:ca:61:b7:5f:bb:e7:9a:ce:23:fe:
a4:08:1f:0a:a1:a2:9e:0f:52:4e:f8:31:cf:5e:34:fe:93:7f:
3a:29:8b:bc:c9:ba:1d:36:fd:9a:59:e8:cb:d4:d5:e7:36:77:
33:b8:0e:92:80:dc:00:54:81:7e:fc:39:ba:c2:33:de:29:34:
9d:ab:9f:94:0c:de:82:a1:61:3f:f5:1b:a6:28:51:46:ea:fa:
4e:6c:d0:53:c2:a2:fe:2c:ba:28:ae:91:cf:13:85:4b:de:ce:
bb:75:77:15:41:3c:e8:29:5a:18:3c:55:92:d0:75:ee:fa:31:
d6:57:c9:1a:b2:1a:c2:59:ac:80:65:9f:8a:dc:24:de:0b:52:
71:57:ed:02:7a:ef:33:cf:ed:e3:65:6f:7a:e2:a2:f6:cb:d1:
ac:ee:9f:e4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUT0uBkYSJF7k+VzKCssJEwXbcybswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC
Q0NDMDQ2RDAeFw0yNDEwMjgxMDU1MDJaFw0yNTEwMjcxMTAwMDJaMDMxMTAvBgNV
BAMTKDYyNkJDNUM1ODc0REY3OUU4MTdENjIyOUUyMTI2RkMzNTQ0RkQ1OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXux5KGljyn6p2ajhsMj4yUmB
fB1txqhYCSR/P5Ys/MywtzAGOQJc0po1+IaLC8Qgx6Y9Z8Rbvyx21c/qWra5N+cX
bvZC8KuaOsz4FxBAbJsekt6ceKulyMIaGpOh6YkjsYWdWxyVLUyOF36jmoE+nq4O
I9N5xSkDvQbHbwL2OKC11cskuaYnokYWhwxsynmswKdKGilXqFYPE3LDUKYe3py+
d5Xz1mDeiyikt4T55G71wlHsu/081CNura1bdLIR1KW0HwsZqXBy9eL9VAxbH8zX
KBIWCaqng6xYWpB/2M4/Dfv5hRDG1Sk2phUuFUag9QU3+J6kQEZn5NNIGwArAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUYmvFxYdN956BfWIp4hJvw1RP1ZkwHwYDVR0j
BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx
Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND
MDQ2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiYThjZjY1LWQ0NjgtNDMwOS05
ZjMwLTliOWYyNmQ5Y2UyZC8wLzMxMzczNTJlMzEzMTMxMmUzOTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr29iMA0GCSqG
SIb3DQEBCwUAA4IBAQCe0JX0MARhA1wOF3JEymIFZQxjhqMiVPcTzcaiaX7N3p4m
HG4qK6mp26nK6qo9vDi53pKi9IDCHPeSutmWE3hm36uPYBdS7xQV40Lgfsmqb2qB
BONJDV/2ARjQi4os7CSju8pht1+755rOI/6kCB8KoaKeD1JO+DHPXjT+k386KYu8
ybodNv2aWejL1NXnNnczuA6SgNwAVIF+/Dm6wjPeKTSdq5+UDN6CoWE/9RumKFFG
6vpObNBTwqL+LLoorpHPE4VL3s67dXcVQTzoKVoYPFWS0HXu+jHWV8kashrCWayA
ZZ+K3CTeC1JxV+0Ceu8zz+3jZW964qL2y9Gs7p/k
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:58 2025 by rpki-client