Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa
File: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (raw, json)
Hash identifier: vUUnROqus6D3mRY4HQAIFQ7ChbN3n89TAiS9dIrWGT8=
Subject key identifier: EF:52:10:3B:C7:5C:6C:53:DF:63:11:75:C5:94:76:21:6F:EF:8C:9C
Certificate issuer: /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial: 31AFD814371C189A21F71E14D48075D4D3E1DFCB
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa
Signing time: Mon 01 Jul 2024 01:06:12 +0000
ROA not before: Mon 01 Jul 2024 01:01:12 +0000
ROA not after: Mon 30 Jun 2025 01:06:12 +0000
asID: 55666
IP address blocks: 116.254.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:af:d8:14:37:1c:18:9a:21:f7:1e:14:d4:80:75:d4:d3:e1:df:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C00163880F235714759920507217F2A7D557C953
Validity
Not Before: Jul 1 01:01:12 2024 GMT
Not After : Jun 30 01:06:12 2025 GMT
Subject: CN=EF52103BC75C6C53DF631175C59476216FEF8C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:fa:2c:ec:f1:99:ea:87:df:ce:86:aa:c7:
21:2b:7f:7b:d6:2b:6d:cb:17:2b:a5:39:e7:d7:e1:
5b:d7:e5:20:6f:c8:8a:70:b1:ae:0d:bd:27:1f:16:
11:90:6c:a5:79:bd:fa:52:3b:8f:5f:23:a0:4c:0b:
d4:e4:5c:f1:41:c5:c1:29:c0:81:27:6c:bf:f8:a8:
32:12:6d:db:ea:04:d2:a0:8e:3b:89:45:2a:2f:da:
54:ad:9d:c7:c0:27:9c:23:38:d3:02:f3:88:12:e7:
d4:bf:aa:77:f0:9e:09:1c:51:ad:5b:c3:b8:31:66:
77:bd:73:05:0a:9f:95:71:f2:cd:c3:b6:e3:a2:6c:
5a:c1:a7:2f:d4:d9:bd:60:5a:79:3c:29:4b:77:49:
9a:7e:d5:62:ac:58:50:0e:32:23:37:74:4b:cd:6d:
f5:75:96:2b:36:ee:88:24:e9:e8:53:8e:0b:39:7e:
6e:73:a8:07:f8:f1:ba:6b:19:52:63:f0:1f:ee:ca:
d5:99:ae:cd:84:7c:88:34:5c:88:d3:fe:a0:c9:d8:
ab:20:e8:5a:a3:dc:9e:21:f0:87:3d:61:ad:72:28:
8f:e1:6e:10:23:24:13:97:64:19:9a:04:15:aa:e4:
90:5e:13:a9:cc:f1:bb:30:d4:df:7e:c5:62:bd:25:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:10:3B:C7:5C:6C:53:DF:63:11:75:C5:94:76:21:6F:EF:8C:9C
X509v3 Authority Key Identifier:
keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.254.112.0/21
Signature Algorithm: sha256WithRSAEncryption
d3:37:ab:64:d3:e1:e2:24:ef:5f:d8:ef:d9:bc:d6:33:59:9c:
a8:69:3a:48:46:8f:60:c9:17:55:4a:04:91:0d:d7:49:94:1c:
ec:61:bf:20:e1:d0:09:f4:14:ff:97:e0:0d:3d:9a:14:c0:6a:
f6:f4:5a:5a:d8:d0:61:a5:91:7e:1b:f3:c3:e8:0b:64:8f:c8:
51:4f:b2:5d:32:83:bb:42:99:89:19:88:99:bb:72:c8:55:6e:
d8:b9:df:9a:58:0b:10:ab:a0:75:19:02:da:c1:65:94:50:3c:
cb:05:24:f4:5b:ec:57:1b:e4:4d:40:de:b1:d1:2f:66:72:ef:
6a:7e:00:f3:34:6f:75:ed:3c:13:e4:f5:0a:c8:3d:2f:08:24:
9e:6d:94:6e:57:d2:94:ee:19:9e:9e:4b:60:45:82:6a:99:f8:
1b:8b:0f:ec:9f:9b:f2:5a:0b:c1:e5:05:e3:18:a9:c3:15:d4:
96:71:aa:55:26:3d:fc:cc:a3:5d:31:39:c4:4f:7f:71:68:87:
fe:9f:b9:bb:dc:57:3b:40:19:50:98:f3:2c:3c:7d:e1:0f:0c:
a4:78:8b:f0:7b:bb:f0:01:1f:c9:2d:58:48:c6:be:bf:a0:46:
ca:57:67:16:b1:c1:f6:01:70:11:43:9f:7c:83:58:95:11:0d:
47:d1:ca:e6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMa/YFDccGJoh9x4U1IB11NPh38swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE
NTU3Qzk1MzAeFw0yNDA3MDEwMTAxMTJaFw0yNTA2MzAwMTA2MTJaMDMxMTAvBgNV
BAMTKEVGNTIxMDNCQzc1QzZDNTNERjYzMTE3NUM1OTQ3NjIxNkZFRjhDOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8vos7PGZ6offzoaqxyErf3vW
K23LFyulOefX4VvX5SBvyIpwsa4NvScfFhGQbKV5vfpSO49fI6BMC9TkXPFBxcEp
wIEnbL/4qDISbdvqBNKgjjuJRSov2lStncfAJ5wjONMC84gS59S/qnfwngkcUa1b
w7gxZne9cwUKn5Vx8s3DtuOibFrBpy/U2b1gWnk8KUt3SZp+1WKsWFAOMiM3dEvN
bfV1lis27ogk6ehTjgs5fm5zqAf48bprGVJj8B/uytWZrs2EfIg0XIjT/qDJ2Ksg
6Fqj3J4h8Ic9Ya1yKI/hbhAjJBOXZBmaBBWq5JBeE6nM8bsw1N9+xWK9JRODAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU71IQO8dcbFPfYxF1xZR2IW/vjJwwHwYDVR0j
BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG
MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3
Qzk1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04
MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzEzNjJlMzIzNTM0MmUzMTMxMzIyZTMwMmYz
MjMxMmQzMjM0MjAzZDNlMjAzNTM1MzYzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDdP5wMA0GCSqG
SIb3DQEBCwUAA4IBAQDTN6tk0+HiJO9f2O/ZvNYzWZyoaTpIRo9gyRdVSgSRDddJ
lBzsYb8g4dAJ9BT/l+ANPZoUwGr29Fpa2NBhpZF+G/PD6Atkj8hRT7JdMoO7QpmJ
GYiZu3LIVW7Yud+aWAsQq6B1GQLawWWUUDzLBST0W+xXG+RNQN6x0S9mcu9qfgDz
NG917TwT5PUKyD0vCCSebZRuV9KU7hmenktgRYJqmfgbiw/sn5vyWgvB5QXjGKnD
FdSWcapVJj38zKNdMTnET39xaIf+n7m73Fc7QBlQmPMsPH3hDwykeIvwe7vwAR/J
LVhIxr6/oEbKV2cWscH2AXARQ598g1iVEQ1H0crm
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:27:49 2025 by rpki-client