Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa
File: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (raw, json)
Hash identifier: EalNqK7fN+uMVwzoEzqTg9FoUorTzcn6dWS2phuXyqc=
Subject key identifier: 09:FA:C5:45:45:55:26:0F:02:EA:06:E6:B7:CA:FC:56:B8:00:9E:34
Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C
Certificate serial: 6FC23EF5C9714A36E648FA567EAC0B1C57E07AB0
Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa
Signing time: Thu 03 Oct 2024 04:01:44 +0000
ROA not before: Thu 03 Oct 2024 03:56:44 +0000
ROA not after: Thu 02 Oct 2025 04:01:44 +0000
asID: 151592
IP address blocks: 45.126.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c2:3e:f5:c9:71:4a:36:e6:48:fa:56:7e:ac:0b:1c:57:e0:7a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C
Validity
Not Before: Oct 3 03:56:44 2024 GMT
Not After : Oct 2 04:01:44 2025 GMT
Subject: CN=09FAC5454555260F02EA06E6B7CAFC56B8009E34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:43:6d:ae:2b:0d:03:dd:52:0c:00:e1:de:
f3:01:30:26:37:c9:1e:71:02:c9:6e:d6:2b:1f:d3:
24:db:27:2a:85:63:c1:81:b2:e4:5e:8d:6b:cb:69:
24:d8:e6:0a:cb:c7:3e:3e:98:a8:18:ca:05:c2:05:
8a:b4:3f:64:4c:f8:a0:ca:43:b4:a5:02:18:a3:0c:
61:c7:4e:1b:71:3a:65:80:86:72:ec:cd:be:be:86:
29:58:2e:18:10:1a:84:10:ed:b3:89:5d:7a:28:2d:
c0:fd:83:73:71:d8:d0:15:7a:56:fb:69:7c:90:b1:
73:a5:e9:42:7c:05:10:58:98:c6:8d:6d:ea:dd:bf:
81:ba:05:7f:2c:18:ef:0e:93:54:5a:cc:d1:89:51:
6b:37:51:52:0b:fa:2d:cd:05:da:75:f0:68:70:e2:
a8:ec:08:3f:de:5e:fa:39:6f:25:c3:24:2d:c9:01:
66:ef:35:8b:0d:2a:75:46:de:88:9c:51:7a:c4:f4:
16:b0:79:5d:00:70:f3:1c:65:b1:56:c7:22:17:6c:
cb:bb:48:55:53:26:f5:d0:d6:0b:1f:f7:96:34:62:
d5:81:3c:6b:3c:83:b5:e2:77:a2:ad:91:79:76:7d:
25:87:b6:1c:6f:25:8b:50:ed:66:e3:18:4a:58:be:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FA:C5:45:45:55:26:0F:02:EA:06:E6:B7:CA:FC:56:B8:00:9E:34
X509v3 Authority Key Identifier:
keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/34352e3132362e34332e302f32342d3234203d3e20313531353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.126.43.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:31:03:83:e6:a5:49:41:76:1c:6b:d3:c3:62:b9:71:fc:9f:
cd:25:3f:93:72:46:d6:ad:55:23:f0:23:1e:5b:e4:2d:9f:fb:
c1:29:be:91:cd:e4:a2:cd:bc:36:36:f2:73:90:ba:20:83:e2:
d3:b7:38:25:6f:42:8c:6f:b2:96:2b:2f:cd:3f:76:34:9f:ce:
76:3d:85:85:d3:7c:d4:f4:dc:c2:0c:b8:b1:1f:fe:43:1f:e1:
d7:ad:ff:db:50:49:98:ec:92:6f:82:dd:7d:73:cf:a9:e9:54:
14:f3:1a:9c:5d:0b:03:9a:84:41:97:68:3d:0f:ba:58:32:38:
d3:7b:11:f6:4a:7f:2a:92:d0:4d:b2:11:54:7d:6f:31:21:6e:
21:79:84:b0:48:f7:b2:48:71:7b:05:2f:b6:89:94:2b:90:c3:
a6:b9:75:a6:db:c9:40:2f:f8:00:1a:04:87:be:0c:ec:2f:1f:
6e:9e:9b:54:6a:18:e4:3b:aa:73:ca:48:fa:b3:b7:e1:5e:ca:
f4:0f:9f:bf:11:13:9e:cf:01:e2:a9:7e:e9:2a:69:69:5b:04:
8d:8e:4e:06:73:57:f8:3b:03:a8:9a:d4:72:70:22:c0:86:f2:
d1:75:09:95:d3:e3:10:71:33:45:cb:4c:07:5a:77:93:43:79:
ae:89:52:c7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUb8I+9clxSjbmSPpWfqwLHFfgerAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy
OUQxMUUxQzAeFw0yNDEwMDMwMzU2NDRaFw0yNTEwMDIwNDAxNDRaMDMxMTAvBgNV
BAMTKDA5RkFDNTQ1NDU1NTI2MEYwMkVBMDZFNkI3Q0FGQzU2QjgwMDlFMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTUNtrisNA91SDADh3vMBMCY3
yR5xAslu1isf0yTbJyqFY8GBsuRejWvLaSTY5grLxz4+mKgYygXCBYq0P2RM+KDK
Q7SlAhijDGHHThtxOmWAhnLszb6+hilYLhgQGoQQ7bOJXXooLcD9g3Nx2NAVelb7
aXyQsXOl6UJ8BRBYmMaNberdv4G6BX8sGO8Ok1RazNGJUWs3UVIL+i3NBdp18Ghw
4qjsCD/eXvo5byXDJC3JAWbvNYsNKnVG3oicUXrE9BaweV0AcPMcZbFWxyIXbMu7
SFVTJvXQ1gsf95Y0YtWBPGs8g7Xid6KtkXl2fSWHthxvJYtQ7WbjGEpYvs75AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUCfrFRUVVJg8C6gbmt8r8VrgAnjQwHwYDVR0j
BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw
QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx
MUUxQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxZjdjMjViLTQxMGItNDgyYS05
NDM2LTIyMWFiMDc5ZDM2OC8wLzM0MzUyZTMxMzIzNjJlMzQzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMTM1MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1+KzANBgkqhkiG
9w0BAQsFAAOCAQEAnDEDg+alSUF2HGvTw2K5cfyfzSU/k3JG1q1VI/AjHlvkLZ/7
wSm+kc3kos28Njbyc5C6IIPi07c4JW9CjG+ylisvzT92NJ/Odj2FhdN81PTcwgy4
sR/+Qx/h163/21BJmOySb4LdfXPPqelUFPManF0LA5qEQZdoPQ+6WDI403sR9kp/
KpLQTbIRVH1vMSFuIXmEsEj3skhxewUvtomUK5DDprl1ptvJQC/4ABoEh74M7C8f
bp6bVGoY5Duqc8pI+rO34V7K9A+fvxETns8B4ql+6SppaVsEjY5OBnNX+DsDqJrU
cnAiwIby0XUJldPjEHEzRctMB1p3k0N5rolSxw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:16 2025 by rpki-client