Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa
File: 3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (raw, json)
Hash identifier: 0aigw+26bqxQDv+pzDBiO3uDLc9wYu/Da/bitCXqBqA=
Subject key identifier: 04:CC:1A:5A:38:BB:EA:3D:0E:AD:78:1C:EC:88:31:B1:FD:08:53:DA
Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial: 49EAC7DA0D62EA257A15B7177E8019707EFE9D09
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa
Signing time: Mon 01 Jul 2024 01:05:09 +0000
ROA not before: Mon 01 Jul 2024 01:00:09 +0000
ROA not after: Mon 30 Jun 2025 01:05:09 +0000
asID: 38156
IP address blocks: 203.190.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ea:c7:da:0d:62:ea:25:7a:15:b7:17:7e:80:19:70:7e:fe:9d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Validity
Not Before: Jul 1 01:00:09 2024 GMT
Not After : Jun 30 01:05:09 2025 GMT
Subject: CN=04CC1A5A38BBEA3D0EAD781CEC8831B1FD0853DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:ed:ea:1e:61:d9:b2:91:61:b2:98:93:1a:
dc:03:02:e8:a0:af:2b:e5:ca:fc:11:69:d6:58:2f:
7a:7e:e7:01:26:c6:bd:ad:07:4a:e6:78:2a:7d:6c:
f4:d3:92:ed:0a:04:b8:bd:83:1e:75:32:7f:55:45:
6d:16:78:27:ce:50:4b:b1:6c:6d:b8:9b:2e:f6:e3:
2f:d5:69:ee:a7:e5:77:26:ef:81:e7:12:84:86:6a:
d4:e1:26:aa:ee:8e:86:3e:1e:6b:20:41:81:a2:c5:
8d:59:14:ee:ca:0d:40:f4:ca:e0:0d:f3:08:b6:82:
67:19:ef:92:6d:79:ec:65:e8:a2:7e:1b:f2:b3:fb:
94:48:84:eb:6c:57:0e:83:88:b1:63:e6:b2:cd:87:
71:cc:1f:60:c9:36:a0:36:35:c6:8d:92:01:50:1c:
da:59:c1:34:19:ac:f2:86:44:6c:77:63:36:f0:7b:
0b:c6:1a:bf:66:07:8b:1c:7f:12:c2:c4:d8:ae:b2:
4d:a4:51:35:50:26:45:b6:81:4d:ae:46:5b:3d:fc:
a3:4d:ab:5c:ad:41:73:ca:f3:c3:9e:3b:73:e6:eb:
b6:d3:77:f5:72:8a:ab:28:a1:cc:b6:23:66:62:79:
6d:cb:dd:59:15:5d:43:90:a0:39:7f:49:9c:9d:a4:
2b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CC:1A:5A:38:BB:EA:3D:0E:AD:78:1C:EC:88:31:B1:FD:08:53:DA
X509v3 Authority Key Identifier:
keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.190.116.0/24
Signature Algorithm: sha256WithRSAEncryption
30:74:73:f1:25:a1:90:93:62:75:19:76:8c:bf:b0:bd:3a:85:
df:d1:5f:e1:2f:fb:3d:a6:62:6b:92:74:d9:8b:ef:0e:68:26:
53:1a:64:57:8b:7a:cc:3a:d2:f8:f0:70:6a:46:e5:41:be:16:
10:4d:9a:a3:0b:2f:b6:a3:ab:94:7a:cb:78:d0:7c:3e:d7:a8:
ec:27:6e:ac:79:44:1a:a0:35:bf:bb:12:0f:e9:79:7d:4a:00:
5c:cc:6d:78:cb:7e:cf:0e:16:27:83:fe:1c:4f:9a:c4:1e:bb:
60:61:c1:55:41:86:64:20:30:6e:78:6f:7f:a9:80:40:61:a9:
f1:5c:ea:82:b2:b3:fd:80:c3:3e:2a:44:6e:ce:dd:a7:8a:33:
2e:8c:a4:7c:a8:97:72:46:1b:e1:a9:c1:7a:fa:1b:92:8e:4d:
46:ad:e9:2b:b1:27:57:45:08:21:93:fe:ca:4f:ad:66:ba:cc:
db:86:db:e6:9f:4f:50:c6:cd:14:dc:f8:2f:59:79:24:ea:5b:
c7:e5:6c:f7:41:ae:6f:c6:7b:80:f7:8f:c5:50:6f:3f:d0:90:
3f:e6:56:9c:03:c9:6d:c1:50:9c:cc:50:5c:43:ea:bc:d3:4a:
e9:03:7e:61:49:96:c5:8c:38:8a:f6:e3:c4:a8:04:30:9c:2f:
69:4d:e5:36
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSerH2g1i6iV6FbcXfoAZcH7+nQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2
QTRENThDNDAeFw0yNDA3MDEwMTAwMDlaFw0yNTA2MzAwMTA1MDlaMDMxMTAvBgNV
BAMTKDA0Q0MxQTVBMzhCQkVBM0QwRUFENzgxQ0VDODgzMUIxRkQwODUzREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWk+3qHmHZspFhspiTGtwDAuig
ryvlyvwRadZYL3p+5wEmxr2tB0rmeCp9bPTTku0KBLi9gx51Mn9VRW0WeCfOUEux
bG24my724y/Vae6n5Xcm74HnEoSGatThJqrujoY+HmsgQYGixY1ZFO7KDUD0yuAN
8wi2gmcZ75Jteexl6KJ+G/Kz+5RIhOtsVw6DiLFj5rLNh3HMH2DJNqA2NcaNkgFQ
HNpZwTQZrPKGRGx3YzbwewvGGr9mB4scfxLCxNiusk2kUTVQJkW2gU2uRls9/KNN
q1ytQXPK88OeO3Pm67bTd/Vyiqsoocy2I2ZieW3L3VkVXUOQoDl/SZydpCuxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUBMwaWji76j0OrXgc7Igxsf0IU9owHwYDVR0j
BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC
OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE
NThDNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05
M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzAzMzJlMzEzOTMwMmUzMTMxMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy750MA0GCSqG
SIb3DQEBCwUAA4IBAQAwdHPxJaGQk2J1GXaMv7C9OoXf0V/hL/s9pmJrknTZi+8O
aCZTGmRXi3rMOtL48HBqRuVBvhYQTZqjCy+2o6uUest40Hw+16jsJ26seUQaoDW/
uxIP6Xl9SgBczG14y37PDhYng/4cT5rEHrtgYcFVQYZkIDBueG9/qYBAYanxXOqC
srP9gMM+KkRuzt2nijMujKR8qJdyRhvhqcF6+huSjk1GrekrsSdXRQghk/7KT61m
uszbhtvmn09Qxs0U3PgvWXkk6lvH5Wz3Qa5vxnuA94/FUG8/0JA/5lacA8ltwVCc
zFBcQ+q800rpA35hSZbFjDiK9uPEqAQwnC9pTeU2
-----END CERTIFICATE-----
Generated at Fri May 2 11:32:50 2025 by rpki-client