Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36302e302f32342d3234203d3e203435333132.roa
File: 3230322e38312e36302e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier: +YiXboX8IcAAou94cDo+USSMon0gcEwMRI5Fgbwfy7w=
Subject key identifier: 2C:C2:BF:0B:1C:56:27:BF:E7:F5:D7:83:AE:C2:DF:49:6B:E7:65:19
Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial: 0BF18A3A2DD84B22997DD92AF373C4E70A1A4A23
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36302e302f32342d3234203d3e203435333132.roa
Signing time: Tue 17 Dec 2024 08:33:59 +0000
ROA not before: Tue 17 Dec 2024 08:28:59 +0000
ROA not after: Tue 16 Dec 2025 08:33:59 +0000
asID: 45312
IP address blocks: 202.81.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f1:8a:3a:2d:d8:4b:22:99:7d:d9:2a:f3:73:c4:e7:0a:1a:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Validity
Not Before: Dec 17 08:28:59 2024 GMT
Not After : Dec 16 08:33:59 2025 GMT
Subject: CN=2CC2BF0B1C5627BFE7F5D783AEC2DF496BE76519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:f7:29:9e:17:2f:0d:a0:26:8c:56:ab:fa:
24:c2:63:56:77:28:6f:e6:1b:a8:0a:79:9b:46:85:
db:6b:4e:38:ad:56:b6:7d:19:96:28:16:53:a2:db:
f4:ab:ea:73:56:76:d6:c5:79:1a:eb:c6:35:d4:50:
eb:cb:98:86:98:9f:b9:d3:c8:36:69:fc:5d:f4:d4:
3e:23:78:78:bd:55:22:47:91:42:95:64:ba:e3:1c:
bb:43:ff:a7:dc:e1:82:98:9b:79:8a:30:7c:44:34:
3c:1c:41:75:16:5b:1c:57:6f:e4:60:b2:17:1d:e3:
ab:00:47:83:b6:89:35:0a:1b:d3:ad:0e:58:26:7e:
a5:db:1c:bd:c3:8a:b6:ec:d3:29:56:e5:b3:70:cc:
63:f3:17:f2:fc:50:55:67:05:91:c8:e3:64:62:87:
33:5f:e1:ac:5d:3e:44:fc:fd:82:25:e9:a4:3f:a2:
88:99:8c:06:c1:81:80:2a:5d:25:97:ff:bf:12:9b:
2b:d3:32:ad:08:9f:66:7e:7a:de:e5:f4:9a:03:58:
88:6e:b4:e4:c2:96:da:32:fc:ec:b5:18:b8:49:c5:
50:e0:66:58:41:82:05:03:b2:74:30:54:c4:81:eb:
ee:37:be:b0:f9:96:ae:b6:97:de:e4:93:80:6d:8f:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C2:BF:0B:1C:56:27:BF:E7:F5:D7:83:AE:C2:DF:49:6B:E7:65:19
X509v3 Authority Key Identifier:
keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36302e302f32342d3234203d3e203435333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.81.60.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:25:b7:1d:79:77:40:1d:11:58:13:59:f0:34:e6:c2:f7:d4:
15:2a:e1:f7:73:c5:bd:c1:1f:eb:72:fb:48:ae:9c:bf:2a:2e:
fa:f2:fe:44:b4:2a:0a:a1:30:ad:93:08:c6:96:3e:12:9e:9f:
38:56:c4:a5:aa:49:ef:65:d7:be:eb:e5:95:9d:aa:de:9c:13:
cd:ed:70:c4:e9:7b:3b:4d:02:a6:d0:db:9e:d4:22:d2:aa:d0:
62:b9:ef:70:5d:17:85:c1:a8:05:a4:30:64:97:5c:96:7a:19:
68:65:09:c1:54:e3:ad:29:03:b5:5e:7d:e6:72:9d:70:84:4c:
41:0d:8f:64:3d:1f:8e:9f:8c:07:a3:e6:da:96:a3:80:21:98:
52:16:63:88:4c:6a:6d:94:63:5f:a2:64:0a:43:be:5f:92:3e:
44:f5:d8:a6:56:76:e9:5b:7e:e0:fe:91:6e:0a:81:f7:bb:96:
a3:0d:68:78:e6:c9:65:54:eb:f6:85:ac:ba:9b:53:1d:43:64:
55:07:ef:f3:a8:13:3d:35:48:47:d8:c1:d1:cc:a8:0c:79:1a:
36:82:24:cb:98:9d:a6:9b:75:2c:2b:9c:f4:e0:39:b8:54:54:
39:7a:df:03:0e:cb:cd:ed:df:19:eb:ff:02:4e:6f:11:ae:24:
16:bb:22:7f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUC/GKOi3YSyKZfdkq83PE5woaSiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB
MEJGQzQ0MTAeFw0yNDEyMTcwODI4NTlaFw0yNTEyMTYwODMzNTlaMDMxMTAvBgNV
BAMTKDJDQzJCRjBCMUM1NjI3QkZFN0Y1RDc4M0FFQzJERjQ5NkJFNzY1MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hfcpnhcvDaAmjFar+iTCY1Z3
KG/mG6gKeZtGhdtrTjitVrZ9GZYoFlOi2/Sr6nNWdtbFeRrrxjXUUOvLmIaYn7nT
yDZp/F301D4jeHi9VSJHkUKVZLrjHLtD/6fc4YKYm3mKMHxENDwcQXUWWxxXb+Rg
shcd46sAR4O2iTUKG9OtDlgmfqXbHL3Dirbs0ylW5bNwzGPzF/L8UFVnBZHI42Ri
hzNf4axdPkT8/YIl6aQ/ooiZjAbBgYAqXSWX/78SmyvTMq0In2Z+et7l9JoDWIhu
tOTCltoy/Oy1GLhJxVDgZlhBggUDsnQwVMSB6+43vrD5lq62l97kk4Btjw+HAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQULMK/CxxWJ7/n9deDrsLfSWvnZRkwHwYDVR0j
BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4
NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG
QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h
MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzYzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUTwwDQYJKoZIhvcN
AQELBQADggEBAMEltx15d0AdEVgTWfA05sL31BUq4fdzxb3BH+ty+0iunL8qLvry
/kS0KgqhMK2TCMaWPhKenzhWxKWqSe9l177r5ZWdqt6cE83tcMTpeztNAqbQ257U
ItKq0GK573BdF4XBqAWkMGSXXJZ6GWhlCcFU460pA7VefeZynXCETEENj2Q9H46f
jAej5tqWo4AhmFIWY4hMam2UY1+iZApDvl+SPkT12KZWdulbfuD+kW4Kgfe7lqMN
aHjmyWVU6/aFrLqbUx1DZFUH7/OoEz01SEfYwdHMqAx5GjaCJMuYnaabdSwrnPTg
ObhUVDl63wMOy83t3xnr/wJObxGuJBa7In8=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:19:03 2025 by rpki-client