Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230342e302f32342d3234203d3e203338313439.roa
File: 3230322e3135322e3230342e302f32342d3234203d3e203338313439.roa (raw, json)
Hash identifier: ngHws4nbH41ZSObqvtr4W6ur+zL7kdIdOy0aSzBDlbQ=
Subject key identifier: CD:01:1A:D3:CB:D5:CD:E2:83:40:42:D3:BD:DF:6F:47:41:FB:75:4C
Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial: 5B33FA5A4312605F63DA9B65DC97483C5158E308
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230342e302f32342d3234203d3e203338313439.roa
Signing time: Tue 17 Sep 2024 01:03:48 +0000
ROA not before: Tue 17 Sep 2024 00:58:48 +0000
ROA not after: Tue 16 Sep 2025 01:03:48 +0000
asID: 38149
IP address blocks: 202.152.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:33:fa:5a:43:12:60:5f:63:da:9b:65:dc:97:48:3c:51:58:e3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Validity
Not Before: Sep 17 00:58:48 2024 GMT
Not After : Sep 16 01:03:48 2025 GMT
Subject: CN=CD011AD3CBD5CDE2834042D3BDDF6F4741FB754C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:bb:f7:3c:ec:9a:4f:2a:09:5d:d5:8f:0b:
6d:43:ff:ba:96:dd:6a:e0:4b:48:9d:c1:9c:41:d0:
9b:5d:42:b3:2e:d2:01:21:96:5e:27:8b:67:e1:c0:
3f:7f:3f:df:b1:76:c7:84:06:61:5d:e3:6d:a4:3f:
56:e6:56:99:29:c7:2e:f0:85:95:7f:12:f3:42:38:
0c:79:cd:b1:d9:e8:22:ba:66:82:fb:fd:06:32:f3:
6c:9a:47:55:46:a9:7b:8b:63:d5:28:91:f7:62:b1:
3b:9e:fd:2d:44:f7:68:55:5e:5e:44:84:c3:f9:e3:
df:ca:cc:3b:32:a1:16:6f:66:37:c2:9d:d1:e3:55:
2f:6d:3b:94:bb:e2:cc:01:f6:02:6a:ce:ff:e1:a2:
c6:22:f9:f7:8f:83:f5:66:b6:9d:e0:e3:0d:8e:d5:
08:56:c8:cd:7e:4e:fc:71:65:74:6c:dd:d8:e4:7a:
91:cd:b9:bd:f9:9e:ba:6e:6c:fe:fa:d4:02:a7:c4:
f1:44:99:9b:0b:83:2f:c5:74:f0:5a:c6:df:3e:76:
08:ee:82:99:23:1d:d4:bb:03:cb:2f:6b:57:e0:62:
41:71:a2:72:85:c4:78:3a:d4:a3:33:9a:1b:92:ba:
48:b7:0a:20:fa:61:3f:38:ed:ef:44:aa:68:7b:fe:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:1A:D3:CB:D5:CD:E2:83:40:42:D3:BD:DF:6F:47:41:FB:75:4C
X509v3 Authority Key Identifier:
keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230342e302f32342d3234203d3e203338313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.152.204.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bf:4f:fe:97:4f:23:87:8b:a6:b8:53:cd:bc:b3:3a:c3:6d:
36:f7:40:7d:fd:9a:71:1c:65:13:72:ac:23:eb:00:b8:02:d5:
16:45:00:60:17:aa:d7:c8:d2:ec:8d:8c:27:8a:90:79:72:ed:
fb:9e:a0:ed:8d:35:d5:c8:d6:73:1a:5b:d7:76:94:c9:b4:f8:
3f:37:1f:d6:b7:21:a9:aa:a8:5a:36:9d:d8:df:1e:3c:28:40:
f4:29:84:96:38:0b:20:4e:63:9f:d0:4f:c8:6a:87:2e:b7:af:
cd:8b:0f:18:0f:3a:46:04:bd:53:1d:e2:1a:45:2f:ea:63:5c:
15:54:83:89:25:38:b7:b4:90:34:e2:97:f3:3e:f8:78:72:53:
f4:1d:41:94:cb:4a:2e:c7:f1:a3:5e:61:8f:07:84:15:20:2b:
f0:97:43:0a:a1:74:80:2f:67:3d:8d:a8:3d:09:b7:58:d7:cd:
46:02:94:85:ea:76:d1:0b:43:92:91:58:ce:5a:57:8e:3c:83:
9b:af:74:26:20:ae:09:db:c2:b9:19:30:80:1b:aa:6c:05:f9:
bc:08:89:1d:2a:94:01:72:c3:a6:fd:91:a2:d3:07:34:6b:63:
cc:4c:46:18:4c:9b:72:1e:22:59:2a:35:98:7d:ba:25:88:f0:
42:ae:f1:18
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWzP6WkMSYF9j2ptl3JdIPFFY4wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB
OEY5OTE1MDAeFw0yNDA5MTcwMDU4NDhaFw0yNTA5MTYwMTAzNDhaMDMxMTAvBgNV
BAMTKENEMDExQUQzQ0JENUNERTI4MzQwNDJEM0JEREY2RjQ3NDFGQjc1NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/Lv3POyaTyoJXdWPC21D/7qW
3WrgS0idwZxB0JtdQrMu0gEhll4ni2fhwD9/P9+xdseEBmFd422kP1bmVpkpxy7w
hZV/EvNCOAx5zbHZ6CK6ZoL7/QYy82yaR1VGqXuLY9UokfdisTue/S1E92hVXl5E
hMP549/KzDsyoRZvZjfCndHjVS9tO5S74swB9gJqzv/hosYi+fePg/Vmtp3g4w2O
1QhWyM1+TvxxZXRs3djkepHNub35nrpubP761AKnxPFEmZsLgy/FdPBaxt8+dgju
gpkjHdS7A8sva1fgYkFxonKFxHg61KMzmhuSuki3CiD6YT847e9Eqmh7/u43AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUzQEa08vVzeKDQELTvd9vR0H7dUwwHwYDVR0j
BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG
MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5
OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h
YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMjMwMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjMMA0GCSqG
SIb3DQEBCwUAA4IBAQAxv0/+l08jh4umuFPNvLM6w20290B9/ZpxHGUTcqwj6wC4
AtUWRQBgF6rXyNLsjYwnipB5cu37nqDtjTXVyNZzGlvXdpTJtPg/Nx/WtyGpqqha
Np3Y3x48KED0KYSWOAsgTmOf0E/Iaocut6/Niw8YDzpGBL1THeIaRS/qY1wVVIOJ
JTi3tJA04pfzPvh4clP0HUGUy0oux/GjXmGPB4QVICvwl0MKoXSAL2c9jag9CbdY
181GApSF6nbRC0OSkVjOWleOPIObr3QmIK4J28K5GTCAG6psBfm8CIkdKpQBcsOm
/ZGi0wc0a2PMTEYYTJtyHiJZKjWYfboliPBCrvEY
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:49 2025 by rpki-client