Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3230332e3135332e39362e302f32302d3234203d3e203234323037.roa
File: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (raw, json)
Hash identifier: Ch9kb0gfgSph6mketqEn1fzFFFRNc5Wq+2hb3B5I9EY=
Subject key identifier: C7:84:07:71:29:AD:88:F5:7E:E9:88:A5:E3:F3:A1:CA:2B:A7:0E:49
Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F
Certificate serial: 1F592DEF1CDB8F3C32666742ECC47C3634FB3E83
Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3230332e3135332e39362e302f32302d3234203d3e203234323037.roa
Signing time: Wed 13 Mar 2024 03:28:00 +0000
ROA not before: Wed 13 Mar 2024 03:23:00 +0000
ROA not after: Wed 12 Mar 2025 03:28:00 +0000
asID: 24207
IP address blocks: 203.153.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:59:2d:ef:1c:db:8f:3c:32:66:67:42:ec:c4:7c:36:34:fb:3e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F
Validity
Not Before: Mar 13 03:23:00 2024 GMT
Not After : Mar 12 03:28:00 2025 GMT
Subject: CN=C784077129AD88F57EE988A5E3F3A1CA2BA70E49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:bd:bb:64:9e:38:8b:f0:69:1f:2f:ad:8d:
28:d5:8e:a5:74:db:c0:8a:b7:fb:56:70:84:81:d8:
cb:0f:ec:10:1e:8f:e0:1c:25:30:aa:fd:bc:1f:77:
73:ac:d7:1f:50:a7:9c:57:cc:ca:a9:fb:31:5c:15:
26:2a:ab:3c:c8:8e:49:12:13:e1:09:5f:79:8c:29:
84:fd:7a:bf:63:19:0f:8d:82:ce:07:2e:4e:fa:ac:
ae:44:74:b5:18:df:50:32:5f:5b:ce:e0:ae:16:4e:
0c:8d:a5:7a:ad:d9:78:4c:25:7f:b3:a2:b4:af:a4:
1e:9b:b3:c3:4f:96:a4:94:41:36:50:57:f0:7d:48:
a7:0c:b4:8e:4d:2e:44:b3:9b:8e:62:f5:c3:e0:93:
f9:1c:72:b1:99:b5:b6:d4:f4:17:a8:be:97:65:f7:
42:35:10:82:6d:0f:06:1f:04:48:9c:a8:ba:eb:5c:
7a:a8:a6:c2:30:c8:76:39:b8:dc:7b:2c:35:15:82:
06:55:3a:17:69:72:70:d0:2d:c9:c2:c8:b1:cc:0b:
51:4f:1d:81:0d:d0:46:61:1b:24:fe:69:94:8b:c7:
73:20:4e:18:6f:38:27:e6:45:53:2c:b0:d7:06:f8:
d2:2b:f5:2e:e2:39:42:5e:b1:c4:f6:61:ca:0a:a8:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:07:71:29:AD:88:F5:7E:E9:88:A5:E3:F3:A1:CA:2B:A7:0E:49
X509v3 Authority Key Identifier:
keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3230332e3135332e39362e302f32302d3234203d3e203234323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.153.96.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:cd:78:bc:48:a8:79:0e:18:1a:c5:09:09:f1:b5:8b:de:f2:
3a:29:91:eb:d6:87:fc:cc:a6:02:d7:f9:a9:fe:62:dd:02:56:
0a:6f:e0:da:3a:98:1f:d1:da:ef:31:20:33:1e:08:eb:53:b8:
80:7a:5d:01:2f:d2:1f:7f:62:3c:c9:f0:05:c5:de:92:59:19:
e6:6e:09:d4:83:86:38:e8:ae:da:d7:0a:d7:0c:38:b8:b0:82:
c8:22:d2:85:d0:40:ab:22:34:bc:c9:2d:4b:e9:b3:03:03:b9:
a7:fe:17:be:07:c4:29:38:96:12:d9:45:9f:be:57:42:71:ea:
fb:31:72:16:3c:bc:32:2f:5f:68:4e:f3:9c:1f:34:cc:fb:df:
6b:0e:eb:d7:13:03:86:8d:e2:35:04:6d:28:e5:48:96:67:12:
32:64:de:fb:cf:c0:cb:dd:6e:0c:56:98:a6:83:ba:3c:9f:be:
d2:12:61:db:12:69:fb:73:bd:f2:ca:77:13:83:95:8f:29:0c:
07:1f:98:68:ae:6c:96:ea:17:dd:d3:83:00:42:06:cb:22:c4:
5a:ed:bd:d6:48:5e:e6:a2:e6:41:70:8c:de:09:96:5d:26:38:
ca:90:71:98:4e:a9:ee:24:ee:69:9b:fb:ac:9f:cb:4d:0b:90:
3e:48:de:12
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUH1kt7xzbjzwyZmdC7MR8NjT7PoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC
RjBBRkIwRjAeFw0yNDAzMTMwMzIzMDBaFw0yNTAzMTIwMzI4MDBaMDMxMTAvBgNV
BAMTKEM3ODQwNzcxMjlBRDg4RjU3RUU5ODhBNUUzRjNBMUNBMkJBNzBFNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIr27ZJ44i/BpHy+tjSjVjqV0
28CKt/tWcISB2MsP7BAej+AcJTCq/bwfd3Os1x9Qp5xXzMqp+zFcFSYqqzzIjkkS
E+EJX3mMKYT9er9jGQ+Ngs4HLk76rK5EdLUY31AyX1vO4K4WTgyNpXqt2XhMJX+z
orSvpB6bs8NPlqSUQTZQV/B9SKcMtI5NLkSzm45i9cPgk/kccrGZtbbU9Beovpdl
90I1EIJtDwYfBEicqLrrXHqopsIwyHY5uNx7LDUVggZVOhdpcnDQLcnCyLHMC1FP
HYEN0EZhGyT+aZSLx3MgThhvOCfmRVMssNcG+NIr9S7iOUJescT2YcoKqKD1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUx4QHcSmtiPV+6Yil4/OhyiunDkkwHwYDVR0j
BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC
ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB
RkIwRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjN2U4MDgxLTYzYWYtNDllNy05
NjQ2LTc2YzI1YTVlOTdjYS8wLzMyMzAzMzJlMzEzNTMzMmUzOTM2MmUzMDJmMzIz
MDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMuZYDANBgkqhkiG
9w0BAQsFAAOCAQEAa814vEioeQ4YGsUJCfG1i97yOimR69aH/MymAtf5qf5i3QJW
Cm/g2jqYH9Ha7zEgMx4I61O4gHpdAS/SH39iPMnwBcXeklkZ5m4J1IOGOOiu2tcK
1ww4uLCCyCLShdBAqyI0vMktS+mzAwO5p/4XvgfEKTiWEtlFn75XQnHq+zFyFjy8
Mi9faE7znB80zPvfaw7r1xMDho3iNQRtKOVIlmcSMmTe+8/Ay91uDFaYpoO6PJ++
0hJh2xJp+3O98sp3E4OVjykMBx+YaK5sluoX3dODAEIGyyLEWu291khe5qLmQXCM
3gmWXSY4ypBxmE6p7iTuaZv7rJ/LTQuQPkjeEg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:05 2025 by rpki-client