Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa
File: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (raw, json)
Hash identifier: pdookKLKBtLoDCva66o7DDtyvwgfA1hrwrmWSeoqnqY=
Subject key identifier: 4F:2D:84:67:22:E4:78:44:CD:65:DB:9E:CB:BB:A3:EA:B4:D9:0E:7A
Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D
Certificate serial: 392C3CFF6DD8875CE4EBADF6CCBE78751046F075
Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa
Signing time: Sun 18 Aug 2024 10:00:00 +0000
ROA not before: Sun 18 Aug 2024 09:55:00 +0000
ROA not after: Sun 17 Aug 2025 10:00:00 +0000
asID: 138823
IP address blocks: 203.161.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:2c:3c:ff:6d:d8:87:5c:e4:eb:ad:f6:cc:be:78:75:10:46:f0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D
Validity
Not Before: Aug 18 09:55:00 2024 GMT
Not After : Aug 17 10:00:00 2025 GMT
Subject: CN=4F2D846722E47844CD65DB9ECBBBA3EAB4D90E7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:ca:46:4e:2d:0f:81:e7:48:ec:cb:11:15:
72:ca:3c:2d:85:af:2a:b1:ee:3f:87:ab:54:5a:c6:
3a:3b:44:ee:9f:80:46:4f:b1:ec:69:15:42:c8:ff:
42:c7:34:19:f0:2f:09:8b:50:a5:dd:7a:82:d6:73:
ca:46:46:c8:42:f3:5c:d0:13:65:46:38:41:a6:5e:
21:a7:5b:3d:26:2b:84:6d:a8:67:05:79:9c:f6:98:
11:43:f2:0c:f3:6b:a0:b8:06:24:6c:c2:9d:d3:82:
5f:c5:3d:65:df:c4:31:5d:a4:91:dc:4a:44:f0:e6:
7e:a6:0f:0a:2b:51:e5:91:d1:eb:55:11:dd:c8:81:
ca:7c:eb:0b:33:89:dc:8c:c4:44:c8:01:7a:91:7e:
76:07:c1:a1:11:5a:42:1d:dd:19:07:c9:d0:a9:b3:
cd:3b:6e:75:45:b3:e4:2e:49:dc:16:3a:1f:34:bd:
26:83:38:42:82:cb:68:a6:66:34:ae:f2:dc:9b:ad:
7b:61:a3:d3:0f:38:61:55:1e:33:c1:54:41:e5:72:
4f:64:4b:ba:24:68:9b:77:09:97:da:87:9e:1b:72:
b7:6b:8b:3f:fa:70:e3:a0:12:93:ea:c9:d2:02:e6:
dd:c1:9c:2d:af:d3:34:3f:b9:a8:d4:67:b1:9f:1a:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2D:84:67:22:E4:78:44:CD:65:DB:9E:CB:BB:A3:EA:B4:D9:0E:7A
X509v3 Authority Key Identifier:
keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.161.24.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:eb:a0:51:6e:fb:6d:4b:7f:1f:6e:22:15:92:60:a9:cf:fd:
66:ce:4b:1b:4d:01:5c:36:58:20:29:ad:48:58:66:70:6c:b9:
3f:95:e7:33:43:e4:bb:76:bd:47:9a:6a:66:5c:e5:31:07:ec:
2d:e8:99:36:3f:6d:83:98:3b:5b:90:cb:80:47:0e:f5:22:10:
de:75:ce:d0:ed:79:e4:f3:66:40:a1:85:00:0d:47:99:2c:b0:
0e:11:3b:fb:d7:a3:33:be:7f:6a:98:2f:f4:de:f8:f6:d5:30:
9a:3f:62:30:24:11:d2:d5:64:41:6a:ab:86:66:41:cd:56:93:
a7:b1:4d:02:ec:13:34:14:b0:e5:93:ec:48:fb:6c:15:cb:a9:
6d:07:59:7a:fb:d4:cf:0b:9a:24:a9:1d:2e:cf:a3:71:d2:b7:
1b:f0:17:6b:8a:0e:6f:38:43:4a:0c:7a:cc:6e:11:37:92:2e:
da:31:e3:62:a0:4f:d5:35:47:39:c5:af:a4:73:c2:f6:ec:18:
81:85:93:e6:98:39:dc:2f:eb:80:c6:3f:ad:4a:8d:fc:21:55:
d6:ca:05:32:50:5a:58:be:ed:3e:b5:eb:43:9b:09:bf:33:6d:
09:91:55:29:87:46:e9:7e:ba:00:c1:3e:86:ad:9a:52:0b:24:
3e:27:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:47 2025 by rpki-client