Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136302e302f32342d3234203d3e203137373639.roa
File: 3230322e35352e3136302e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier: 1+BV/NTZwsd8/f/6SrmjQsaN3Cxn5HVV92bi1Tr6Udg=
Subject key identifier: 5B:F6:EF:B6:4D:0B:E8:0F:C4:71:6F:C0:DB:73:4A:24:AA:3C:05:99
Certificate issuer: /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial: 4F6F9C6420914CD9E3CB4B8734C58B509B12CFDE
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136302e302f32342d3234203d3e203137373639.roa
Signing time: Fri 27 Sep 2024 06:01:27 +0000
ROA not before: Fri 27 Sep 2024 05:56:27 +0000
ROA not after: Fri 26 Sep 2025 06:01:27 +0000
asID: 17769
IP address blocks: 202.55.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6f:9c:64:20:91:4c:d9:e3:cb:4b:87:34:c5:8b:50:9b:12:cf:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Validity
Not Before: Sep 27 05:56:27 2024 GMT
Not After : Sep 26 06:01:27 2025 GMT
Subject: CN=5BF6EFB64D0BE80FC4716FC0DB734A24AA3C0599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:c3:44:01:a1:c4:f8:5b:3a:b2:e2:d6:94:
6d:5f:29:2c:8f:ab:e3:eb:77:07:60:b2:f5:2d:1e:
df:10:80:b2:c0:d2:de:96:04:7d:09:10:89:7c:ca:
f8:b8:7f:c8:19:86:8f:da:41:24:a4:d9:6d:5d:0c:
4f:47:dd:c0:db:2e:40:36:fe:bc:5b:a5:14:e7:21:
d1:42:ce:43:75:60:22:9d:1e:58:46:50:f7:1d:35:
4f:51:05:df:4f:04:a7:30:34:02:ce:05:af:1f:7d:
b7:e2:e0:05:90:83:56:8e:e1:7d:94:a9:2b:82:f4:
82:8b:c9:0a:b7:3f:25:fe:1e:66:38:69:be:ec:69:
46:4b:51:70:7e:1c:77:ce:fc:ec:2d:21:97:78:c1:
6a:4f:46:1f:36:06:bd:b8:28:7b:b6:41:c7:b0:7d:
29:cd:39:d1:35:86:94:0f:9f:6f:c1:69:33:e0:86:
50:58:e2:af:21:e7:b9:fe:d6:48:8f:50:ff:6f:9f:
c3:47:26:19:cc:c2:eb:49:73:74:d0:ff:32:2c:86:
12:b7:0a:df:1c:62:4a:3b:47:81:bd:87:54:bc:c9:
89:24:57:fd:47:27:18:28:a9:7e:7b:5b:68:70:24:
41:b8:2e:bb:c7:20:07:aa:fa:8d:47:15:4a:5f:56:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:EF:B6:4D:0B:E8:0F:C4:71:6F:C0:DB:73:4A:24:AA:3C:05:99
X509v3 Authority Key Identifier:
keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136302e302f32342d3234203d3e203137373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.55.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:3e:b2:4c:44:01:89:68:91:b8:dc:ed:5b:08:90:6a:f2:0b:
c3:cc:0a:f5:f0:03:32:33:d9:1d:91:14:ed:9a:de:ca:38:f8:
b9:ba:57:a8:10:0c:6a:ba:7c:c4:6d:46:ea:d6:e2:7e:4e:ba:
23:63:ef:72:46:7e:61:42:7d:37:90:ac:9c:54:ec:ce:b0:e3:
9b:53:5a:67:22:84:bd:91:75:35:ac:f9:0c:4b:94:16:d1:d7:
da:2c:e2:f7:b8:93:86:b1:e5:af:bb:23:98:03:f7:f4:22:c8:
d9:ac:3c:a2:c0:8a:0f:df:50:e7:a4:7d:ca:b1:2e:9d:cc:ae:
7b:c5:0c:b4:07:8c:94:27:5d:a6:11:2c:16:79:74:3c:f2:08:
5e:3b:70:9e:46:36:97:a7:c0:c9:d3:86:6a:47:e2:5a:a3:43:
41:dd:00:51:b5:0a:c7:c0:d4:16:5a:7d:f6:38:30:fe:c2:f0:
f0:80:42:8f:3c:b5:32:cc:cc:70:ac:98:91:23:9e:d3:fa:7f:
a6:b8:28:0d:37:8b:b0:4d:c2:b3:9b:fe:3c:1a:66:75:c1:45:
af:a6:5e:a5:06:5f:c5:ef:4d:54:ed:53:a9:4f:90:85:a1:94:
4d:91:ac:40:a8:0e:f9:fd:a2:b3:28:b5:83:57:4b:e1:6f:c4:
00:bb:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:01 2025 by rpki-client