Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136342e302f32342d3234203d3e203137373639.roa
File: 3230322e35352e3136342e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier: gJiPfcs7x+QPwd46zsyy0LC5MIR9E7LSEG+4rdoSXqA=
Subject key identifier: D6:53:29:B4:93:E2:E1:B0:A1:DD:65:C7:0F:4B:D7:0F:E6:49:7B:17
Certificate issuer: /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial: 1EB9A2E856286181AD3965C07C8B8A291623006D
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136342e302f32342d3234203d3e203137373639.roa
Signing time: Fri 27 Sep 2024 06:01:27 +0000
ROA not before: Fri 27 Sep 2024 05:56:27 +0000
ROA not after: Fri 26 Sep 2025 06:01:27 +0000
asID: 17769
IP address blocks: 202.55.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b9:a2:e8:56:28:61:81:ad:39:65:c0:7c:8b:8a:29:16:23:00:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Validity
Not Before: Sep 27 05:56:27 2024 GMT
Not After : Sep 26 06:01:27 2025 GMT
Subject: CN=D65329B493E2E1B0A1DD65C70F4BD70FE6497B17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:0a:e3:d6:9f:8b:20:17:86:28:31:68:0a:
99:a5:e6:5c:bf:0d:96:47:98:dc:c8:7e:91:6d:a2:
5e:d0:79:ca:cd:d3:85:9f:ed:8c:c6:6a:f4:f6:95:
bd:af:98:1d:c8:bd:ca:97:00:5c:42:83:2e:7b:d0:
b3:b6:d9:d4:4b:27:76:fd:88:c0:4c:c6:bf:d5:b8:
3e:15:d3:18:20:b2:ec:d0:5d:33:af:7a:7e:1c:14:
dc:08:4d:82:ff:15:03:b3:6d:a7:3c:f9:61:7a:75:
c7:37:af:b3:83:b8:b8:dc:ba:3f:c6:c5:b7:74:82:
b1:27:d6:76:c3:f7:05:54:3a:7f:9c:14:b7:9a:4e:
89:c8:09:aa:14:d7:d7:dd:00:9a:19:b0:d7:a2:03:
22:d2:0b:93:03:b8:9e:b8:a5:90:c7:d6:a7:70:e1:
e4:16:08:0f:de:cf:bd:7e:50:b0:d1:f4:66:73:94:
a4:89:59:81:7a:dc:6b:8f:8e:f4:06:f2:6f:f6:e9:
37:70:ce:87:d6:26:49:9d:f9:bc:c4:8f:f6:48:a4:
07:64:80:ce:2c:35:34:86:95:9d:9c:3e:d0:61:0a:
26:11:9a:e8:3d:f2:4b:ce:db:92:c7:22:b6:2c:a7:
24:80:92:75:13:e3:ad:de:77:c0:54:05:e3:34:82:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:53:29:B4:93:E2:E1:B0:A1:DD:65:C7:0F:4B:D7:0F:E6:49:7B:17
X509v3 Authority Key Identifier:
keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136342e302f32342d3234203d3e203137373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.55.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ac:01:36:ce:bc:fa:b6:f7:7e:90:7d:c3:5a:bb:01:82:3a:
27:30:5d:56:ec:c7:e0:06:2d:d7:fb:62:67:49:6d:1a:12:10:
2c:05:54:53:39:95:3f:f7:b5:1b:d0:47:e6:b9:08:bb:95:7f:
f1:f4:ba:3c:3d:0b:d8:51:27:cd:43:dc:b8:63:2f:b2:5b:6e:
2c:82:9b:2c:f9:d8:19:42:06:55:fa:68:0c:7c:46:78:92:ed:
ce:b7:bd:98:64:6a:54:05:29:07:79:2f:16:3c:f9:f7:70:b6:
7a:5f:dd:8a:2f:b2:a2:cf:e7:4a:65:f6:7d:85:8c:75:88:3a:
d2:7f:be:f8:47:f9:96:f1:26:2f:4f:c2:fb:04:46:52:df:2f:
b4:4f:4d:96:6a:86:66:a2:16:ff:eb:9b:34:18:87:ef:55:cf:
6e:f1:64:74:51:04:03:12:ad:ea:2d:0a:46:d4:d6:a0:f9:72:
cf:9c:17:42:1b:dc:2a:0f:16:6d:66:41:ee:76:6a:e2:c2:ac:
1f:fd:cc:ea:3f:67:8c:76:05:b8:6d:66:5f:92:59:21:b6:13:
32:1d:d8:a1:35:80:fc:56:e5:fe:2c:b4:7c:98:e2:88:8d:91:
8d:78:36:d8:c1:08:fc:b4:fe:1c:94:4f:95:89:d7:64:25:54:
63:00:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:00 2025 by rpki-client