Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa
File: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: uMyrrNvQSHXCaIKeb7YHUJzsiyYMgIhzsvfO2xxvbt8=
Subject key identifier: 9F:D9:21:32:34:C3:60:18:26:68:BD:FC:D5:56:9D:8B:78:EA:10:9C
Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial: 24C9D2EB839DB0883B338F4551491C71CA58D59B
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa
Signing time: Mon 01 Jul 2024 01:03:29 +0000
ROA not before: Mon 01 Jul 2024 00:58:29 +0000
ROA not after: Mon 30 Jun 2025 01:03:29 +0000
asID: 38150
IP address blocks: 180.214.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c9:d2:eb:83:9d:b0:88:3b:33:8f:45:51:49:1c:71:ca:58:d5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Validity
Not Before: Jul 1 00:58:29 2024 GMT
Not After : Jun 30 01:03:29 2025 GMT
Subject: CN=9FD9213234C360182668BDFCD5569D8B78EA109C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:40:95:34:c1:5c:73:a0:2b:89:07:f0:cb:
43:5b:76:f2:b3:ae:f2:7b:d5:ba:b3:a6:3a:25:78:
f4:09:13:60:04:78:e2:eb:6d:c1:be:f8:6e:6b:a2:
66:7e:b8:38:aa:46:17:b8:d5:9c:50:4d:e5:c8:ec:
1e:73:12:eb:6d:50:5d:9b:86:3e:cb:f3:ab:7b:8c:
ee:62:d3:df:96:6b:37:69:e4:00:5c:3d:97:01:1f:
c4:1e:a7:60:5b:e0:89:11:7c:7c:01:f3:2f:8c:ec:
35:cf:89:5c:31:c4:44:7a:15:4e:47:e6:47:fe:ec:
ed:74:08:fc:0b:47:79:b1:da:4a:9f:df:03:ab:05:
54:b8:ad:c9:ad:46:2d:23:25:28:a7:bc:76:70:10:
b7:33:5d:17:0e:8d:84:f0:cc:67:bb:ad:4b:d2:13:
43:ab:c2:1a:88:dd:e4:b0:b6:6f:69:62:b9:b5:a8:
6e:65:df:2e:11:b4:3f:7c:15:82:db:da:2e:de:bd:
be:42:62:f2:64:ed:4f:7b:4c:45:4b:c5:d8:c0:1f:
ac:d4:61:05:d2:51:7c:a0:05:fa:df:bf:78:b3:36:
0c:3f:f3:b8:98:cd:76:1b:95:f8:4d:53:75:da:a0:
b5:11:ba:d1:c7:81:6e:18:22:9a:d9:46:f4:f7:83:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:21:32:34:C3:60:18:26:68:BD:FC:D5:56:9D:8B:78:EA:10:9C
X509v3 Authority Key Identifier:
keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.214.240.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6c:e6:12:e1:ce:27:2e:50:fe:0e:7c:20:9b:43:45:f9:f0:
14:6c:12:7f:96:5a:35:ab:f1:f9:c2:92:1f:a3:2d:02:25:da:
ab:db:78:ac:d5:09:1f:fd:ad:7c:b3:3f:14:6f:80:cc:0e:0f:
ee:6f:a7:2b:a6:9c:e5:ef:52:0e:2d:58:d6:bc:1f:5d:33:fe:
1a:a1:cb:96:80:61:ae:37:c4:68:1c:1d:cf:cf:05:c9:9e:05:
c3:2c:f7:a6:3f:75:f7:d6:50:51:87:a3:31:8c:f0:d8:11:ca:
ae:09:34:71:1a:0b:04:d1:88:30:6a:6d:bc:38:ed:bf:ca:63:
75:e3:e6:1c:90:b3:35:cf:94:73:ef:fe:75:12:8b:18:28:1f:
3e:fd:d8:c8:2b:1c:34:a6:53:6d:23:d4:29:50:14:e4:cd:63:
25:86:c9:fe:f1:fe:96:6f:2b:85:91:f9:43:33:0f:f0:39:dd:
16:cf:0b:e3:c7:6e:e7:be:c8:c2:dd:1e:79:2c:88:6a:40:91:
9e:c0:b0:9d:b7:13:e1:24:4a:66:10:74:14:45:72:f3:fe:3b:
a9:a8:a5:ab:bf:b6:7a:30:89:a3:c7:7f:5c:3b:89:0b:7a:42:
d5:83:e5:3e:be:0e:67:d4:6a:d8:63:0e:11:80:e8:3a:a7:d1:
d4:41:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:27:51 2025 by rpki-client