Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa
File: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: t94nbHda1ZlB5Svw5eATejFXQCzX8y8ZKvAurl4HFgc=
Subject key identifier: FF:81:2C:34:98:D1:86:82:F1:E5:3E:99:1C:3B:0B:FE:9A:36:F6:1F
Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial: 2074B0EB2F8E84DEADAAC22D01D64E2E8F596913
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa
Signing time: Mon 01 Jul 2024 01:03:28 +0000
ROA not before: Mon 01 Jul 2024 00:58:28 +0000
ROA not after: Mon 30 Jun 2025 01:03:28 +0000
asID: 38150
IP address blocks: 202.91.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:74:b0:eb:2f:8e:84:de:ad:aa:c2:2d:01:d6:4e:2e:8f:59:69:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Validity
Not Before: Jul 1 00:58:28 2024 GMT
Not After : Jun 30 01:03:28 2025 GMT
Subject: CN=FF812C3498D18682F1E53E991C3B0BFE9A36F61F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:27:5c:76:e7:07:d8:2b:9f:38:e9:3e:3a:
89:e5:80:7b:6c:94:07:16:33:b5:6c:51:02:b5:69:
0f:b3:32:4e:c5:db:c9:92:fc:71:ab:8f:6d:a8:c2:
95:48:d2:3d:eb:fd:67:86:b0:a5:e5:cd:f7:44:6d:
5d:27:35:61:78:1b:5e:a1:9e:45:e2:e2:65:e6:b0:
9e:3b:f6:a5:91:e2:3c:a2:68:ad:4a:a7:e6:38:28:
f1:6c:46:de:a8:d2:b2:9d:d2:33:f8:a2:46:40:78:
e8:fd:cf:e8:62:90:8c:ea:7e:e8:08:6c:a5:ad:31:
26:68:1b:f0:f5:27:55:06:1a:a6:cb:e8:f0:09:f2:
53:c6:50:a9:9f:33:5c:1b:30:27:b0:95:1b:20:57:
f7:b7:b5:ca:28:ef:27:b7:f4:21:d8:23:4b:c9:f8:
f7:b6:d2:7d:75:7c:9f:cc:42:49:8d:64:aa:6a:2c:
db:d1:07:ef:b2:dd:d2:e1:07:57:30:aa:da:ba:2a:
d8:9a:05:b1:40:40:f7:83:8b:e6:c9:30:7e:57:d7:
dc:24:dc:0f:d1:22:6a:73:ae:fc:97:24:a1:df:2e:
86:93:e2:fd:9a:23:b8:a8:5c:36:d4:e8:34:09:48:
04:99:e5:91:d6:d5:c8:db:b9:3e:b3:a2:81:7c:f7:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:81:2C:34:98:D1:86:82:F1:E5:3E:99:1C:3B:0B:FE:9A:36:F6:1F
X509v3 Authority Key Identifier:
keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.11.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b6:26:25:d7:66:36:0e:55:91:20:70:ee:eb:8f:6f:57:4f:
e7:f3:d0:d5:61:2b:d7:0a:95:1d:98:d9:6a:98:77:f8:4d:c0:
74:03:bc:9f:c5:a5:52:38:c0:fa:60:a5:d6:42:e1:3b:03:27:
82:0f:ee:53:42:70:36:c8:3a:1d:d2:06:49:e1:d6:a6:8c:86:
25:50:60:48:c3:c8:59:d9:24:38:7f:94:da:39:ac:a5:67:74:
44:77:75:6f:46:ce:0f:9e:99:cd:09:52:9b:47:39:f7:e6:af:
bb:4f:ae:68:54:c2:aa:11:e0:bd:d9:32:44:30:87:22:b8:52:
d1:6b:27:75:38:ed:95:4c:2d:ad:87:40:47:89:bc:ad:5a:98:
67:3c:3c:e9:63:c5:e4:f0:7d:11:5c:bd:af:7a:3c:72:3e:cd:
38:04:1a:18:2a:d5:d4:63:48:cd:04:81:07:ab:35:79:93:48:
17:20:29:71:4f:69:2d:a7:0b:42:5c:01:06:7a:fd:c7:8a:1f:
8a:87:7d:01:0b:c1:93:f5:fc:af:05:15:0f:11:4d:b4:2f:ef:
06:77:ec:41:c9:a5:54:5e:4a:e6:4c:17:db:bf:8e:f4:97:a1:
0e:f2:79:f2:8f:a4:ca:83:81:80:ab:c2:1e:8c:50:2a:b7:60:
83:7b:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:42 2025 by rpki-client