Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133392e302f32342d3234203d3e2034333832.roa
File: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier: ndgkYRqkUb1Ua/CNSd6RHtwIAdt+1wL8PAPjL4e5Dv8=
Subject key identifier: 97:B8:6D:37:58:49:8F:D2:E8:2A:61:CD:A2:9F:47:4C:69:AF:35:B3
Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial: 66CDD89643FF88987F72B283BA2197FEE667E1E4
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133392e302f32342d3234203d3e2034333832.roa
Signing time: Wed 21 Aug 2024 13:00:00 +0000
ROA not before: Wed 21 Aug 2024 12:55:00 +0000
ROA not after: Wed 20 Aug 2025 13:00:00 +0000
asID: 4382
IP address blocks: 202.93.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cd:d8:96:43:ff:88:98:7f:72:b2:83:ba:21:97:fe:e6:67:e1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Validity
Not Before: Aug 21 12:55:00 2024 GMT
Not After : Aug 20 13:00:00 2025 GMT
Subject: CN=97B86D3758498FD2E82A61CDA29F474C69AF35B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:dd:d7:27:47:62:18:0c:5d:fd:5e:2e:a6:
aa:77:15:f9:86:7b:ec:b9:33:de:62:f8:38:e6:32:
0e:73:c5:40:fe:a2:21:bc:20:ca:49:28:92:46:e4:
fc:9c:7f:f2:1c:35:31:a4:bf:e7:7f:90:4b:e7:59:
fd:57:53:ec:fd:66:8c:3d:d0:dc:65:19:71:b9:25:
06:ef:75:b4:ee:f7:92:18:68:1d:ed:f1:e4:3f:e8:
5d:af:fa:96:62:b8:8c:f0:10:38:0a:cf:5b:40:a0:
13:b5:3e:8c:ec:ed:1c:18:f6:f9:f6:ff:85:34:73:
27:39:5a:51:e8:e5:03:bd:3a:5f:15:5d:e8:66:93:
d3:3e:49:38:37:f3:a5:2f:54:9b:b6:b8:b6:35:7f:
d7:26:a5:9a:73:dd:1a:2c:8e:31:ad:fc:e2:a5:c3:
89:df:94:95:7d:6a:fa:b2:ce:0c:ed:5e:80:f0:b3:
99:6e:b1:bd:5f:1b:41:22:3b:f0:e3:d2:d9:d5:13:
6b:ef:14:69:a6:e1:57:9d:ab:bf:4a:76:81:08:9e:
30:88:9c:a8:84:62:2b:e4:f5:d6:6e:f3:e2:1f:48:
e7:da:ab:bd:b5:4e:7e:b4:3b:f5:12:ca:d6:6e:29:
b6:29:e9:26:bc:dd:48:15:cd:89:0e:79:a9:1d:02:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B8:6D:37:58:49:8F:D2:E8:2A:61:CD:A2:9F:47:4C:69:AF:35:B3
X509v3 Authority Key Identifier:
keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133392e302f32342d3234203d3e2034333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.139.0/24
Signature Algorithm: sha256WithRSAEncryption
be:36:6b:c2:fa:81:f1:4b:1e:c1:38:85:94:38:65:4b:71:d1:
88:16:71:fa:fe:90:fb:c1:2a:a9:49:24:47:dd:4d:5e:98:c2:
be:79:1f:13:a8:de:ba:10:3a:e6:32:3d:87:00:a1:ff:87:91:
9c:e0:da:19:35:45:6d:c4:75:83:6f:5c:86:f4:48:f1:d5:c4:
5c:ea:90:bf:19:aa:b2:45:46:a2:78:64:f4:18:b7:4c:ed:d9:
a3:02:ad:a0:0c:d9:47:81:a3:cf:90:6c:1b:20:1c:25:2b:18:
3d:55:96:38:67:4f:63:46:d9:ca:11:18:1d:d4:57:ec:e0:38:
84:fc:11:90:f6:b6:65:54:c2:1e:6e:17:a0:b7:89:d7:47:a0:
39:af:5e:39:68:6f:6f:ae:1d:c3:d9:2a:04:58:60:0a:bc:5e:
8a:6d:a0:c1:ae:4a:ea:59:a0:87:75:dc:cd:b2:73:a2:26:69:
52:4f:34:44:50:3a:37:23:f1:06:5f:6f:88:08:22:37:b8:d5:
5d:37:47:d9:a1:90:7a:ec:99:20:4a:15:53:7f:66:8d:85:a8:
8d:ff:98:9e:34:65:2e:9a:24:d5:d8:a7:27:00:63:4d:96:d8:
03:8a:6b:e5:06:54:d3:da:f3:ae:3d:c2:24:c7:c1:f8:da:4d:
1d:2f:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:57 2025 by rpki-client