Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa
File: 3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: x1JF9RhjUhlpJprTxNjPO+SKz+HjNKe1MwngjBFEAAo=
Subject key identifier: DC:77:1C:11:48:0E:73:44:D7:AE:A9:60:24:6B:40:3D:2B:49:D3:C9
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 2B15EF8F8CDD5ADB2EDE2505C479013136BF985C
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa
Signing time: Fri 23 Aug 2024 06:00:04 +0000
ROA not before: Fri 23 Aug 2024 05:55:04 +0000
ROA not after: Fri 22 Aug 2025 06:00:04 +0000
asID: 23679
IP address blocks: 202.162.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:15:ef:8f:8c:dd:5a:db:2e:de:25:05:c4:79:01:31:36:bf:98:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Aug 23 05:55:04 2024 GMT
Not After : Aug 22 06:00:04 2025 GMT
Subject: CN=DC771C11480E7344D7AEA960246B403D2B49D3C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:8c:65:1a:28:9d:f9:6d:89:5d:22:ac:91:
94:3a:99:7d:00:fd:69:9a:84:33:ec:73:46:5a:e1:
c0:fa:37:bc:b9:64:eb:af:76:e4:89:7b:cc:03:1f:
47:7f:11:b7:26:9d:a3:a4:5d:73:79:a9:eb:89:4a:
94:97:3c:b1:cf:41:4b:22:73:e3:a0:07:cb:2a:f6:
a9:95:e7:97:84:7f:ae:a4:6a:98:d7:b5:01:59:ac:
91:fd:85:47:96:ed:98:84:10:d4:c0:f2:d6:ac:b0:
28:82:29:7d:72:ae:56:90:6e:15:18:67:4d:5f:3d:
5d:e9:22:3e:b5:27:8b:70:e2:e5:00:5f:8c:da:b7:
17:e2:fa:16:4a:c4:19:6c:6f:37:0b:c6:60:6a:39:
b9:28:1d:8f:01:ee:9f:40:e1:3f:99:42:e9:44:95:
bb:44:8d:ce:6f:90:d4:98:eb:92:cb:92:9c:2d:23:
84:36:7b:28:60:9b:e3:cf:c3:88:a4:a2:01:7b:c5:
f3:af:8e:f4:6c:d0:19:31:b8:cb:b1:c4:bc:29:43:
50:24:53:13:52:56:2d:d9:a7:b9:56:e2:29:33:c7:
33:72:83:ad:80:33:61:c3:ae:16:7d:8e:84:d5:8c:
d2:c7:12:f0:5b:b5:08:e3:47:48:f2:40:ff:d5:a6:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:77:1C:11:48:0E:73:44:D7:AE:A9:60:24:6B:40:3D:2B:49:D3:C9
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.162.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:57:ed:95:08:cc:b5:9c:0d:b2:1f:bd:d0:86:d0:c5:17:60:
bb:43:50:ec:d3:54:0b:dd:6f:2f:30:56:cc:fe:17:e7:92:c8:
d6:90:1d:4d:d5:ec:34:54:9e:7f:4a:db:85:77:e8:d1:7f:7e:
ea:78:7f:eb:11:72:66:8a:25:63:ad:1b:15:9e:0f:ac:72:46:
e5:36:9a:32:29:60:10:97:5a:cd:2e:31:22:de:74:6d:a4:b8:
03:ce:15:a5:23:54:ef:95:48:00:26:e0:91:48:8d:62:56:21:
b0:8e:9d:47:8c:c2:69:3d:f2:7f:a8:54:d1:8c:52:7c:a6:bc:
54:3e:a2:ed:e6:9f:61:94:85:6a:47:a3:fe:b6:13:a4:56:47:
56:29:7f:cb:3e:24:5f:75:64:fc:87:08:b3:9f:16:32:62:06:
77:9c:04:62:c1:77:7a:d4:d2:57:ec:9a:3c:25:81:21:7a:45:
7b:99:91:9b:ca:53:0d:0e:3b:6b:8c:d0:6e:a5:96:22:13:8d:
ed:92:9b:14:ec:b9:66:03:28:d5:09:7f:28:a7:68:ca:ec:1b:
a7:b9:37:04:2e:6c:1b:77:db:9f:36:1d:b9:68:89:9d:46:31:
96:b7:de:99:cf:5e:7c:a2:8b:d0:01:80:2a:8b:69:35:5b:8a:
ce:3a:23:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:38 2025 by rpki-client