Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa
File: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (raw, json)
Hash identifier: bqpmmj2kEuY6cFrK71A1veVcijDgPBMsW4rPcrwhVQ8=
Subject key identifier: 98:23:F6:B4:01:68:ED:65:E4:95:24:AD:80:A6:65:6A:99:B6:EC:A5
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 59FFA983FA0B8E4C56F4B0001112045842EC7EFF
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa
Signing time: Wed 06 Nov 2024 02:00:02 +0000
ROA not before: Wed 06 Nov 2024 01:55:02 +0000
ROA not after: Wed 05 Nov 2025 02:00:02 +0000
asID: 141892
IP address blocks: 202.73.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ff:a9:83:fa:0b:8e:4c:56:f4:b0:00:11:12:04:58:42:ec:7e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: Nov 6 01:55:02 2024 GMT
Not After : Nov 5 02:00:02 2025 GMT
Subject: CN=9823F6B40168ED65E49524AD80A6656A99B6ECA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2a:d8:e3:d8:89:92:03:66:81:82:66:77:41:
12:c5:f5:a4:a5:b3:7b:c7:b0:df:00:d1:a4:46:99:
dd:6d:36:86:90:92:a9:1b:73:3d:2e:35:85:3b:d3:
b0:e8:10:df:2e:8d:df:0d:f0:d7:b5:67:bf:94:b9:
79:72:a6:14:ca:0c:63:e2:9d:d3:ba:da:92:d3:84:
85:b1:d1:c6:ef:46:b9:4e:50:c8:6f:36:1d:5d:7d:
4b:76:f0:39:99:0c:d3:3f:31:99:54:c8:30:08:27:
f2:3d:30:b4:32:99:2d:03:1f:7e:9d:07:40:7f:50:
b5:7c:44:b1:50:d4:70:17:eb:dd:7b:cd:ab:4b:9a:
d6:1f:83:f0:86:d1:5b:4e:dd:f1:c0:c9:86:68:15:
d2:0f:5f:c0:64:15:e1:d5:39:75:73:c1:01:1c:5f:
6b:9f:24:0a:9c:c9:80:9f:e2:1a:c1:75:1e:e6:b3:
4a:2d:d5:6e:34:a8:63:24:a5:ce:9e:19:eb:9b:0c:
e4:2a:23:6e:42:d9:8c:e3:11:b1:11:d5:89:0c:fc:
04:2b:d5:d8:21:bf:2a:bf:34:1c:ed:70:cb:4e:a4:
f1:9d:5d:a5:9e:d2:9b:2d:a0:56:ea:19:9c:35:84:
3e:2a:46:2e:86:37:8b:ba:df:16:00:7a:c3:d0:76:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:F6:B4:01:68:ED:65:E4:95:24:AD:80:A6:65:6A:99:B6:EC:A5
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e20313431383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.73.25.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:0a:69:8d:fb:e4:ed:15:30:47:5a:5f:cb:0a:9a:ac:b9:de:
13:01:0d:80:ab:31:49:24:a3:ac:9b:a3:da:4c:a9:bc:fa:1f:
a9:b1:09:97:2a:02:cc:e5:b3:c4:5e:d3:90:61:e5:f3:84:3c:
10:01:a5:be:b4:a1:f5:0f:36:de:e4:b7:3a:6a:b4:2a:17:cd:
46:b5:38:bd:ba:a6:9d:13:59:d9:fb:38:0c:d2:bb:0c:bc:72:
3d:34:16:b8:95:8c:7c:28:30:95:89:eb:fb:d8:8a:b9:2c:8c:
e8:52:93:86:eb:0b:db:20:45:15:e0:8f:0d:c7:6c:9d:45:46:
fb:a3:df:ca:60:7f:10:3d:a4:46:f1:2a:9e:b3:9a:7f:7d:77:
7c:f9:2a:23:28:99:ac:0e:66:b6:18:d4:83:42:34:e4:22:3d:
d1:fd:50:9c:e7:99:af:b0:0c:73:fb:91:ca:73:63:63:88:e3:
48:77:41:50:e7:21:d8:25:2c:62:80:b8:61:88:a2:68:0c:b0:
cc:1d:bb:98:42:28:b7:ef:43:26:a2:9b:df:34:47:7e:d1:1a:
b4:a9:68:f7:1b:cb:5c:e9:05:79:43:c8:36:b4:fa:f6:20:c8:
88:db:b1:7a:4f:76:5f:35:63:50:8d:52:99:27:ea:98:01:ef:
f6:35:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:39 2025 by rpki-client