Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
File: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (raw, json)
Hash identifier: 6LTj/EfLo04qgpysgaD80PV6eg40XKfgvN9M6Cg9Ecc=
Subject key identifier: 08:33:20:1C:30:5B:B7:86:D4:32:7D:D8:26:02:17:13:FF:69:41:29
Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial: 2E549EEAA62CF9ED61FE4DD9AFF98EB7EFFAB34D
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
Signing time: Sun 16 Jun 2024 05:00:00 +0000
ROA not before: Sun 16 Jun 2024 04:55:00 +0000
ROA not after: Sun 15 Jun 2025 05:00:00 +0000
asID: 24528
IP address blocks: 202.91.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:54:9e:ea:a6:2c:f9:ed:61:fe:4d:d9:af:f9:8e:b7:ef:fa:b3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Validity
Not Before: Jun 16 04:55:00 2024 GMT
Not After : Jun 15 05:00:00 2025 GMT
Subject: CN=0833201C305BB786D4327DD826021713FF694129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:e6:a7:93:0d:03:34:11:23:f3:27:96:11:
f4:76:ce:d6:16:d5:28:97:28:22:aa:19:0c:28:53:
ed:b5:42:60:b7:2e:2d:9a:4b:07:11:b7:dc:b6:9b:
40:c9:e5:56:5b:c6:0c:53:e7:8b:d8:8c:eb:f8:38:
48:71:ee:93:d2:11:f3:17:97:01:91:ac:db:f0:cb:
b0:cf:28:38:75:1d:6f:13:03:10:e3:b6:b6:c8:a9:
b2:ac:2d:75:0d:3b:22:ea:17:b8:1c:74:f6:a2:d8:
c3:58:ab:d0:c0:74:09:d5:83:22:1f:67:d3:66:c7:
af:a9:fb:86:31:62:7a:1b:0e:9e:fe:63:db:92:a1:
54:cd:09:3e:4b:bc:41:6a:30:9f:1d:1f:af:28:15:
9e:47:66:fe:91:65:d3:b6:9d:7e:c1:3b:55:c3:5b:
1e:2c:75:b9:19:95:8e:69:29:b3:26:f9:40:ac:4d:
14:68:be:f4:68:b3:a6:47:24:08:bc:18:49:e6:0e:
de:06:07:f8:28:dd:e5:f9:a9:00:69:f1:62:ed:08:
c6:fd:25:1e:84:93:b3:b0:98:fd:04:87:32:6c:de:
7d:c3:48:26:dc:a5:30:95:f8:15:fe:c2:c3:d5:3d:
de:a5:9a:83:d9:47:71:89:c5:18:67:71:96:1b:ab:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:33:20:1C:30:5B:B7:86:D4:32:7D:D8:26:02:17:13:FF:69:41:29
X509v3 Authority Key Identifier:
keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.26.0/24
Signature Algorithm: sha256WithRSAEncryption
75:cd:e9:e7:c8:f5:4a:3a:fe:b7:be:48:b6:31:ba:97:e0:9a:
aa:81:d7:0b:b2:ff:8f:34:94:02:11:99:d8:bf:e8:82:d1:46:
b0:92:be:a6:9f:61:fd:d9:b7:ad:29:fc:63:de:1e:56:ba:cc:
4c:ec:5f:66:69:63:12:2d:68:b7:63:b7:ad:15:e9:68:01:ed:
94:8a:36:d9:9c:08:b3:93:b8:3e:fa:04:d3:36:a9:76:1f:30:
59:db:ab:62:b3:f4:5e:a1:4c:f8:45:3c:5d:69:35:91:75:c1:
f6:31:99:d6:b4:e2:1d:d5:29:3b:00:a1:b3:12:56:15:44:3d:
5f:06:dd:ca:c3:ac:2a:a7:db:59:dd:41:81:fd:74:bb:c1:fb:
73:99:86:fd:3b:e9:05:09:2d:6d:35:2e:26:78:db:fa:40:73:
fb:2a:88:f5:9a:ad:5b:2a:02:01:e0:e8:51:d5:4c:8d:86:76:
47:93:c6:8a:d6:35:e2:38:83:30:db:5c:3a:ce:d1:3c:1d:30:
72:8e:18:10:0b:60:56:e3:b3:5e:ff:9e:c3:36:6a:fe:24:0f:
56:f5:90:5a:b1:85:5f:4b:0b:87:e0:d7:51:91:50:fe:c5:93:
c6:4d:ca:e8:6c:87:74:0a:21:eb:b8:c3:f5:28:04:d6:fb:ef:
92:2d:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:41 2025 by rpki-client