Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa
File: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (raw, json)
Hash identifier: zg5vSiA3/QN7bcIdzKLkKGnJsaulOgSMw7ad8ij4yQk=
Subject key identifier: 85:A3:79:73:09:1D:BE:F5:20:DE:D7:2A:0D:63:06:3C:A1:1D:79:65
Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5
Certificate serial: 685FC61E33798E6F067BF206ACFE93E6018273D1
Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa
Signing time: Wed 03 Jul 2024 05:00:00 +0000
ROA not before: Wed 03 Jul 2024 04:55:00 +0000
ROA not after: Wed 02 Jul 2025 05:00:00 +0000
asID: 23949
IP address blocks: 202.150.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5f:c6:1e:33:79:8e:6f:06:7b:f2:06:ac:fe:93:e6:01:82:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5
Validity
Not Before: Jul 3 04:55:00 2024 GMT
Not After : Jul 2 05:00:00 2025 GMT
Subject: CN=85A37973091DBEF520DED72A0D63063CA11D7965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:c0:5c:e3:d5:11:d1:3c:d2:6b:ad:10:3f:
8f:de:57:67:bb:c5:7e:b4:da:ad:02:08:82:ca:f8:
69:17:bf:1a:d5:67:63:7c:4d:3b:69:ad:c8:ae:0d:
b9:4a:0a:72:54:90:a9:84:61:14:6f:40:48:76:4f:
d6:64:82:49:64:63:67:fc:52:c5:4b:d6:68:71:e2:
7e:e5:a3:f2:de:98:b2:85:67:25:6b:04:d4:69:b9:
8e:0a:e2:d6:b9:94:40:66:c2:a2:25:2a:6e:cb:2d:
88:fa:59:83:08:16:42:ee:6b:48:0e:f1:92:80:f2:
90:6a:ac:ab:5b:80:bd:f1:49:a7:21:df:85:9f:e0:
d7:6e:ad:2c:1f:9e:c8:22:05:53:69:6d:fc:ba:a0:
03:16:1a:3d:09:1f:30:93:b8:89:d1:05:a5:41:4c:
8e:e8:4b:3b:f8:9d:e7:b6:62:88:fe:5c:14:ff:f7:
f3:82:33:4e:0b:c1:05:e4:06:64:b2:93:7e:e8:79:
d5:bf:ad:be:45:3a:0b:18:da:a1:97:7b:11:e1:68:
45:6b:3f:b0:88:d9:2e:ab:89:6b:e6:4d:15:b8:24:
51:a8:cf:6a:26:6b:89:e5:7e:74:f6:06:f4:1c:d9:
e2:67:ef:85:b8:5d:53:3f:5f:a9:21:f5:80:ab:42:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:79:73:09:1D:BE:F5:20:DE:D7:2A:0D:63:06:3C:A1:1D:79:65
X509v3 Authority Key Identifier:
keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.150.128.0/19
Signature Algorithm: sha256WithRSAEncryption
b2:a0:63:36:c4:4f:e0:a1:b2:12:ec:1b:4f:20:08:26:91:e2:
f6:95:4c:8f:04:0c:ba:00:93:ab:c6:d0:d4:01:c2:1f:26:01:
e3:b0:d7:6e:ef:a1:6d:aa:d1:19:f4:9e:5a:b5:41:18:ff:d0:
91:9b:a4:e7:fe:79:84:39:31:ea:06:7c:e6:66:d8:1d:99:95:
f0:2f:a1:62:19:6a:9c:f3:21:ce:e3:6c:97:eb:3f:f8:f4:88:
78:1d:56:16:2d:e2:b3:e9:1b:61:9a:12:47:e1:0f:73:45:f6:
3a:74:f2:12:d8:03:a0:84:a0:7c:a0:a7:76:7b:f5:5a:b6:51:
24:bf:5b:1a:30:62:8f:b5:e0:6a:34:94:c6:b5:d1:59:c5:f8:
14:b9:5b:5f:f9:c7:6c:8c:22:f1:6a:0e:5e:0d:f4:3d:bf:b3:
d1:a6:e1:02:5e:63:6a:9a:bd:c0:ab:c6:6a:53:7f:99:36:d9:
ad:41:5b:59:49:34:04:c4:86:2f:fc:d7:fe:52:ab:9a:3e:5c:
a0:c5:a2:4b:88:63:20:9d:8c:ae:fb:81:91:4b:f5:7d:d7:32:
08:a5:57:0a:f1:0f:c1:aa:5c:4b:09:d2:74:0e:6c:0a:81:d6:
9f:e9:d4:49:24:36:22:45:0d:c8:45:3b:b6:cd:4e:a4:e6:ce:
13:0b:5a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:35 2025 by rpki-client