Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/3230322e35312e3232342e302f32302d3234203d3e203338313434.roa
File: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (raw, json)
Hash identifier: aWbYXoX9asbKX8LtSjMx/jUwcU2UCkmj/h5lE8zqnhk=
Subject key identifier: BD:C3:A5:1A:22:77:00:2B:AF:5A:69:3E:CC:E8:A6:B5:D5:D5:AA:0C
Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101
Certificate serial: 4511D08F9DD0D38444FC056ECF8004AE60ABD6D5
Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/3230322e35312e3232342e302f32302d3234203d3e203338313434.roa
Signing time: Mon 01 Jul 2024 01:05:28 +0000
ROA not before: Mon 01 Jul 2024 01:00:28 +0000
ROA not after: Mon 30 Jun 2025 01:05:28 +0000
asID: 38144
IP address blocks: 202.51.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:11:d0:8f:9d:d0:d3:84:44:fc:05:6e:cf:80:04:ae:60:ab:d6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101
Validity
Not Before: Jul 1 01:00:28 2024 GMT
Not After : Jun 30 01:05:28 2025 GMT
Subject: CN=BDC3A51A2277002BAF5A693ECCE8A6B5D5D5AA0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:35:a1:d9:ab:c9:61:31:55:24:8e:40:73:
ff:b7:a7:55:f4:0f:ef:ef:14:72:1e:99:5b:9b:54:
79:86:c1:43:df:8f:7e:95:07:c4:b8:ee:d1:04:a4:
39:ae:e2:61:ef:71:d9:23:cf:c8:cb:0e:af:07:bd:
f3:2b:3f:51:0b:14:6c:13:ef:16:20:6c:b6:73:6a:
d8:b3:37:55:54:1a:64:90:8f:82:74:95:9f:ad:f1:
84:80:51:e4:9b:86:57:36:b3:b4:31:52:38:35:5e:
3c:6b:2e:c5:98:c2:fc:09:61:99:11:14:b7:41:c4:
0d:3b:d4:b1:15:63:21:a6:f6:2a:f7:a0:5b:18:f3:
ba:dc:41:24:c6:97:64:3a:62:b9:dd:e6:b1:43:89:
fb:e8:22:a5:38:5d:9d:df:2c:26:66:44:50:05:bc:
4b:a5:3e:d7:61:6c:e0:b6:14:d6:c2:89:39:96:7d:
71:9c:d2:10:aa:cf:c8:90:b2:23:9b:80:31:f5:1f:
de:95:86:4c:95:2b:7f:e9:e3:0c:7d:fd:cd:7c:7c:
a0:53:65:63:a3:37:73:51:fe:21:0b:ee:42:1d:4e:
a5:17:10:e2:97:0b:b8:b7:4f:f5:3c:f4:63:59:a6:
5c:77:90:ff:ee:18:b9:55:17:09:8f:7a:a0:70:28:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:A5:1A:22:77:00:2B:AF:5A:69:3E:CC:E8:A6:B5:D5:D5:AA:0C
X509v3 Authority Key Identifier:
keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/3230322e35312e3232342e302f32302d3234203d3e203338313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.224.0/20
Signature Algorithm: sha256WithRSAEncryption
50:df:1f:9b:f2:12:4b:92:26:ab:24:9b:b1:26:ae:28:4f:9e:
ca:2c:34:78:85:c7:f3:40:fd:5c:77:c4:f3:a9:76:7e:74:e1:
69:71:c6:26:f0:fe:fb:05:08:3b:e2:4e:ce:72:23:18:81:9a:
8f:26:18:0c:52:dd:61:c0:ff:fe:f6:82:7f:78:72:1c:bc:2e:
55:be:9c:b9:e3:b5:91:89:9f:bb:c9:18:7a:14:3e:1b:b1:f9:
2c:03:89:51:92:aa:ab:84:93:e0:82:0c:84:fb:39:95:e9:02:
85:77:f1:1e:73:13:dc:9d:f0:73:b6:26:f3:fe:26:dc:f9:cc:
7d:a6:21:1a:9b:c0:af:75:f6:ee:c7:01:43:39:59:e7:61:dd:
11:4e:d4:7f:dc:94:cd:97:f6:c4:87:c4:19:7c:95:b9:e5:90:
36:60:28:39:f9:c7:62:b9:aa:ec:b3:0a:56:ae:81:0f:31:f9:
f1:72:ca:fd:80:73:26:f2:f0:7c:8e:f8:5e:e7:05:ef:8c:a4:
d7:df:ca:e0:f4:36:56:37:e8:61:a1:7b:d3:e0:b1:0a:6f:d2:
f6:90:b5:6d:1c:ef:ef:67:ac:94:0a:90:02:92:ac:51:13:24:
97:95:5a:90:12:b3:0f:d7:7d:c9:8f:bc:ce:d7:83:64:8d:8d:
0c:40:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:42:06 2025 by rpki-client