Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3230322e35362e3136342e302f32322d3234203d3e203435333035.roa
File: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (raw, json)
Hash identifier: dlsqZUGTjCRx+krpGNhgh3Umv+mTDrb/1GV2U8GokZ0=
Subject key identifier: 0C:A2:10:A4:11:62:8F:3F:A9:69:8E:46:56:18:A4:AA:2A:FB:9E:DE
Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Certificate serial: 0193AA951546EAA628C7A21B3BC3FF75C3805591
Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3230322e35362e3136342e302f32322d3234203d3e203435333035.roa
Signing time: Mon 01 Jul 2024 01:04:06 +0000
ROA not before: Mon 01 Jul 2024 00:59:06 +0000
ROA not after: Mon 30 Jun 2025 01:04:06 +0000
asID: 45305
IP address blocks: 202.56.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:95:15:46:ea:a6:28:c7:a2:1b:3b:c3:ff:75:c3:80:55:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Validity
Not Before: Jul 1 00:59:06 2024 GMT
Not After : Jun 30 01:04:06 2025 GMT
Subject: CN=0CA210A411628F3FA9698E465618A4AA2AFB9EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:1e:d3:25:aa:a7:6e:a3:09:65:f7:40:14:
99:da:47:a9:e2:18:69:26:5f:0b:b1:51:3a:3c:37:
af:05:76:6d:13:71:ee:4a:bd:45:f6:5e:77:75:bd:
d4:05:ff:47:51:ce:e4:7f:0e:35:12:68:69:ab:aa:
89:47:ec:5d:aa:4c:f1:19:fe:fd:84:94:bb:82:00:
68:85:bc:0f:51:ad:0d:1b:f4:27:d4:36:8a:a3:d3:
40:45:5c:30:69:42:84:5d:77:7b:01:bb:7c:87:7f:
83:bb:aa:5e:33:f6:63:01:98:58:f8:a2:c0:f9:82:
c7:fd:d2:14:52:6d:e7:1e:8d:3f:e8:20:b6:30:a8:
cd:4a:b3:23:82:fd:ed:15:f7:80:eb:5d:d9:da:1b:
42:02:d1:a3:3f:17:d5:0b:79:8d:7f:7a:98:0e:d0:
3b:be:bd:c1:16:29:97:17:70:e4:f5:27:83:ec:96:
d9:ab:8c:69:22:c6:3a:3b:04:60:cf:79:d7:64:65:
ef:bb:a9:9e:24:18:c6:c2:0a:31:2d:a2:df:2e:a6:
7c:e6:b8:92:22:2c:0c:28:d9:d0:1e:2c:5d:79:69:
fb:29:12:c5:f7:08:82:fd:b9:65:5d:83:09:ac:57:
e2:34:3e:52:65:19:35:91:a7:97:d0:fc:38:87:2f:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A2:10:A4:11:62:8F:3F:A9:69:8E:46:56:18:A4:AA:2A:FB:9E:DE
X509v3 Authority Key Identifier:
keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3230322e35362e3136342e302f32322d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.56.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:fb:6a:a6:c9:87:18:cd:2c:c9:b4:64:95:b6:c0:c4:fa:c2:
2a:4e:40:77:ba:b1:17:b4:c3:d2:80:77:7d:29:d0:7a:3c:27:
93:93:d9:d3:e9:d2:44:bb:f2:5b:66:b7:72:3d:47:92:b2:20:
a8:53:8d:9b:3b:3c:6c:7b:e2:a7:fe:73:b3:7a:32:ae:6f:9c:
d2:7a:a4:a0:9f:4e:f6:b5:b1:12:7f:67:d1:e7:ec:c3:78:82:
7d:6e:c8:f9:30:3a:aa:5f:43:50:fc:f8:08:4f:a8:5a:0e:03:
5d:0e:53:a6:25:0b:a3:e8:7f:6e:bd:c8:3c:fe:49:ee:c3:03:
d1:4f:8e:b4:d3:19:b1:96:ee:1f:26:55:af:56:f3:ec:a9:71:
ee:23:c3:4e:1d:e8:a5:d9:07:74:4e:09:90:21:97:9c:3d:e5:
ea:a4:e2:8d:bc:79:76:86:52:7a:38:cb:91:49:58:2b:e8:e6:
28:ad:12:9b:3b:01:62:1f:18:67:4c:5c:b0:22:1a:1a:4a:ed:
29:5d:33:6d:4f:a7:37:06:ed:f1:5b:43:c1:f1:21:a5:b8:73:
7d:cb:ed:19:95:cb:c7:1e:73:b6:f7:b1:6d:2c:50:9f:2c:2b:
f3:37:b7:77:90:01:11:bb:3e:8e:ab:08:c7:d8:2a:a8:6c:6f:
8f:08:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:22 2025 by rpki-client