Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa
File: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: qo03XHLdsoJ1GTEKjLBEmdW3mK459cDPmNfN/y2DZAQ=
Subject key identifier: 4E:89:65:59:DE:FF:4A:6C:91:87:F7:72:3A:16:7C:F6:2B:BA:3E:A3
Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial: 41362F0EFCDADEC85FC2ECBF90A8F841E90AD5E3
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa
Signing time: Thu 02 May 2024 09:00:00 +0000
ROA not before: Thu 02 May 2024 08:55:00 +0000
ROA not after: Thu 01 May 2025 09:00:00 +0000
asID: 38778
IP address blocks: 202.93.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:36:2f:0e:fc:da:de:c8:5f:c2:ec:bf:90:a8:f8:41:e9:0a:d5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Validity
Not Before: May 2 08:55:00 2024 GMT
Not After : May 1 09:00:00 2025 GMT
Subject: CN=4E896559DEFF4A6C9187F7723A167CF62BBA3EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:3b:09:27:41:80:e5:7b:d9:28:03:96:d6:
e7:05:fc:2a:f5:e1:fc:81:8e:23:3e:fb:23:75:68:
27:d1:5a:28:8d:99:43:04:3d:3f:31:64:86:7f:18:
59:51:3d:0e:da:eb:ac:8d:67:96:67:59:62:98:cb:
e9:f9:79:c7:5d:0e:59:71:be:63:2b:7c:03:f0:3c:
7a:e7:78:46:a9:31:7b:2f:51:71:54:16:b8:27:4e:
9d:e4:8c:cf:96:f3:03:03:a7:19:34:d3:3f:c1:01:
ca:95:46:e5:93:94:20:35:d0:43:8c:d6:51:ae:cd:
81:5e:ed:06:86:0c:55:c0:93:e7:af:e5:ad:a1:da:
24:23:29:b0:42:2c:d9:49:d0:a0:98:14:ed:78:1b:
ef:e5:2a:90:5f:e1:1a:ea:c8:66:86:0d:c8:ca:d4:
9a:f5:6f:af:00:a9:4b:b0:39:e8:c4:ef:d5:42:eb:
89:66:33:68:dd:4b:18:3e:65:1c:45:e8:ea:8e:d8:
b7:0c:42:69:cd:0c:9f:30:cb:73:d6:1e:59:fd:16:
aa:f6:c1:8b:fb:ff:6b:64:76:c1:49:46:51:74:db:
4d:04:58:78:cb:89:81:90:c2:36:d1:d8:50:26:1f:
90:4f:3e:7f:43:59:7a:49:db:56:bc:f5:b6:84:cd:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:89:65:59:DE:FF:4A:6C:91:87:F7:72:3A:16:7C:F6:2B:BA:3E:A3
X509v3 Authority Key Identifier:
keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.244.0/24
Signature Algorithm: sha256WithRSAEncryption
22:82:47:17:84:33:4d:9a:10:22:2c:7a:4c:df:90:e0:27:64:
d0:5b:b9:33:28:f0:37:4d:88:4c:cd:ec:30:73:f7:95:f2:2d:
f6:6e:92:ff:38:a0:05:ac:6b:d0:01:f2:1c:d6:4d:6a:41:83:
9e:12:9d:3a:b2:a0:b4:cd:6e:39:6b:52:95:b3:83:a0:05:1f:
8c:f9:3b:a4:15:31:b8:66:a9:bd:12:6a:bb:3b:3c:78:90:eb:
76:68:15:e4:0f:7c:df:a8:fe:69:d1:fb:86:fc:2b:b8:82:90:
e5:68:61:ce:41:11:58:4c:6d:51:b4:e8:39:d0:df:ff:0b:c7:
d6:56:e1:34:7f:91:8b:79:86:97:33:46:df:5a:5e:bd:35:fd:
35:d8:9f:3d:57:70:34:89:1b:8d:85:7c:6d:df:24:9f:8e:88:
1c:c0:bd:e2:e3:9f:86:ea:08:4d:7b:6c:b4:7a:ef:d9:0c:7c:
bc:2f:47:6e:14:0c:f2:85:66:d4:20:07:8e:ab:05:bd:8a:71:
a0:37:6a:7f:6a:5d:0d:c8:83:17:a3:51:fe:d4:4a:2d:8d:68:
6d:bd:4a:00:05:88:10:64:27:51:87:e6:a5:4d:c3:34:ff:e2:
35:63:2e:35:f9:ad:21:11:f5:c0:63:cb:73:52:4a:d7:63:8a:
d0:fb:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:28 2025 by rpki-client