Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa
File: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (raw, json)
Hash identifier: bC+0Z62TsXox0BhLKEbD9PTYzVzwTZf1PzCwwCjZ6/s=
Subject key identifier: 63:84:CB:7B:84:ED:B7:F8:25:BD:CC:57:65:74:E7:6E:55:1F:CD:5F
Certificate issuer: /CN=1FA59BCEE428AFC03264229113A5539024697A14
Certificate serial: 1D43A9CBD2A856D750771E8C4264489303DDE3CE
Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa
Signing time: Mon 01 Jul 2024 01:04:17 +0000
ROA not before: Mon 01 Jul 2024 00:59:17 +0000
ROA not after: Mon 30 Jun 2025 01:04:17 +0000
asID: 55697
IP address blocks: 202.0.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:43:a9:cb:d2:a8:56:d7:50:77:1e:8c:42:64:48:93:03:dd:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14
Validity
Not Before: Jul 1 00:59:17 2024 GMT
Not After : Jun 30 01:04:17 2025 GMT
Subject: CN=6384CB7B84EDB7F825BDCC576574E76E551FCD5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:bd:13:93:7d:26:8d:3e:8f:3e:b7:b2:6b:
2b:ce:0e:9c:62:83:02:6d:fa:17:07:03:70:f9:4b:
b7:7b:90:59:d1:6d:ae:af:d2:ac:c0:07:f8:7a:8b:
8a:ec:24:47:a1:eb:38:ea:76:78:1a:38:5b:d1:ec:
ea:2f:f2:9d:59:10:29:2b:23:9c:68:02:33:ad:19:
9a:59:45:99:92:9d:1f:a1:7e:ea:b3:9f:36:ed:05:
e1:38:2a:c6:24:a7:0d:8c:45:3d:c6:b6:ab:b5:d8:
f2:df:d3:27:2a:48:c0:a2:01:33:e7:b9:f4:00:1e:
9c:ec:7b:4f:5d:9c:b1:a7:52:af:45:c9:ae:1d:59:
bd:98:19:4a:a0:85:48:75:cb:9e:3b:d8:61:84:93:
e1:c6:14:1a:0c:6d:b6:60:c8:de:7b:00:0d:77:75:
ee:16:5d:16:50:4d:1f:b6:ac:2e:f5:01:35:89:34:
df:6b:d1:99:96:8a:0d:8b:03:3b:59:49:8b:7b:b1:
65:87:f5:54:45:23:b1:1f:bd:73:c1:ed:0c:f5:3a:
a1:e6:10:f7:e5:53:4b:1b:f0:bf:39:de:85:41:69:
50:3d:0e:f5:4d:25:31:77:1f:9d:d1:e4:e2:e5:90:
3e:b9:fa:94:4b:4d:0b:e3:e9:53:64:f2:2a:d2:6f:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:CB:7B:84:ED:B7:F8:25:BD:CC:57:65:74:E7:6E:55:1F:CD:5F
X509v3 Authority Key Identifier:
keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.0.107.0/24
Signature Algorithm: sha256WithRSAEncryption
99:27:ff:9c:c8:e2:5a:87:95:f0:1e:f6:c1:c5:1e:5d:ba:e1:
60:33:7f:59:57:3a:91:f5:85:09:50:53:49:27:13:9e:a4:f7:
52:51:80:b0:85:83:75:3b:cd:e2:9f:f7:1d:82:4c:a5:1b:f6:
43:0b:fd:36:95:02:94:8f:d3:2d:42:c7:a8:05:e5:13:74:8f:
7f:f7:8d:38:af:41:c7:66:aa:3f:ec:ee:7b:fb:ce:73:0a:0b:
82:7c:41:95:16:39:ec:c1:7d:13:5b:73:1c:be:96:f0:b8:cf:
be:00:71:78:f4:c7:53:94:d2:35:bb:b6:cc:b7:58:77:44:1a:
10:ee:61:68:a1:36:e7:06:06:24:b1:66:b1:75:28:12:02:64:
a0:e2:65:96:96:ac:c2:21:c8:a4:55:bc:82:c0:59:ea:ce:6b:
37:d3:e5:93:89:2f:75:ce:63:f4:d6:0e:7b:9c:33:15:94:6d:
60:fc:64:73:0f:fb:e9:45:ff:b9:0c:2d:b7:3e:3b:c7:b6:c5:
cb:b7:de:8a:6f:1d:dd:5d:55:2c:1f:e8:0e:ae:0a:db:e1:7b:
f2:06:28:21:50:8c:33:4d:e7:64:70:28:c5:46:67:58:aa:ec:
3b:a0:da:d1:9f:fe:6e:dd:32:7a:c3:75:d7:74:06:e0:6d:5c:
82:29:e3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:47 2025 by rpki-client