Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e2039373835.roa
File: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (raw, json)
Hash identifier: A23I7fqnPXhBPRczLk5QNBh0X32BPlyjicsamPzFLkk=
Subject key identifier: 8C:9B:3A:0C:0C:36:5C:0D:D5:65:F7:A0:9B:4A:38:EA:1A:E2:24:7D
Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial: 1DBF9C5D27F4F1602AEE3D2410A0721EEBB330EC
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e2039373835.roa
Signing time: Mon 01 Jul 2024 01:05:53 +0000
ROA not before: Mon 01 Jul 2024 01:00:53 +0000
ROA not after: Mon 30 Jun 2025 01:05:53 +0000
asID: 9785
IP address blocks: 202.69.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bf:9c:5d:27:f4:f1:60:2a:ee:3d:24:10:a0:72:1e:eb:b3:30:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Validity
Not Before: Jul 1 01:00:53 2024 GMT
Not After : Jun 30 01:05:53 2025 GMT
Subject: CN=8C9B3A0C0C365C0DD565F7A09B4A38EA1AE2247D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:90:37:ee:26:73:3a:b8:35:14:f9:7c:41:
6b:5f:bd:a5:fe:b4:61:35:d6:af:ea:c1:b3:7f:de:
59:1f:34:1b:b9:f6:c1:a5:c6:91:14:b4:59:ec:c2:
d7:ca:6f:e4:38:03:b3:3d:fb:5d:ec:57:5c:c8:d3:
de:9b:62:ca:29:01:92:24:2c:e5:da:28:a9:75:7d:
a5:b4:f0:92:82:03:0e:10:4f:c7:e4:65:fb:f1:c2:
a7:61:d9:8c:95:02:36:ef:78:20:a8:f4:13:a8:7b:
dd:a4:a0:51:02:78:41:fc:b1:d5:bd:6f:de:48:6f:
9d:a0:0f:2f:f7:17:3c:c4:2f:73:7f:9c:77:52:88:
5e:d2:c7:a0:6e:cd:c0:6b:d2:87:06:31:50:c1:bc:
93:8f:d7:eb:ba:9b:8c:67:f8:83:0e:8e:05:ed:27:
3a:a1:64:42:8c:dc:ab:bb:ce:f7:a3:3a:ca:0a:94:
db:61:ea:4b:a2:a4:ac:70:bc:2d:db:44:fe:17:17:
53:e4:30:c0:61:a1:a6:cd:2b:db:77:ce:02:5e:3d:
f1:d5:96:f6:91:28:9d:f8:db:71:29:82:ac:ae:39:
3b:44:78:80:10:05:e1:8f:43:65:32:9b:ea:d6:a8:
56:d5:45:f3:16:1d:6a:56:ba:18:fd:0c:c1:0f:05:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9B:3A:0C:0C:36:5C:0D:D5:65:F7:A0:9B:4A:38:EA:1A:E2:24:7D
X509v3 Authority Key Identifier:
keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e2039373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.69.96.0/20
Signature Algorithm: sha256WithRSAEncryption
93:52:6f:6c:b1:c6:84:19:e4:b7:b2:cb:f4:7d:11:f0:fe:ac:
87:35:00:a1:94:61:34:61:09:84:22:e3:11:1a:27:bb:f2:e0:
63:7a:b8:1a:65:9b:ad:9b:e0:07:6d:4e:2d:bc:95:b0:c9:c9:
06:80:ec:33:17:d2:5d:d9:90:f1:cb:86:85:9d:12:67:11:8d:
01:9d:37:00:79:6d:3f:50:76:69:55:3a:6c:c5:61:ae:c8:c4:
e4:76:b8:73:ee:fc:ee:d0:6c:53:ee:80:90:e4:27:aa:e0:57:
e7:cd:db:38:e6:db:ef:e9:1e:72:68:bc:d2:4d:17:f6:2b:42:
c8:f5:fd:51:0f:07:af:b1:ee:cc:fd:05:15:da:cc:2d:81:a9:
7e:e6:fe:81:16:af:93:6d:30:a9:37:13:94:3f:c1:3a:b8:40:
0e:5d:e6:9e:b7:80:8a:8c:53:7d:93:5d:d2:95:f7:40:15:da:
2c:0b:31:7f:2e:7a:1b:ff:ea:1d:78:33:cf:a0:65:cf:2a:33:
28:cf:f3:b1:3e:00:9e:90:0a:8f:30:89:c2:55:03:3f:d0:c5:
76:6e:7c:52:a7:23:c5:b9:aa:2b:84:24:d0:c5:98:a2:a7:4f:
13:1c:f8:57:d7:2a:80:7b:88:e2:59:80:d0:7e:f7:71:07:8a:
a5:a3:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:27 2025 by rpki-client