Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139392e302f32342d3234203d3e203538353532.roa
File: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier: 0apjzr4EB5B9PS/w/+U6JAnW4cJ/tSr/z/VxAgvm8qA=
Subject key identifier: F7:F4:05:78:98:AF:A5:B2:70:DF:6A:3A:64:C7:EE:3E:65:AB:C0:B0
Certificate issuer: /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial: 35E1432D25DA2CD072006705B030EA892646AFAE
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139392e302f32342d3234203d3e203538353532.roa
Signing time: Thu 27 Jun 2024 05:01:46 +0000
ROA not before: Thu 27 Jun 2024 04:56:46 +0000
ROA not after: Thu 26 Jun 2025 05:01:46 +0000
asID: 58552
IP address blocks: 202.72.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e1:43:2d:25:da:2c:d0:72:00:67:05:b0:30:ea:89:26:46:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Validity
Not Before: Jun 27 04:56:46 2024 GMT
Not After : Jun 26 05:01:46 2025 GMT
Subject: CN=F7F4057898AFA5B270DF6A3A64C7EE3E65ABC0B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:b2:fe:83:22:01:9d:fa:9d:7d:00:4a:6c:
e3:dc:c9:8d:d3:d3:95:fd:22:41:cd:e1:ca:ea:9d:
d7:10:b1:16:d5:00:6b:13:04:30:74:de:40:a0:22:
b8:3c:35:b9:65:57:6a:b1:7d:7e:89:1b:9e:4f:a9:
c5:5c:77:39:b2:0f:e6:4e:7f:b3:ea:41:e2:6e:8b:
8a:7a:66:4d:fa:ae:26:31:f7:f0:30:ee:70:04:fe:
44:36:19:81:99:e5:aa:7d:70:7e:67:a4:20:a2:8d:
b6:88:a5:f2:ed:0b:42:4a:09:5f:a6:ec:03:bc:cf:
4d:d5:26:6d:2f:b7:8b:5f:fd:77:e4:74:b9:cc:7d:
0e:e3:4c:20:0b:2b:41:6c:98:72:90:94:07:02:b6:
e4:10:de:55:60:d6:1e:3f:52:37:d9:7d:e0:5d:d0:
be:fb:7f:41:a7:9c:c0:56:43:e7:53:e1:a2:dc:a1:
01:a8:10:67:6f:4e:a9:3e:31:27:18:e0:22:49:eb:
b3:10:06:5c:b4:23:55:fb:f4:89:84:f3:cf:52:04:
81:4e:ed:b8:eb:df:51:8c:cc:5f:80:aa:8b:d8:af:
64:60:e6:79:0a:8a:91:94:16:ac:0b:b0:b4:5e:0b:
af:73:d9:89:3c:42:37:15:13:1c:e1:de:b4:72:51:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F4:05:78:98:AF:A5:B2:70:DF:6A:3A:64:C7:EE:3E:65:AB:C0:B0
X509v3 Authority Key Identifier:
keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139392e302f32342d3234203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.72.199.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e1:a4:05:2e:60:a0:3a:5e:b6:a8:5f:d8:0b:64:6c:e5:52:
29:2b:28:80:46:f8:6a:c2:2e:cc:11:04:e8:d5:32:b9:d4:37:
1e:b7:14:a9:06:ba:1b:2e:1e:f7:8a:27:e2:77:9d:34:f9:7d:
4b:cd:cc:29:21:25:cc:ab:da:07:70:a2:91:e6:9f:c3:68:3c:
98:27:0d:76:d1:b0:92:c3:96:12:19:92:08:4d:a1:d3:00:bd:
20:15:e3:b0:b6:bc:76:c0:66:bd:29:ae:97:02:36:f5:31:ae:
1a:c6:95:6f:fa:ee:79:5c:8b:c8:28:95:53:35:61:f3:55:09:
8f:03:80:b9:b9:03:c4:31:26:97:e1:67:22:0d:ea:1a:a0:75:
cf:60:67:b2:f9:65:db:31:4a:29:ba:f2:52:a5:55:01:f8:e9:
dd:90:c0:88:4e:b2:dc:1c:35:44:75:f2:b4:4d:55:89:89:8f:
83:c2:23:7e:e0:aa:61:38:9d:d6:b9:c2:b6:d9:36:66:0d:26:
8d:be:72:87:fb:bb:d1:83:c6:6c:bb:e7:60:62:85:f9:29:84:
e3:73:66:77:f5:ed:39:c2:b2:17:e0:00:99:8e:1e:23:87:f6:
b4:4c:54:e1:d4:12:17:b5:6b:98:f4:07:d4:fe:4d:0f:37:dd:
33:56:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:30 2025 by rpki-client