Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230312e302f32342d3234203d3e203138313533.roa
File: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier: H8iPsC0j4tEPSrqGkn++qpzDL6XNvlmhQEwazgG7NhI=
Subject key identifier: A7:99:B9:A3:1A:7A:B9:7D:99:10:A1:B7:CF:19:72:56:17:96:0B:7E
Certificate issuer: /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial: 56B64EFC63F625055A624629B171A4C5B06B1E70
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230312e302f32342d3234203d3e203138313533.roa
Signing time: Mon 01 Jul 2024 01:03:54 +0000
ROA not before: Mon 01 Jul 2024 00:58:54 +0000
ROA not after: Mon 30 Jun 2025 01:03:54 +0000
asID: 18153
IP address blocks: 202.72.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b6:4e:fc:63:f6:25:05:5a:62:46:29:b1:71:a4:c5:b0:6b:1e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Validity
Not Before: Jul 1 00:58:54 2024 GMT
Not After : Jun 30 01:03:54 2025 GMT
Subject: CN=A799B9A31A7AB97D9910A1B7CF19725617960B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:7f:6a:eb:d3:fe:af:4b:eb:6a:9c:cb:77:
4a:fd:c7:c1:bb:77:eb:51:84:d2:af:f2:41:dc:d9:
ac:16:c6:b0:ff:a1:32:9c:14:3d:90:f2:9d:9f:0f:
aa:75:e5:05:61:7a:0f:8f:5b:b6:42:af:96:4f:bc:
06:78:e7:52:f4:14:f3:ad:76:0d:b6:53:46:4d:f9:
5e:71:b2:28:09:43:74:3a:1c:50:2b:e1:75:a1:9b:
79:0d:2c:09:b5:00:9b:69:b5:10:e4:43:36:9e:97:
c0:c5:fc:fe:2a:19:99:01:c9:bf:c1:4d:14:7c:e1:
87:2b:9f:40:fb:a4:24:4a:44:97:87:bf:33:f9:17:
80:9b:f0:5f:4d:b3:d5:5d:49:26:46:33:23:22:35:
ea:fb:fc:3c:fd:75:3d:55:f4:7f:c8:24:2a:06:3c:
59:66:c7:ca:da:ba:c3:8b:e1:f3:a3:e5:65:68:8e:
74:aa:bd:f7:5d:de:d4:30:8b:7f:75:69:69:14:4e:
ec:d4:8c:ca:f3:35:7f:4a:08:0a:d1:c1:94:f5:4e:
e1:8f:1c:98:4c:fe:f0:b0:b1:1a:4a:d7:61:cd:1d:
fa:c1:8d:d6:ed:1c:2b:c9:4e:46:29:c5:64:90:70:
69:25:f0:53:7b:ac:60:9e:93:d5:15:4e:d3:3a:40:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:99:B9:A3:1A:7A:B9:7D:99:10:A1:B7:CF:19:72:56:17:96:0B:7E
X509v3 Authority Key Identifier:
keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230312e302f32342d3234203d3e203138313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.72.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:77:a7:07:1b:61:d6:39:b1:f3:0f:17:e6:8f:c8:e4:f1:b4:
6d:3e:7a:a8:09:83:2f:5b:fa:2a:7a:2e:0e:2a:99:0f:ec:30:
34:7c:da:9f:8b:81:95:77:41:2c:09:eb:96:d2:58:f2:eb:29:
e1:53:72:d2:27:18:4d:c6:d0:3e:96:5b:19:60:5f:12:eb:57:
2b:98:f3:bc:79:2d:0d:fb:5d:51:d2:9f:22:2a:98:4c:29:76:
bd:a1:8b:6b:5c:f6:22:5d:d5:19:76:cc:74:4c:99:34:3b:35:
5d:f8:ab:1f:87:db:28:9f:9a:cc:6f:3c:89:11:6e:94:ec:5e:
87:ad:82:df:f9:f0:a6:85:c2:bf:e2:81:95:51:0d:66:8b:0e:
2e:40:88:43:56:58:69:8a:14:e8:6a:68:84:cd:b6:b6:49:54:
e1:bb:9f:53:ae:5f:74:2d:00:95:95:70:47:0e:a3:da:6f:96:
a0:77:9b:0a:c9:1f:d4:ed:43:54:eb:68:1f:d2:e7:26:ba:32:
c2:fd:e4:b1:56:be:5c:9a:4d:2f:cd:5e:89:53:7c:15:63:7c:
0b:74:ff:76:bb:d4:82:93:15:ec:91:41:de:5e:6a:0a:22:13:
38:7c:7c:e2:ee:7f:2a:d1:43:8c:11:a4:4b:47:9a:84:6a:63:
58:26:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:41:18 2025 by rpki-client