Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37362e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e37362e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: P5crg0R32gyS1n02458lLpX18WRXH3sQSc1skd1DZ2k=
Subject key identifier: C2:1D:00:47:28:AD:03:D4:4F:F9:4E:0E:E1:BC:AA:1F:6B:3E:7B:88
Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Certificate serial: 25B5B008C2EA242F7094C029A456BC5177CB8DC7
Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37362e302f32342d3234203d3e203233363935.roa
Signing time: Tue 17 Sep 2024 16:00:02 +0000
ROA not before: Tue 17 Sep 2024 15:55:02 +0000
ROA not after: Tue 16 Sep 2025 16:00:02 +0000
asID: 23695
IP address blocks: 202.173.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b5:b0:08:c2:ea:24:2f:70:94:c0:29:a4:56:bc:51:77:cb:8d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Validity
Not Before: Sep 17 15:55:02 2024 GMT
Not After : Sep 16 16:00:02 2025 GMT
Subject: CN=C21D004728AD03D44FF94E0EE1BCAA1F6B3E7B88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:de:d2:08:d6:22:75:f2:75:46:3a:c1:f5:4a:
aa:fa:7d:7a:f4:3c:01:07:a4:34:d7:8a:e2:2c:0e:
3f:4d:da:e0:be:37:e5:9e:a5:e0:fe:a8:a1:fd:dc:
85:1b:3a:08:06:3b:f5:50:9e:bf:b0:49:b8:09:a2:
95:4e:7a:c8:e8:98:ee:5f:9f:35:93:b6:85:9e:2f:
58:ad:8c:63:4d:81:72:b1:9d:66:f1:18:00:19:7d:
8f:47:67:48:9a:3d:21:6b:a4:ba:c1:b8:eb:39:8b:
af:f1:4f:19:c1:b6:a7:93:07:a8:5c:72:ba:4f:3c:
bd:a1:6c:9c:4e:01:6c:6d:4d:40:e5:f2:5d:c0:cc:
5f:68:c7:b6:b0:f0:67:e6:42:f9:4f:96:aa:02:63:
07:e4:85:68:e4:98:3f:f3:54:b2:bd:c4:d5:c6:47:
c8:62:42:d1:fd:ed:20:af:ce:50:05:90:9a:4c:17:
9f:2b:0d:ef:5c:fe:39:5c:58:1d:60:95:45:e4:d2:
71:ee:a0:4f:f9:81:c2:e7:e2:0a:dd:76:5f:54:d1:
91:2c:60:bc:74:b9:6a:81:45:66:38:0e:bc:d1:dc:
b8:5b:ff:fc:c6:7c:80:91:23:b2:c8:32:91:51:36:
70:56:10:f6:1f:cc:47:7d:c1:e1:36:e7:af:db:0e:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1D:00:47:28:AD:03:D4:4F:F9:4E:0E:E1:BC:AA:1F:6B:3E:7B:88
X509v3 Authority Key Identifier:
keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37362e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d9:4c:35:0f:8a:53:28:65:13:4e:f0:8e:cf:f4:18:de:0b:
59:b6:a2:a9:6f:8d:06:04:05:fa:12:8b:aa:8c:1b:68:b8:bc:
f7:e8:35:49:11:25:62:eb:34:36:89:7b:8d:f1:9e:28:b7:56:
e2:ba:b8:a6:d0:7e:1e:49:ac:00:ea:6d:86:3a:45:14:80:34:
11:3a:dc:5c:a6:b4:9d:12:34:e3:12:7b:47:0b:25:7d:75:73:
43:05:c4:ed:c7:1d:d3:56:5c:ad:25:42:e0:9a:96:5c:84:fa:
20:d1:73:76:48:a4:4b:d7:2d:ac:96:70:0a:32:d9:cc:42:09:
7b:b6:81:5e:95:9e:0c:cf:d8:fc:a9:a6:0c:22:78:03:5d:fa:
7f:eb:46:d3:74:ff:91:35:75:c8:a8:db:8c:d1:4e:70:90:40:
ee:5f:49:d1:93:d4:1f:1a:7e:a9:01:3d:61:16:fe:c9:b4:4d:
50:98:58:34:01:80:ce:db:65:d3:dd:50:f8:93:02:3b:a9:77:
f7:ac:33:18:7d:9e:31:e4:47:bd:7e:0f:25:45:b5:11:34:fe:
9c:ff:22:33:1e:37:6a:90:e1:ae:f6:f4:40:b4:be:d3:cd:0d:
cd:5e:20:e1:31:52:fc:4a:1a:18:f3:36:27:70:ca:57:1a:81:
ca:9a:59:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:04 2025 by rpki-client