Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32302e302f32342d3234203d3e203538383136.roa
File: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier: cm73JAuUCZkKzXUWJboWhK5REq3NH6mjebxXmqE6/8o=
Subject key identifier: 7D:BA:19:E3:21:23:DB:74:5C:C2:42:51:AF:C7:A7:52:E0:6C:30:BC
Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial: 47CF6B4195B8F9F39E97CA9EF64AAAD957CC3F53
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32302e302f32342d3234203d3e203538383136.roa
Signing time: Thu 11 Apr 2024 11:00:01 +0000
ROA not before: Thu 11 Apr 2024 10:55:01 +0000
ROA not after: Thu 10 Apr 2025 11:00:01 +0000
asID: 58816
IP address blocks: 202.73.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:cf:6b:41:95:b8:f9:f3:9e:97:ca:9e:f6:4a:aa:d9:57:cc:3f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Validity
Not Before: Apr 11 10:55:01 2024 GMT
Not After : Apr 10 11:00:01 2025 GMT
Subject: CN=7DBA19E32123DB745CC24251AFC7A752E06C30BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:e7:02:bb:17:dd:17:bc:d0:4b:de:c1:eb:
c5:69:e0:0f:5f:28:59:b4:ae:fb:47:6a:fc:ea:27:
09:8f:ba:69:44:f7:96:17:ec:27:20:ae:bd:37:80:
60:e0:d4:af:cb:39:fe:b6:6b:f7:fc:b8:b2:9e:40:
e5:7a:22:58:45:fe:25:14:ea:0a:36:5b:9a:72:e7:
5e:a9:f5:ed:05:16:a1:ac:77:af:73:22:b4:28:15:
4f:0b:ca:ac:e9:75:b2:8f:79:08:c2:c4:37:42:bf:
a9:6c:f8:5e:8c:0f:36:b0:57:6c:c2:21:54:4f:c3:
76:4e:80:63:14:8b:a8:dd:05:e0:61:c9:5d:5d:05:
3d:70:a4:90:33:15:30:46:65:5c:45:f5:81:12:f7:
67:14:54:2c:bb:3d:f7:a0:ef:35:bc:94:d9:00:e2:
b9:dd:45:3b:0a:46:6b:48:e7:d9:c0:ea:be:b3:7a:
b8:4e:72:33:f9:a5:70:2b:d2:e2:79:4b:4f:20:ad:
b0:ed:e6:81:01:02:07:70:c7:4a:32:34:bd:83:1d:
60:18:cf:d5:02:4b:da:12:53:9a:fd:71:6f:44:07:
6d:00:b1:70:28:11:99:41:68:5b:35:8f:db:c1:74:
c9:a5:35:68:6f:be:cf:0e:c8:ea:1e:90:50:c1:88:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:19:E3:21:23:DB:74:5C:C2:42:51:AF:C7:A7:52:E0:6C:30:BC
X509v3 Authority Key Identifier:
keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32302e302f32342d3234203d3e203538383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.73.20.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2d:02:6d:f2:11:d4:28:e3:f3:6d:16:a6:89:29:06:ec:33:
ad:34:74:e4:bb:c8:4c:ae:ff:78:25:01:3c:63:80:56:5f:56:
b2:7b:3a:c6:3b:bd:dd:37:4f:ad:43:d6:5a:90:cc:33:55:cd:
00:7d:66:0a:4d:e1:31:ac:09:51:77:e4:f9:fd:1c:8e:43:6d:
f6:4f:80:f6:60:f3:03:dd:bd:fa:30:0d:0f:89:10:54:c3:fd:
b3:3d:0b:44:02:ab:d3:fd:a5:9a:cf:21:5a:21:0e:8c:ca:8c:
5c:cb:5f:53:07:fb:8f:dd:9b:3c:b4:04:e6:13:3f:bc:fa:48:
af:91:1a:ce:8c:da:d3:f3:95:48:78:e1:ed:a5:7a:21:b5:58:
21:66:59:6a:a2:9e:cc:e3:e6:ec:a3:db:4a:ed:16:e1:cc:47:
c1:92:c0:b7:21:18:58:94:13:08:5c:76:87:91:dd:1f:d3:06:
e5:20:19:44:24:a0:6d:1e:7d:79:d4:5d:c1:a5:f0:f4:61:75:
32:2d:b6:22:f9:39:7b:62:d2:50:b4:3d:39:67:b8:cf:d0:80:
44:90:50:0e:fb:7f:92:68:88:9f:9b:d1:e8:26:f5:ce:44:0b:
dc:96:78:95:33:a0:ab:6e:9d:49:89:15:a3:5e:c1:b4:d7:01:
07:8f:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:52 2025 by rpki-client