Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3136322e3230382e302f32302d3234203d3e2039333431.roa
File: 3230322e3136322e3230382e302f32302d3234203d3e2039333431.roa (raw, json)
Hash identifier: X6KKM+lcIc4qVnTPoKV0grWhH5CLYvDoo8B4sfy5UoY=
Subject key identifier: 44:DF:4B:5B:19:68:70:98:31:8F:D9:FB:24:D2:73:F0:D6:17:98:DA
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 500EE5A55CA62241862B5FAC2E9EF53B066EB60B
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3136322e3230382e302f32302d3234203d3e2039333431.roa
Signing time: Tue 23 Apr 2024 03:00:01 +0000
ROA not before: Tue 23 Apr 2024 02:55:01 +0000
ROA not after: Tue 22 Apr 2025 03:00:01 +0000
asID: 9341
IP address blocks: 202.162.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0e:e5:a5:5c:a6:22:41:86:2b:5f:ac:2e:9e:f5:3b:06:6e:b6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 23 02:55:01 2024 GMT
Not After : Apr 22 03:00:01 2025 GMT
Subject: CN=44DF4B5B19687098318FD9FB24D273F0D61798DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:54:21:2b:a4:c2:ac:1e:74:0c:24:8f:13:
0c:f6:a4:29:79:ae:04:1e:8e:43:9b:97:e8:41:93:
cc:5c:db:82:ca:f1:8c:b6:cf:5d:ea:fd:3e:c0:cc:
7b:df:d4:63:b7:34:31:2b:25:99:e1:67:96:eb:af:
e4:f2:ba:25:ca:5d:5b:3f:d6:26:86:44:bc:ef:af:
1b:f9:a5:9b:46:3e:2d:0c:77:b4:02:94:38:b3:2d:
6e:57:ac:aa:d7:96:ba:cd:3e:0d:1a:6d:3c:be:73:
d0:00:4c:3d:d4:c5:a9:06:90:6e:3a:6d:85:3b:a7:
0e:23:49:e5:59:ed:21:3b:da:14:e9:33:71:2e:2d:
3c:e3:3c:3d:48:f9:7c:30:a4:a4:61:ab:f4:78:51:
63:f0:00:0e:55:91:3a:db:8c:11:40:46:40:13:81:
9a:ab:a8:f9:cf:44:7e:6e:5a:37:12:4a:ef:2b:7b:
39:ff:55:ae:6a:57:63:2a:f5:df:2b:6c:63:87:6e:
78:7c:5a:bb:0c:eb:04:67:79:ec:f8:5f:e5:86:11:
91:a4:4a:00:c1:96:de:95:18:a5:2a:96:0a:d8:43:
c0:26:d1:be:05:68:71:2d:28:2d:a7:d8:c5:d1:7e:
83:76:8b:58:ea:98:dc:1c:cc:e5:0e:f3:d8:d6:66:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DF:4B:5B:19:68:70:98:31:8F:D9:FB:24:D2:73:F0:D6:17:98:DA
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3136322e3230382e302f32302d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.162.208.0/20
Signature Algorithm: sha256WithRSAEncryption
01:bd:11:de:7e:4d:7b:c9:5f:e2:37:7c:c8:17:80:47:14:d0:
1d:f9:dc:49:15:9a:bb:1f:4c:4f:15:23:2f:06:6f:a0:60:58:
f9:1e:bb:16:77:71:67:8d:89:73:d3:1c:17:16:3a:79:f9:1b:
71:da:e8:45:8a:86:06:37:9f:40:1b:d5:84:f1:13:ab:e4:29:
2f:5d:91:5a:64:bb:d0:26:00:11:51:9c:e5:e3:cd:f6:6e:ac:
be:3a:6b:9f:03:3c:18:0b:16:fd:c6:2b:3d:89:2c:5a:0d:d4:
f9:5e:e5:b8:61:15:64:cc:c4:c7:d0:1d:33:52:57:e9:a1:a6:
45:c5:97:ef:fd:e9:5a:5c:cd:d8:8d:e3:e2:21:62:3b:90:15:
d7:62:f5:00:80:36:c4:de:66:df:e4:82:f8:52:00:d4:7a:05:
22:45:38:aa:2d:30:83:9a:e9:77:f8:39:ec:ed:b2:d7:e7:66:
37:50:8e:b7:ff:e7:85:1a:ab:e3:9e:b2:6d:8b:c5:ea:6c:aa:
42:c7:84:04:4c:42:57:7c:57:87:3e:0c:e4:84:38:47:2c:08:
e5:2a:d0:92:19:e5:de:db:b3:61:bd:c7:88:de:9c:6a:56:d4:
33:1e:72:dc:c8:7f:8a:8f:83:71:dc:57:d9:c9:d4:f4:d4:e0:
0f:6a:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:32 2025 by rpki-client