Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e342e302f32322d3234203d3e2039393035.roa
File: 3230322e3133372e342e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier: 35Pmqu6PpjgVddBFFVN9/Ntr9+k71ZEY5f1SwowR1ko=
Subject key identifier: C5:0A:91:49:7D:36:9C:22:86:65:44:82:53:62:3B:51:6C:04:86:D1
Certificate issuer: /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial: 05762561D25887B8A370AEA934CFB6BEE2F094F8
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e342e302f32322d3234203d3e2039393035.roa
Signing time: Tue 14 May 2024 10:00:01 +0000
ROA not before: Tue 14 May 2024 09:55:01 +0000
ROA not after: Tue 13 May 2025 10:00:01 +0000
asID: 9905
IP address blocks: 202.137.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:76:25:61:d2:58:87:b8:a3:70:ae:a9:34:cf:b6:be:e2:f0:94:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Validity
Not Before: May 14 09:55:01 2024 GMT
Not After : May 13 10:00:01 2025 GMT
Subject: CN=C50A91497D369C228665448253623B516C0486D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:14:b1:13:22:7f:fc:84:00:db:b8:ed:1b:a0:
4d:bc:aa:e0:e7:c2:07:22:60:3b:a0:7a:86:61:62:
4e:a7:66:f1:50:16:b2:cb:f3:ad:82:e6:44:58:87:
50:f1:19:13:4b:4e:48:75:b9:0e:b3:70:47:d0:9b:
75:d0:6f:a2:45:36:bd:92:11:09:15:59:4d:46:6d:
48:04:bb:2a:3e:0c:93:b2:d7:4e:86:99:28:14:da:
c9:c4:ca:d1:52:c3:a6:b9:73:36:c1:7b:89:4c:da:
dc:ca:f9:9a:e3:8e:7b:17:6c:45:ef:29:ec:1f:43:
58:a7:c9:1c:39:69:6e:60:2e:85:46:b0:1f:ff:a6:
8f:32:8e:f4:11:fe:1f:75:83:e4:0a:80:c4:ee:47:
84:a8:fd:bf:a5:e2:79:76:91:0a:a0:ce:51:9b:32:
11:0a:73:00:6c:41:f9:00:ac:1b:24:c1:dd:dc:d8:
4e:5f:94:48:e6:10:4e:8a:0a:7e:06:9f:c5:92:d7:
a2:35:d9:92:50:e1:4c:f9:49:dc:6c:91:21:27:cf:
53:74:55:37:c8:69:4e:80:ab:61:3f:81:c1:04:eb:
d9:b8:b2:9a:fa:dd:86:0b:dc:b9:98:ae:fb:d4:24:
96:0d:eb:a8:37:8f:d3:50:af:e9:25:58:d3:59:11:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:91:49:7D:36:9C:22:86:65:44:82:53:62:3B:51:6C:04:86:D1
X509v3 Authority Key Identifier:
keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e342e302f32322d3234203d3e2039393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.137.4.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f2:23:52:f6:0d:c3:9c:72:92:f0:bf:df:00:d3:f0:73:f1:
c9:2a:98:9f:4c:ea:3b:59:63:62:49:f8:d0:02:ff:da:12:e7:
51:b5:da:a5:b5:1e:63:24:58:43:97:04:75:a4:a3:37:61:56:
42:a4:6f:d5:cf:bb:f9:66:ce:68:dc:0a:0f:fe:05:3a:24:ed:
74:ef:bd:bf:c4:e3:b4:9d:65:67:70:9d:fa:e6:81:dc:ce:0d:
5c:f6:36:34:c7:0c:ae:69:02:20:02:82:a5:7f:fd:a8:45:4c:
79:d9:dd:4b:03:42:ad:36:19:18:32:73:f0:f5:ab:25:4d:3f:
c4:ae:a6:63:18:b9:8d:59:7f:b5:0e:fc:ee:31:fc:07:27:b1:
17:79:b2:97:d1:29:19:1e:3f:98:3a:4d:f4:7f:d8:db:60:f9:
f3:10:85:d6:38:cd:a6:c9:62:7e:3a:a7:2c:8d:af:75:26:cb:
9d:c1:ad:60:0c:94:da:35:26:f5:48:56:bc:48:70:62:14:38:
68:c9:07:5f:3a:d2:89:79:94:0c:33:44:63:63:0a:cb:aa:7d:
63:10:2b:93:dc:df:47:4f:cd:7a:42:26:a7:71:72:0b:72:a7:
dd:d3:68:78:04:78:8a:49:82:61:48:f0:27:7b:0e:61:82:5b:
1f:59:9e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:27 2025 by rpki-client