Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa
File: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (raw, json)
Hash identifier: bEXjgt5oe/QCk1NlQcPsjuArMBUfj88EZpYXft80tYY=
Subject key identifier: B8:84:3F:83:0A:0E:2C:F0:A1:1F:71:98:F1:EB:B5:2F:1D:2D:A6:4B
Certificate issuer: /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial: 319EBC753A7E70132DD8D6A1A6B4AC5CB4978424
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa
Signing time: Thu 24 Oct 2024 01:00:02 +0000
ROA not before: Thu 24 Oct 2024 00:55:02 +0000
ROA not after: Thu 23 Oct 2025 01:00:02 +0000
asID: 17910
IP address blocks: 202.127.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9e:bc:75:3a:7e:70:13:2d:d8:d6:a1:a6:b4:ac:5c:b4:97:84:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Validity
Not Before: Oct 24 00:55:02 2024 GMT
Not After : Oct 23 01:00:02 2025 GMT
Subject: CN=B8843F830A0E2CF0A11F7198F1EBB52F1D2DA64B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:84:24:1f:44:0b:31:07:34:a2:95:93:18:
0c:04:50:bb:6a:19:21:55:0d:80:58:97:a8:7a:d8:
03:db:f6:53:0a:81:af:0e:eb:1d:c2:90:03:c5:a6:
5a:f7:7c:49:3a:39:48:73:05:45:d0:ee:61:28:66:
e0:ee:40:b9:8b:ab:bb:c3:de:06:84:e4:e1:7e:e1:
32:2c:14:72:ee:2b:4b:d1:77:ab:0c:a4:93:83:69:
0d:40:ac:af:75:05:13:20:e4:42:6a:45:e3:0f:d7:
40:6e:7a:6f:5f:2c:b6:4c:ae:dc:fe:b5:9c:32:bb:
01:46:3f:21:88:cd:17:38:d9:e9:cb:44:da:c9:11:
4b:c4:e9:04:92:03:62:40:ff:e1:40:dc:68:e9:a4:
49:18:56:60:1b:f8:06:2d:a4:05:c2:7d:bf:61:41:
fb:02:e0:1b:68:02:43:42:5e:b2:73:1c:25:07:e9:
99:59:6f:3b:42:91:a5:ad:7f:2f:b6:4d:95:d8:61:
79:eb:47:8a:a9:59:6d:36:14:19:10:60:32:12:06:
b8:bf:d0:c2:ed:b1:7b:8f:f8:7d:5f:89:44:bd:b7:
6b:f0:18:6b:6f:e5:f6:45:79:0e:e7:2e:db:68:56:
af:78:13:16:07:58:8f:09:79:34:be:34:1e:c8:e1:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:3F:83:0A:0E:2C:F0:A1:1F:71:98:F1:EB:B5:2F:1D:2D:A6:4B
X509v3 Authority Key Identifier:
keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.127.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1d:79:e4:1b:41:9c:de:49:0e:36:a1:2f:4f:a1:bb:e5:7b:
1e:1f:e1:87:ca:2b:59:c8:af:c4:3d:52:46:f7:09:50:95:7d:
19:b7:c4:28:f8:0e:09:44:cd:c2:93:3f:09:a2:50:da:c8:1a:
d0:a4:16:e3:00:55:10:6f:f9:6e:e8:fa:b8:8e:87:6b:62:36:
2a:2a:30:cb:fd:ba:2f:e6:5e:15:eb:2a:59:d1:bc:f6:90:58:
eb:39:30:d4:79:81:de:7f:7c:a3:40:c0:d3:99:5f:4e:fb:9a:
b3:6c:7e:6c:6e:b9:cb:79:22:12:8a:88:11:0b:67:ae:b9:6a:
c1:ac:23:39:2a:0a:78:78:89:84:4e:17:71:8b:89:97:b1:4e:
c9:a7:43:db:f3:b8:62:58:45:39:81:4b:0a:32:1a:66:5a:96:
a3:f9:8c:7b:cd:99:48:fd:07:21:9a:be:87:21:83:d0:69:6f:
9b:0a:30:e5:a6:2c:a5:13:5d:fe:07:4d:28:8f:25:ef:df:c6:
b3:15:f4:80:bf:6c:e8:2a:c1:24:32:3c:01:3c:5c:4b:ae:d6:
f1:64:af:36:30:1c:97:ea:d8:93:da:f1:10:47:30:c6:76:06:
32:b8:b9:9c:4a:0f:a6:ae:da:b9:10:af:55:43:35:8a:6d:05:
5b:d5:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:22 2025 by rpki-client