Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230322e35362e3136302e302f32322d3234203d3e203435323837.roa
File: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (raw, json)
Hash identifier: 0zHHmymmAg7KzILmxTwSb0pVLlyNqlqsvk/nikoNMwE=
Subject key identifier: E9:BD:97:E9:8A:09:28:EB:60:CC:F6:8D:E9:40:7D:C0:41:0E:69:26
Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial: 7482371889129527DC4EA13F37CCB38A0D633D2F
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230322e35362e3136302e302f32322d3234203d3e203435323837.roa
Signing time: Mon 01 Jul 2024 01:02:26 +0000
ROA not before: Mon 01 Jul 2024 00:57:26 +0000
ROA not after: Mon 30 Jun 2025 01:02:26 +0000
asID: 45287
IP address blocks: 202.56.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:82:37:18:89:12:95:27:dc:4e:a1:3f:37:cc:b3:8a:0d:63:3d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Validity
Not Before: Jul 1 00:57:26 2024 GMT
Not After : Jun 30 01:02:26 2025 GMT
Subject: CN=E9BD97E98A0928EB60CCF68DE9407DC0410E6926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:7d:79:50:f1:79:8a:26:5b:b2:0f:ec:ab:
cf:c0:56:ba:7c:f8:b9:46:f6:1e:8b:98:f2:e6:e5:
6d:1c:23:b1:02:b5:8a:73:8f:77:4b:62:f4:c7:71:
41:64:cc:13:47:69:49:7c:37:a1:fa:ba:2b:8a:7c:
a9:4c:02:d8:68:94:57:4d:7e:16:80:83:42:94:ae:
a6:3a:b9:ea:c9:b2:55:70:d4:fa:3a:24:06:d0:4c:
63:50:e8:f2:cd:5d:b3:64:b6:b1:53:97:0c:5a:97:
24:11:bb:b3:98:12:9d:05:be:56:41:c3:e4:02:0b:
95:cf:0b:ee:ed:be:67:94:a0:a2:63:a3:fa:39:ad:
31:2f:45:fc:80:0e:ac:ca:d6:2b:36:44:d3:5e:99:
de:4e:88:ee:d4:06:13:47:50:05:74:48:4f:22:96:
bc:28:ea:6a:fb:a8:4d:86:6c:78:c8:9c:09:fd:69:
20:00:31:88:36:e8:ef:dc:8a:e2:5b:fa:c2:be:72:
39:02:ad:16:9b:39:dd:81:fe:a4:39:f8:dc:88:48:
e3:be:7d:ec:bf:fd:3b:30:9c:06:5f:a0:5e:62:3b:
6f:65:36:06:49:00:fc:97:3c:2c:35:84:cc:18:23:
83:3f:4e:e4:ca:f0:0f:df:a1:c1:3a:38:9c:9b:ff:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BD:97:E9:8A:09:28:EB:60:CC:F6:8D:E9:40:7D:C0:41:0E:69:26
X509v3 Authority Key Identifier:
keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230322e35362e3136302e302f32322d3234203d3e203435323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.56.160.0/22
Signature Algorithm: sha256WithRSAEncryption
32:bf:7e:b6:53:0b:ae:63:3e:c1:22:ca:21:a0:65:47:31:db:
c6:03:cb:9d:8d:b8:f4:b1:fc:9e:bd:a6:34:13:e6:00:ba:9d:
3e:b5:19:fa:f2:43:7a:74:b4:ae:73:75:2a:23:51:bb:b0:b3:
fa:6b:73:a9:da:5b:1d:77:95:a7:7d:65:18:40:f5:73:c9:8b:
cb:d4:f1:a5:b3:1d:26:e2:31:ea:38:62:d7:fa:15:e3:9c:3c:
3d:c6:a7:4b:d3:87:7a:3c:ae:36:c7:8b:1a:83:e6:cf:a7:1a:
d3:41:0a:48:c1:e0:25:00:e0:20:33:36:c1:46:58:41:56:2c:
e0:d2:f4:80:5b:b5:8e:3e:9e:98:9b:43:30:82:be:30:b6:3f:
78:a9:91:30:ae:2d:6b:d4:ec:1a:88:a4:fb:8f:f9:fe:b3:ed:
1e:80:6f:16:4c:2c:20:f2:04:b4:ea:b6:70:1a:83:96:55:28:
4b:97:14:92:40:09:fa:9f:a9:24:0d:e2:be:78:61:a2:1e:4d:
05:8c:da:94:2a:d8:4c:03:48:a3:1b:52:95:de:23:5c:c8:39:
ea:fe:eb:b3:76:3b:35:5f:a7:e1:c8:8b:9a:30:de:57:b8:a3:
24:47:97:03:5b:65:25:92:5e:44:91:b2:ec:e2:2d:50:85:0f:
9d:2e:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:13:55 2025 by rpki-client