Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32312e302f32342d3234203d3e20313439343039.roa
File: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (raw, json)
Hash identifier: LDlAmIkfBI44itLAHSw+oCtaKYJxkyaV9N6k7QGrffc=
Subject key identifier: D0:B6:7A:04:2C:BA:E7:38:81:A9:EA:45:44:0F:AC:C2:81:5A:BD:8F
Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Certificate serial: 2312452EA8BA75578C0DF35D20EEABA2101888B8
Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32312e302f32342d3234203d3e20313439343039.roa
Signing time: Sun 28 Apr 2024 14:00:00 +0000
ROA not before: Sun 28 Apr 2024 13:55:00 +0000
ROA not after: Sun 27 Apr 2025 14:00:00 +0000
asID: 149409
IP address blocks: 202.51.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:12:45:2e:a8:ba:75:57:8c:0d:f3:5d:20:ee:ab:a2:10:18:88:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Validity
Not Before: Apr 28 13:55:00 2024 GMT
Not After : Apr 27 14:00:00 2025 GMT
Subject: CN=D0B67A042CBAE73881A9EA45440FACC2815ABD8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:a5:da:de:2c:71:c7:6a:db:4b:a7:e9:3c:
a2:35:12:91:e7:49:26:e6:85:63:c2:c7:8c:28:1f:
24:b2:94:7b:33:81:f9:bb:77:f2:ee:74:c5:94:35:
9d:62:b6:e5:58:87:44:f1:f3:d7:1a:df:86:11:c4:
c4:f3:cf:54:17:2d:ba:06:0b:dc:12:b4:f5:cc:28:
c6:09:02:0f:0f:c6:f6:39:dd:7d:46:90:65:e8:a1:
43:61:9d:36:1f:40:82:73:a8:85:c8:89:b2:07:93:
d4:d0:b7:4d:b8:cd:3d:32:be:da:59:ae:ef:9f:1b:
4d:56:b8:be:b5:34:a3:95:0f:d6:8a:29:5c:ca:f3:
96:57:e3:8b:bc:33:d4:91:60:23:51:54:70:71:4d:
2d:13:48:9b:d9:e5:c5:47:db:fd:d3:73:17:4b:91:
8e:fc:2b:f3:8d:07:93:74:14:bf:42:83:51:47:dd:
e9:77:d0:e4:6a:f1:22:d6:6c:ea:56:7f:28:ce:9d:
6a:88:55:8d:3a:56:62:9e:fd:9a:f8:24:1e:23:bd:
0c:4f:1e:f3:36:b7:cd:5e:34:ff:ca:6b:65:b5:86:
4d:4f:e1:e3:92:e3:d9:88:41:5b:cc:6a:14:68:0f:
ed:49:2e:41:a4:99:3a:8d:0b:39:1e:90:b5:83:f2:
82:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:7A:04:2C:BA:E7:38:81:A9:EA:45:44:0F:AC:C2:81:5A:BD:8F
X509v3 Authority Key Identifier:
keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32312e302f32342d3234203d3e20313439343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.21.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5e:23:ca:4c:d5:b5:5e:26:3a:8d:90:ed:35:29:e1:5c:d4:
12:7a:e4:73:f9:3f:82:26:ea:f8:0a:1f:16:31:5b:a9:25:aa:
c3:99:17:db:1e:b5:b8:c8:09:9d:24:60:4c:f8:29:eb:76:97:
69:a6:c3:26:49:12:cf:23:f7:5b:90:99:64:15:17:5c:20:1c:
2a:9c:bd:db:3b:40:1d:c6:a4:b4:41:3b:f9:b7:69:6e:c8:2d:
a0:1d:40:36:5d:5d:79:34:e9:a6:71:4e:5f:7c:ee:f4:d5:40:
de:ca:a1:bb:64:6b:11:12:96:83:22:e6:1c:26:cc:83:a3:ef:
b6:e6:0a:fd:3c:22:62:60:4a:f6:76:37:9c:01:e6:10:d8:e2:
26:42:ad:ab:21:32:7f:8c:7a:e3:c3:8e:ca:ba:36:2a:82:b4:
3c:ff:bb:33:4e:e9:c8:43:d6:96:c8:6b:55:cb:7b:51:20:1f:
e6:d9:3f:4f:10:44:39:ad:83:75:c2:2a:8c:83:6e:fe:fd:c7:
e8:aa:da:df:66:e9:5f:1b:07:a6:fc:09:31:ed:fc:30:04:13:
f7:07:4f:36:be:a2:27:7a:4f:86:f4:43:11:29:b0:f4:9a:09:
f3:9e:d5:94:b5:80:e6:22:8d:85:56:78:db:d6:a4:40:5b:e8:
28:c9:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:15 2025 by rpki-client