Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3230322e3137332e31362e302f32312d3234203d3e203234323130.roa
File: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (raw, json)
Hash identifier: bE661+O1P4yXvU0DhZoWEyQ/dU6h4QpYxixmc8KzOac=
Subject key identifier: F7:16:BC:82:75:23:3B:88:F8:DE:A5:29:63:13:B7:E3:9D:DC:4B:D3
Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D
Certificate serial: 7A43551D04BFDDC8173FECB31BDDC4F043C221BD
Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3230322e3137332e31362e302f32312d3234203d3e203234323130.roa
Signing time: Sat 10 Aug 2024 07:02:11 +0000
ROA not before: Sat 10 Aug 2024 06:57:11 +0000
ROA not after: Sat 09 Aug 2025 07:02:11 +0000
asID: 24210
IP address blocks: 202.173.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:43:55:1d:04:bf:dd:c8:17:3f:ec:b3:1b:dd:c4:f0:43:c2:21:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D
Validity
Not Before: Aug 10 06:57:11 2024 GMT
Not After : Aug 9 07:02:11 2025 GMT
Subject: CN=F716BC8275233B88F8DEA5296313B7E39DDC4BD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:95:de:76:18:97:a0:a2:3f:68:f3:bc:2d:
01:53:54:75:e6:bd:4d:fc:0f:36:3c:4e:38:82:44:
23:15:cd:b5:57:a8:de:1b:7b:dc:ed:6b:16:7b:4a:
2e:eb:ea:9f:6a:dc:1f:65:5d:09:bd:9c:5e:78:d8:
54:55:35:15:27:f9:f8:59:0a:94:37:16:39:c0:9c:
99:1e:0e:65:c7:c3:93:8a:52:1d:9f:d7:9b:de:8e:
eb:b5:e7:be:90:d4:f2:9e:47:fb:e3:d5:d0:8b:7d:
f6:e7:4b:a7:a2:69:ac:22:13:e3:7f:3d:d7:35:d9:
a9:bd:cc:ff:09:bf:b9:4d:b0:96:61:08:bb:93:d3:
75:90:31:51:aa:4d:84:58:49:de:07:52:39:cb:06:
dd:f5:43:80:74:1c:27:1e:23:7a:6f:c1:17:63:7a:
84:b4:10:b4:d3:d5:13:11:5b:b2:67:a1:35:ab:6c:
45:5e:bb:2f:b5:b3:82:f3:c3:8c:79:24:ee:03:32:
33:d2:b4:88:54:44:3a:eb:2f:18:36:00:b3:82:7d:
9b:a2:e6:5c:dd:76:26:94:fa:5e:69:83:8f:14:2b:
dd:64:08:d0:98:8b:a0:d2:05:f8:fd:00:48:38:61:
d7:0f:74:d3:bd:ac:10:85:58:57:9e:a4:bd:85:47:
a7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:16:BC:82:75:23:3B:88:F8:DE:A5:29:63:13:B7:E3:9D:DC:4B:D3
X509v3 Authority Key Identifier:
keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3230322e3137332e31362e302f32312d3234203d3e203234323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.16.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:7c:d5:d9:94:c0:09:be:53:8e:c6:41:bf:bb:0a:b7:af:4c:
8d:c6:c0:4d:ef:54:b3:52:e4:ba:56:16:b7:38:e7:f9:64:2d:
9a:40:59:e3:31:0f:b8:3e:80:87:f7:cd:56:ac:94:c4:71:0d:
bd:cb:78:e1:f5:90:0c:bd:b0:c0:e1:ee:08:62:f0:6a:21:32:
43:0e:67:dd:d0:bd:a2:d4:ec:d4:c7:92:18:2c:af:80:5b:3c:
c8:36:73:bf:83:5f:e6:6c:9f:75:19:7d:e9:75:db:ce:b5:75:
0e:4f:2c:34:06:29:1c:78:40:65:90:86:56:83:9e:62:e4:33:
2d:91:3a:28:c9:3a:20:80:99:61:c9:46:5c:e1:cf:2f:cb:a5:
dd:02:6a:b2:ba:ac:0e:1a:e7:0d:46:80:72:35:37:23:96:7e:
8a:98:bf:a1:3f:07:d8:1e:07:48:5c:1f:69:27:03:5e:c4:f6:
b2:71:de:54:85:55:88:c9:60:38:f6:a9:5e:06:17:e9:60:98:
53:a4:64:cc:ca:9b:a9:77:69:7c:39:53:2b:c5:fa:60:e6:be:
0c:f7:65:3f:ee:18:a9:be:da:0b:7c:9a:57:4f:7c:b4:f5:8f:
6e:8c:1e:00:d4:58:88:e1:1d:c0:4d:7d:16:c5:8d:d0:68:0e:
d9:08:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:17 2025 by rpki-client