Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e382e302f32342d3234203d3e203338373539.roa
File: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier: oi7ul2eHrpJm6nKOP1YTFPaOySaj28haxt3SYYHzFYk=
Subject key identifier: E9:B9:0C:35:7E:B9:F2:10:0D:C6:1B:8C:B4:05:ED:E2:F8:D5:7D:0F
Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial: 3F3E1B44D4E8414946A52F85F1432C8A1CFC0AB2
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e382e302f32342d3234203d3e203338373539.roa
Signing time: Tue 16 Jul 2024 13:00:00 +0000
ROA not before: Tue 16 Jul 2024 12:55:00 +0000
ROA not after: Tue 15 Jul 2025 13:00:00 +0000
asID: 38759
IP address blocks: 202.180.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3e:1b:44:d4:e8:41:49:46:a5:2f:85:f1:43:2c:8a:1c:fc:0a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Validity
Not Before: Jul 16 12:55:00 2024 GMT
Not After : Jul 15 13:00:00 2025 GMT
Subject: CN=E9B90C357EB9F2100DC61B8CB405EDE2F8D57D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:cc:10:82:ac:40:6d:a3:d1:6b:31:7f:ba:
8b:79:d3:b8:1b:87:22:62:02:ca:ec:d9:46:d6:9b:
d9:f9:21:59:6b:22:e5:65:8e:78:75:bb:69:9d:8f:
21:e8:09:3c:35:c9:c0:7e:a5:24:9a:0d:4c:8e:c8:
fc:73:23:d2:af:a2:d1:f5:c0:3a:48:bc:fa:57:88:
b6:9f:fc:f2:4b:a1:00:4c:ef:17:65:ec:6a:c4:66:
d2:ec:ea:a3:5f:30:d3:1c:14:cc:4e:fa:5b:2b:39:
fc:5f:34:25:54:6c:ab:01:fd:60:73:4e:5f:60:7f:
79:5d:8c:fe:b1:18:50:ce:fc:4d:96:b9:07:49:f1:
d0:d6:36:64:42:2c:50:33:3b:91:63:06:c0:3f:d1:
91:ea:0c:bb:7f:6c:8b:f7:1e:f9:16:cb:18:07:64:
7f:0f:29:41:89:e0:1c:ad:da:cc:54:a5:2a:6d:57:
12:b9:0e:ee:8a:7e:ae:66:fb:f6:c9:17:40:be:f0:
eb:35:f5:55:e8:84:16:02:ea:6b:05:cc:1b:83:f7:
1e:be:14:9a:80:c0:00:6a:0e:3c:3c:ff:69:b9:ae:
96:2d:1a:45:e5:54:3e:a3:c0:ba:10:8b:51:00:e1:
64:f4:06:e7:49:26:4a:35:a0:9e:99:02:e3:76:cd:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B9:0C:35:7E:B9:F2:10:0D:C6:1B:8C:B4:05:ED:E2:F8:D5:7D:0F
X509v3 Authority Key Identifier:
keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e382e302f32342d3234203d3e203338373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.180.8.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ac:1f:82:62:d2:d6:b6:ec:2f:86:40:56:45:f3:d1:a0:28:
9e:08:da:e3:aa:71:51:71:3a:79:b5:f7:fd:e8:0d:d4:e1:bc:
e3:d8:a0:19:02:e4:f1:c5:f2:80:2d:04:11:a9:a1:19:85:d6:
b2:0b:27:21:c8:4f:19:69:25:26:fa:a0:cc:c1:8b:ef:e1:3a:
bf:40:6d:98:44:b3:14:ac:b9:db:a6:24:cf:0c:2b:0e:9f:d8:
f6:e3:68:07:1f:c4:61:49:8e:87:a9:8c:df:33:85:44:34:87:
cd:7c:6e:b3:1e:a5:75:28:3f:9c:83:c2:e9:68:6a:a9:ef:1b:
ba:77:36:99:c7:c0:8f:ce:6d:8a:53:ca:79:98:f4:97:c8:0d:
0f:46:97:e7:28:7b:1e:c3:7c:14:41:b0:0a:61:c3:8d:ab:11:
25:e9:6a:32:e3:e1:8e:4b:af:68:b4:89:fc:c4:10:d6:a6:47:
b3:ff:3d:74:6a:5c:a9:0b:e8:be:6a:5f:eb:9c:ca:43:15:2a:
27:f1:50:b0:b5:43:4a:6d:5a:d1:8b:66:33:b2:c2:ab:ca:71:
33:e8:9a:77:ee:86:37:a5:91:dd:a0:a7:5b:bb:23:37:c8:36:
0a:e2:5e:54:ca:ec:c6:f4:34:95:03:c2:1b:03:af:d0:79:97:
09:7b:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:12 2025 by rpki-client