Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32322d3234203d3e203338313433.roa
File: 3230322e3136392e3234382e302f32322d3234203d3e203338313433.roa (raw, json)
Hash identifier: ieREG17z1FJf5c79pcGMihrLYDZDNWROdZ7WxWoG+es=
Subject key identifier: 10:C5:EA:77:D8:E2:AA:2A:14:33:7D:A1:E3:FC:D7:6B:7A:C7:7E:E9
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 0E823B24708EF75787DDE7A1635E43EF253E228D
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32322d3234203d3e203338313433.roa
Signing time: Tue 18 Jun 2024 11:00:00 +0000
ROA not before: Tue 18 Jun 2024 10:55:00 +0000
ROA not after: Tue 17 Jun 2025 11:00:00 +0000
asID: 38143
IP address blocks: 202.169.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:82:3b:24:70:8e:f7:57:87:dd:e7:a1:63:5e:43:ef:25:3e:22:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Jun 18 10:55:00 2024 GMT
Not After : Jun 17 11:00:00 2025 GMT
Subject: CN=10C5EA77D8E2AA2A14337DA1E3FCD76B7AC77EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:8a:69:b9:50:7d:a5:00:77:ad:81:66:6d:
1f:e4:60:5d:90:37:b5:d5:d7:32:e6:cd:b1:31:37:
8e:a8:71:1a:d2:9e:36:fc:4e:2d:94:85:96:c5:d4:
fe:a5:39:3a:b8:e2:fa:3c:66:9a:9c:c2:6d:78:a5:
84:db:b7:f3:ef:55:bd:e9:12:93:a3:77:04:22:63:
70:58:c9:46:9d:89:a0:dc:30:73:a0:a5:31:70:7a:
89:df:da:fe:c0:92:61:4c:af:23:89:63:76:11:d8:
7b:db:85:09:4c:21:ad:4f:ba:3b:51:f6:e0:36:f9:
06:96:11:e9:d2:ea:98:e8:3f:7c:b7:51:f6:62:a2:
25:80:83:a2:d5:4c:44:5c:bb:90:7b:c7:3f:a1:c1:
c7:0f:a7:12:4b:66:e7:c2:2d:10:09:9e:9f:7c:e6:
c4:f7:6b:fd:15:1f:ce:6d:8e:67:7e:f3:82:4c:d6:
cd:fc:11:a6:9e:52:f1:60:e6:6c:d4:e9:56:58:2f:
45:68:18:14:20:7f:fb:a2:ed:b0:c3:f1:d1:5b:28:
15:f1:6a:35:4b:19:c8:1d:33:e9:b2:99:e0:13:c9:
ba:28:0a:c0:dd:de:81:c8:81:98:9f:43:0e:c9:e9:
a5:92:a9:49:07:b2:cc:3a:24:ac:36:40:36:27:17:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C5:EA:77:D8:E2:AA:2A:14:33:7D:A1:E3:FC:D7:6B:7A:C7:7E:E9
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32322d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.248.0/22
Signature Algorithm: sha256WithRSAEncryption
49:df:fa:b1:19:1b:e0:41:8a:91:9b:f7:e8:e1:28:32:f6:32:
a0:b8:76:8d:b5:a1:db:ab:e7:fc:ad:01:a7:80:98:e3:47:bf:
14:80:af:80:d3:9e:95:63:08:b5:2e:52:b7:21:24:ea:84:c7:
0f:36:13:92:e6:b6:3b:f1:63:2b:a1:3e:77:46:59:08:64:38:
95:bc:44:45:b7:ae:12:e9:f5:e1:50:cb:70:96:c5:fa:9c:45:
b0:64:c3:df:0b:b3:0b:f7:db:ce:df:df:e6:3e:3b:74:73:d7:
f5:b0:8c:a8:21:e4:50:a6:20:88:b8:2d:d5:3b:e4:eb:8f:7d:
67:61:a2:d9:44:38:da:c0:4a:20:ee:94:88:0d:4d:6b:2b:b6:
f0:e8:8f:ae:f2:1e:ab:d5:e8:44:b8:a9:57:06:3a:76:6b:32:
bf:13:d9:f1:68:68:75:21:52:81:d0:97:be:32:69:ab:42:ce:
28:b3:04:f2:e6:c3:1a:8f:90:d2:72:5b:37:90:a4:9b:dc:37:
d7:0c:d7:18:f6:5b:a9:72:83:0c:06:9c:14:c0:75:21:ac:58:
7d:e3:76:b8:8c:ba:ef:8a:bc:dd:07:26:1d:90:84:60:d2:ac:
17:d3:9c:09:c4:03:24:6f:b0:6a:b7:9b:40:60:a0:d4:53:68:
2a:b1:1a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:44 2025 by rpki-client