Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3230322e31302e35392e302f32342d3234203d3e20313336313139.roa
File: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (raw, json)
Hash identifier: RhfOeKNZ4j1KvALyW4SxaRw/kBv+Dgu0smuwmiknx1Y=
Subject key identifier: D1:94:B1:B9:69:BD:52:68:D4:D8:50:FA:B5:C2:58:AC:32:EE:47:2E
Certificate issuer: /CN=21AC220B77A77D0516BC73B4C29C8363DD00911B
Certificate serial: 55C65C38E76FC2CD1540D9D11F300A8D27BDE536
Authority key identifier: 21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3230322e31302e35392e302f32342d3234203d3e20313336313139.roa
Signing time: Wed 18 Sep 2024 08:00:01 +0000
ROA not before: Wed 18 Sep 2024 07:55:01 +0000
ROA not after: Wed 17 Sep 2025 08:00:01 +0000
asID: 136119
IP address blocks: 202.10.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c6:5c:38:e7:6f:c2:cd:15:40:d9:d1:1f:30:0a:8d:27:bd:e5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21AC220B77A77D0516BC73B4C29C8363DD00911B
Validity
Not Before: Sep 18 07:55:01 2024 GMT
Not After : Sep 17 08:00:01 2025 GMT
Subject: CN=D194B1B969BD5268D4D850FAB5C258AC32EE472E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bb:6e:de:57:12:da:76:59:be:b5:bd:52:7d:
d5:dc:16:00:1b:09:d8:36:7c:9e:17:f8:32:01:62:
14:f9:25:ef:64:eb:1b:68:a4:32:e1:0d:5b:ed:56:
78:e1:09:1f:bc:dd:12:4d:b0:7f:c3:0e:a5:17:40:
40:df:07:b5:65:22:15:04:82:75:93:59:13:b5:95:
f5:cf:c2:36:5d:51:91:96:ec:69:30:b1:84:8f:04:
f1:f6:5a:b0:73:7e:cb:22:55:ad:b0:05:16:93:b1:
12:50:45:ad:14:33:5c:8d:5e:b5:c1:79:a5:99:75:
e7:e5:64:f7:58:b7:92:3b:e2:68:54:79:e4:6a:65:
2f:e4:92:da:98:5a:13:be:d9:32:b5:d3:26:cd:39:
4e:7a:55:7c:32:fb:a4:81:a9:5d:82:63:b4:c7:2d:
e8:17:1b:dd:a4:14:17:4f:fc:b4:b1:d5:06:db:5b:
06:d1:8b:79:c5:6f:8f:01:12:0a:92:05:50:b9:3c:
a4:2b:d6:e9:18:de:e0:17:fe:77:5d:23:6f:1e:3f:
77:b8:4c:24:ff:f8:05:fe:27:bc:13:75:1c:2f:11:
0f:0b:6a:8f:09:b1:ed:29:98:12:22:f1:cf:ab:99:
23:84:91:62:a2:d0:ab:d9:8b:96:70:dd:21:fe:21:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:94:B1:B9:69:BD:52:68:D4:D8:50:FA:B5:C2:58:AC:32:EE:47:2E
X509v3 Authority Key Identifier:
keyid:21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3230322e31302e35392e302f32342d3234203d3e20313336313139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.59.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e8:94:c2:3c:2b:82:fb:ed:72:61:d4:ff:ce:86:ef:57:38:
e0:d0:5b:b4:c6:f9:b9:98:91:9d:14:b1:39:63:d2:7b:3f:b0:
57:68:fa:b3:d1:4c:4b:dc:1e:fc:3f:ce:5b:ce:8e:4a:ec:25:
cc:e3:fd:f0:c7:07:ab:f6:7b:1c:8a:6d:a0:46:ff:e3:3c:69:
47:54:d0:6a:1b:a2:89:f3:f8:06:a8:b3:de:1c:ba:2b:89:de:
94:c9:83:17:ae:93:94:d8:06:59:a2:f7:b6:91:25:5b:f1:7b:
44:e8:75:6a:51:3e:4b:0b:80:14:ce:f8:be:dd:50:fb:26:30:
58:94:da:ac:ba:6c:b7:9c:9f:42:26:bf:40:f4:8f:2a:33:5b:
d0:28:10:71:95:1b:76:d4:7f:7e:91:ba:88:3d:04:29:95:09:
e2:06:d1:e7:e8:b8:58:13:a1:7f:0e:6e:1b:37:38:23:cf:e9:
4d:90:84:d8:ea:15:0b:ac:5f:93:72:63:c6:e7:a8:5a:9b:21:
fa:77:50:23:f7:20:6b:b1:e2:1b:ab:7a:88:2c:ef:5b:fe:2f:
72:0a:12:38:41:68:4a:eb:ee:a3:08:66:07:14:80:a1:2a:f6:
01:62:5d:b2:34:2a:9b:61:41:a5:67:69:fb:92:d8:87:10:5a:
7c:c7:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:06 2025 by rpki-client