Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136312e302f32342d3234203d3e203138303539.roa
File: 3230322e34332e3136312e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: 2UnpU4AuI75iMoARi8f5r8oFliIuut1BjgsEAI4Eni4=
Subject key identifier: 3D:7E:6A:C0:4F:A2:A5:8A:86:A7:BE:4D:F2:69:B4:1F:84:66:A4:90
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 5F6DAD335848842CD61A70C2352EC82AE871D352
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136312e302f32342d3234203d3e203138303539.roa
Signing time: Fri 25 Oct 2024 04:00:36 +0000
ROA not before: Fri 25 Oct 2024 03:55:36 +0000
ROA not after: Fri 24 Oct 2025 04:00:36 +0000
asID: 18059
IP address blocks: 202.43.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6d:ad:33:58:48:84:2c:d6:1a:70:c2:35:2e:c8:2a:e8:71:d3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Oct 25 03:55:36 2024 GMT
Not After : Oct 24 04:00:36 2025 GMT
Subject: CN=3D7E6AC04FA2A58A86A7BE4DF269B41F8466A490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:5e:22:d8:a5:1d:16:39:b7:5c:80:8c:9b:
b9:8a:d8:e2:7b:a1:28:1e:a2:59:ca:71:38:9e:b5:
fd:d3:f7:1d:04:6d:b3:d5:c1:87:fc:ba:0b:bc:31:
1b:04:1d:cc:84:cb:6d:19:ba:1a:56:b8:6e:fe:a0:
b9:6c:da:95:83:4e:29:f2:c9:cd:42:c3:42:2c:43:
6e:a7:51:24:0c:c4:15:44:24:f8:53:14:58:86:68:
10:a6:79:e3:b6:3f:dd:bc:02:34:35:64:ab:5d:76:
a4:b3:b2:d2:d9:0c:9e:a0:42:ca:64:0b:b5:83:5a:
25:35:2c:61:68:56:8b:01:dc:fa:22:58:02:7d:31:
1b:b8:f4:b0:ba:c6:94:55:a4:83:1c:19:86:28:9b:
b5:63:d8:61:60:da:c2:a3:07:d3:a6:ee:b4:b4:74:
02:a5:66:b2:56:38:83:c2:87:0e:ec:60:71:70:8e:
44:53:84:2f:33:b9:5b:73:a4:e2:8a:c7:87:3a:0a:
3e:bb:ac:21:12:b5:20:80:3b:0b:35:25:74:ed:eb:
ac:31:41:f3:08:5f:ab:d8:21:43:ec:5a:bc:cf:2d:
68:49:c6:43:be:54:7c:66:96:f0:83:ac:fa:98:f1:
18:88:29:b9:87:f6:30:60:5b:0f:5e:12:ae:3a:f6:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7E:6A:C0:4F:A2:A5:8A:86:A7:BE:4D:F2:69:B4:1F:84:66:A4:90
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136312e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.43.161.0/24
Signature Algorithm: sha256WithRSAEncryption
22:89:eb:96:f4:ee:e3:91:3c:56:7b:46:30:f8:fd:45:50:41:
b7:4c:3a:d7:5c:65:15:54:ff:aa:11:e0:1a:47:14:a9:fd:ee:
54:8c:e8:b8:ee:c6:ea:4b:68:82:3d:d4:2d:63:f8:82:d4:d7:
92:84:c9:2e:30:9d:4b:7c:50:62:18:4a:c3:c6:da:76:00:cf:
77:54:5f:19:90:38:f4:a7:c4:be:a2:40:8e:c9:29:46:ee:7b:
f5:1e:c8:45:e6:48:d1:0c:83:94:75:b4:de:4f:e2:d8:6b:9b:
6f:6c:e7:b5:38:fe:19:13:0c:62:a0:7d:c1:52:1d:1e:f5:2c:
06:20:05:6a:19:cb:6b:df:59:a9:83:ab:3f:3d:b9:84:64:0c:
a8:38:1f:0d:77:78:83:05:1c:28:d4:c8:b2:34:27:94:dc:a9:
b5:a6:b2:ce:cc:5a:91:c1:e1:f5:7a:a1:01:02:c6:48:5d:15:
55:3a:37:b0:84:7f:9d:36:a4:39:18:22:e5:42:d5:6f:61:d3:
7f:f3:c2:24:3c:e4:0d:e6:f5:07:94:a4:9d:5c:50:1e:a9:6f:
a9:6b:2d:74:f6:9c:c9:9a:f2:cf:c3:4c:41:9c:84:67:ca:bc:
6f:de:65:52:0c:d7:7f:80:15:4d:20:15:26:bc:f9:34:bf:b6:
3d:ef:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:33 2025 by rpki-client