Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139322e302f32342d3234203d3e203138303539.roa
File: 3230322e37382e3139322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: vW1fwIRtuc0srciwa9O2jcgD/yQwGnxOIpAYd3T2MSs=
Subject key identifier: D7:F7:C6:AC:3A:10:E8:27:D0:8E:2C:66:21:20:BE:31:94:08:91:19
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 3DAB8E0C01EF135F7E805FF608121B16CB35D395
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139322e302f32342d3234203d3e203138303539.roa
Signing time: Fri 25 Oct 2024 04:00:34 +0000
ROA not before: Fri 25 Oct 2024 03:55:34 +0000
ROA not after: Fri 24 Oct 2025 04:00:34 +0000
asID: 18059
IP address blocks: 202.78.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ab:8e:0c:01:ef:13:5f:7e:80:5f:f6:08:12:1b:16:cb:35:d3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Oct 25 03:55:34 2024 GMT
Not After : Oct 24 04:00:34 2025 GMT
Subject: CN=D7F7C6AC3A10E827D08E2C662120BE3194089119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:93:99:c6:2e:1d:17:b0:71:c3:bc:e4:3f:67:
7c:90:b6:c3:99:05:ce:7e:42:be:1f:d4:71:4b:7e:
01:bb:e7:aa:7b:83:55:2b:c0:9c:d4:bc:ab:e7:fc:
6d:83:e2:fd:9e:ad:cd:43:f2:c5:64:fa:05:23:89:
2e:cf:db:94:e6:bd:b3:a3:28:0c:a8:f3:a4:24:d1:
15:83:b1:a7:00:71:7e:06:93:15:86:8e:b3:3b:6f:
5a:44:69:8e:b1:74:67:96:17:e6:af:49:7a:42:61:
e1:cd:80:b6:13:3d:42:20:65:7d:69:ab:7a:bf:d2:
0a:1a:72:b1:e3:c0:9a:5d:44:ef:b5:70:d9:73:d1:
d2:86:48:d7:23:81:ca:d2:71:2c:54:2e:39:ec:a1:
0b:c0:19:71:9b:64:50:58:99:7a:5e:10:03:fa:6c:
3a:64:9d:db:68:e1:7f:36:3e:4a:c9:95:7f:70:c7:
6d:b1:83:10:5c:ac:1d:9e:0f:cf:84:ae:93:06:95:
d3:32:9b:be:c8:b3:83:24:86:d3:48:e4:ae:56:a0:
f1:de:ab:07:08:ac:e7:de:ed:c9:97:00:24:ef:4c:
8c:89:71:8f:d4:83:d3:dc:3f:5c:16:df:f5:41:92:
94:eb:16:1d:7d:d2:c3:81:8b:81:2f:13:0c:4f:11:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F7:C6:AC:3A:10:E8:27:D0:8E:2C:66:21:20:BE:31:94:08:91:19
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139322e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.78.192.0/24
Signature Algorithm: sha256WithRSAEncryption
33:75:1f:0f:85:83:cc:57:b3:fb:1f:ad:9a:77:17:20:10:d6:
a9:6f:44:14:76:90:11:ec:93:8d:b5:bf:3f:ee:88:bc:3a:9f:
fd:79:d1:af:ba:0a:a6:13:e6:a1:09:3a:d6:1e:71:3f:10:c2:
1f:79:04:e5:dc:9b:67:dd:67:fd:1f:c7:a1:06:cc:d8:dc:ba:
d5:de:11:22:c2:83:dd:c7:a2:0f:ed:74:f8:c9:05:b9:25:0a:
ed:db:2b:a9:62:83:f1:7b:fc:b8:db:2a:f1:1f:39:44:85:7b:
ec:c5:a7:91:c3:69:e1:e5:f3:eb:84:1a:13:37:b4:b8:6e:3b:
9e:e1:83:61:9c:ba:8c:b6:d2:0d:e7:fb:e3:d9:b4:15:81:6c:
25:54:4a:04:c9:60:bc:31:f8:be:a6:df:65:e9:c8:e7:47:3a:
78:f7:74:6d:f5:07:38:37:be:f8:4e:31:28:be:3b:fd:97:22:
80:1f:05:c9:90:f9:78:37:22:05:55:31:a6:8e:8d:79:57:44:
51:2c:07:de:31:77:3f:98:38:c7:e7:83:b0:d4:d9:76:fc:ee:
37:07:77:75:b2:3c:cc:0f:0b:23:56:5b:4f:6a:52:97:87:48:
14:2b:6e:b5:b9:bd:39:cd:56:c2:67:fa:7f:70:d7:cf:68:81:
84:fa:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:35 2025 by rpki-client