Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa
File: 3230322e37382e3139392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: zlaZySTqe/qZHtr80DTpiy6Ee7YC0yDdt3zYXr/Ev7w=
Subject key identifier: BA:40:9C:E3:D5:3F:4C:45:A4:C7:1D:98:E7:FD:0B:1C:16:59:21:E6
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 17F6CE8102D696259574273EFDB7A6E621F7E42E
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa
Signing time: Fri 25 Oct 2024 04:00:34 +0000
ROA not before: Fri 25 Oct 2024 03:55:34 +0000
ROA not after: Fri 24 Oct 2025 04:00:34 +0000
asID: 18059
IP address blocks: 202.78.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f6:ce:81:02:d6:96:25:95:74:27:3e:fd:b7:a6:e6:21:f7:e4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Oct 25 03:55:34 2024 GMT
Not After : Oct 24 04:00:34 2025 GMT
Subject: CN=BA409CE3D53F4C45A4C71D98E7FD0B1C165921E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:32:74:95:1e:7c:7c:c4:bb:7d:3c:ac:7e:
d3:5f:d4:eb:0d:aa:ad:b5:a2:9f:53:50:18:6b:50:
0c:ae:d3:b0:3c:59:b1:1c:f5:04:08:49:d3:99:b1:
fe:34:ce:6d:c2:0e:ba:a8:49:59:d3:79:ef:4e:f1:
88:41:e5:df:16:0d:b8:5a:44:9e:2c:a6:17:b4:90:
1c:ef:fc:8d:42:3a:4e:79:9b:1c:9c:91:14:42:32:
72:b4:d3:7d:4f:af:df:42:69:a6:f0:40:50:28:42:
0c:ab:75:51:f2:b8:51:d8:fb:7c:1a:46:a8:7d:bc:
38:44:d7:b2:ae:95:39:61:14:d3:28:52:bb:ea:79:
53:46:df:e8:95:04:a3:c9:91:03:fd:73:0e:6a:8c:
77:ff:2e:6f:88:06:83:ad:59:80:a1:b7:33:b7:87:
c3:ef:f8:7d:7f:06:fb:46:4e:de:ec:cd:85:04:20:
47:dc:16:4f:bb:e8:98:1f:ea:93:22:71:d3:33:64:
1e:2d:09:2e:97:73:8d:7d:3b:37:2d:aa:cb:04:94:
26:7b:bf:25:0a:72:5d:01:9a:fc:09:f6:db:5c:90:
fc:35:3a:b1:c9:92:28:3b:9b:3f:bb:73:8e:be:50:
ea:11:b0:97:16:41:28:61:4a:3e:c6:8e:ec:26:83:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:40:9C:E3:D5:3F:4C:45:A4:C7:1D:98:E7:FD:0B:1C:16:59:21:E6
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.78.199.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f2:2a:bf:1b:e0:13:92:a0:dd:cc:25:a0:98:7d:a5:5d:47:
61:e6:f0:4d:fe:c7:ca:fa:ab:b6:db:7a:e6:af:01:06:71:77:
7f:7e:ff:88:6b:c2:67:71:e6:8f:23:27:0d:c0:6c:aa:f6:9e:
3a:d8:fa:6d:89:32:22:a8:c5:f1:86:79:07:18:17:1e:5f:95:
76:a8:e3:23:12:33:7c:26:56:b8:62:63:f8:7a:5f:a1:bd:a8:
75:c9:4c:03:ea:28:17:60:ff:60:3b:5a:81:48:6f:4f:23:3b:
2c:89:e3:39:49:24:11:9b:09:33:0e:aa:1c:ca:44:85:54:af:
6c:ef:b5:57:a9:47:72:59:c2:37:d9:55:a5:3d:fd:16:b1:61:
db:29:15:bd:6f:db:74:79:19:bd:d6:9a:c4:9f:bb:52:3d:13:
3e:16:0f:80:24:02:66:dc:59:87:bd:4e:b8:95:96:ca:b5:a8:
9d:cb:82:07:ba:93:f7:af:0f:2b:20:12:bf:30:d1:34:bf:ea:
86:a8:c8:b0:8c:cc:fd:24:25:43:90:f6:3b:eb:2d:e9:31:8f:
68:a3:be:e9:e7:b9:36:b1:1e:2b:da:90:60:2f:93:48:d3:41:
92:85:ee:fa:17:c4:d6:4a:2f:a6:47:ce:04:28:29:cb:4d:d3:
c5:0b:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:35 2025 by rpki-client