Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233382e302f32342d3234203d3e203138303539.roa
File: 3230332e3133342e3233382e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: rqD3cRsG+Ca/49kK9yKZg33M5/km08TPJp1nnN2niI8=
Subject key identifier: B6:A1:87:21:A4:AA:B0:C8:0D:DE:A3:3C:0A:69:AB:05:B9:33:42:C0
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 0372E60A74DB7E03705326816513B6CB55AC44DA
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233382e302f32342d3234203d3e203138303539.roa
Signing time: Fri 25 Oct 2024 05:00:01 +0000
ROA not before: Fri 25 Oct 2024 04:55:01 +0000
ROA not after: Fri 24 Oct 2025 05:00:01 +0000
asID: 18059
IP address blocks: 203.134.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:72:e6:0a:74:db:7e:03:70:53:26:81:65:13:b6:cb:55:ac:44:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Oct 25 04:55:01 2024 GMT
Not After : Oct 24 05:00:01 2025 GMT
Subject: CN=B6A18721A4AAB0C80DDEA33C0A69AB05B93342C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:55:ef:2f:07:0e:e2:8a:35:99:de:d8:01:
61:94:d8:08:61:2e:0f:16:f4:58:c3:1e:44:cd:43:
46:cd:c1:29:44:4f:15:09:79:ae:35:9e:95:60:c5:
ca:d8:65:10:f0:57:93:97:99:be:77:f9:9c:ec:4a:
7a:8b:bf:51:fa:c6:7b:2e:da:86:1a:29:f3:39:2c:
11:f8:db:8a:c0:66:26:55:1a:f5:01:9e:16:e3:25:
5c:1f:77:ac:85:fe:6c:1a:f0:37:2b:ae:49:86:5f:
c3:2e:23:2d:ca:02:ba:1d:d9:49:d4:12:72:e2:fc:
61:a9:b4:42:86:62:2e:33:74:fe:51:7f:13:3c:cd:
61:31:de:8f:ff:28:5d:18:97:3d:ad:0b:cc:0a:f9:
f3:1a:e8:e1:36:d8:46:5a:74:09:df:28:a2:5a:59:
a7:91:9f:8b:29:67:ca:8f:78:e7:32:d7:a2:40:00:
f5:4e:3d:ef:53:84:73:59:38:f1:ad:af:2e:9a:a2:
87:6f:ea:e2:2a:b7:e9:48:40:f7:06:d4:b4:1b:7a:
3e:aa:0a:2e:3f:17:2f:6b:65:d5:51:4b:37:69:79:
cd:45:74:05:5d:77:1a:e0:ac:c0:f1:b4:41:f3:42:
cf:b5:4a:21:15:4b:cd:c6:a6:24:78:09:32:12:b2:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A1:87:21:A4:AA:B0:C8:0D:DE:A3:3C:0A:69:AB:05:B9:33:42:C0
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233382e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.134.238.0/24
Signature Algorithm: sha256WithRSAEncryption
56:23:6b:17:55:83:54:da:db:a7:16:33:52:81:67:4b:43:c6:
3a:b9:d6:42:02:86:6e:88:c4:69:99:7d:ae:f2:9e:2c:ba:c6:
5c:51:04:05:c0:fc:7a:2e:c3:bc:c4:24:1c:6f:a4:3a:14:bd:
e9:b5:d1:da:44:8e:54:cb:ea:ae:42:fb:27:f6:96:4a:d6:85:
b9:18:ba:f7:73:7f:d4:9c:e0:46:6c:59:83:4f:c3:6f:9e:21:
56:8b:1b:f0:64:84:df:73:ea:42:ae:35:8e:98:ed:e9:e7:dd:
e7:83:46:1b:69:b7:d9:d8:a4:c1:98:98:d8:c3:30:3b:81:64:
03:5c:61:5d:8d:b2:de:17:d2:a3:be:e7:90:e2:ce:c7:76:d0:
4f:b5:09:63:d0:28:e6:d4:62:22:77:8d:f9:fa:92:6f:5b:75:
60:77:24:ce:57:92:e7:83:52:60:31:92:26:87:1e:32:22:ca:
67:d1:1a:f4:6e:86:76:4e:9a:9e:49:b3:cf:01:7b:40:9f:44:
2f:5d:eb:f9:af:4b:b4:42:a9:30:38:47:bb:fb:f9:de:14:d8:
5d:c5:80:53:78:60:98:d4:8d:93:64:53:3e:fb:f8:34:af:cd:
0d:db:69:dd:4f:26:68:81:8b:e0:0a:db:29:16:ad:ed:e6:87:
04:ed:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:09 2025 by rpki-client