Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa
File: 3230322e38312e35372e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier: /Pz+lvmjrreEoN5O3O3l4iYKH60T1aclG96qf/GdciY=
Subject key identifier: C2:1B:8E:20:63:A4:04:AF:0E:9D:15:17:09:8E:CF:15:62:EC:3B:FB
Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial: 28736486A9B14A1E2196478E3DAE03FF0B5E55AD
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa
Signing time: Tue 17 Dec 2024 08:33:14 +0000
ROA not before: Tue 17 Dec 2024 08:28:14 +0000
ROA not after: Tue 16 Dec 2025 08:33:14 +0000
asID: 45312
IP address blocks: 202.81.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:73:64:86:a9:b1:4a:1e:21:96:47:8e:3d:ae:03:ff:0b:5e:55:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Validity
Not Before: Dec 17 08:28:14 2024 GMT
Not After : Dec 16 08:33:14 2025 GMT
Subject: CN=C21B8E2063A404AF0E9D1517098ECF1562EC3BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:93:9c:7b:c3:92:17:03:1a:6d:a1:2e:89:1e:
bf:cf:5e:e1:35:af:fa:28:c4:9a:8a:63:52:0f:b2:
ed:4c:31:ef:a8:d6:cf:cf:8a:90:b1:c1:3d:98:6a:
91:59:3d:74:b9:92:8a:84:22:6c:f2:72:38:0a:c1:
48:f7:88:4c:0c:95:09:97:ca:9b:89:7b:bf:1c:cd:
07:5f:29:ce:9c:99:ae:15:4b:e1:50:9f:34:93:80:
06:24:44:93:6e:a4:c6:d9:34:8d:ba:03:ea:86:82:
38:0f:b0:36:0e:89:d4:6a:86:38:ab:fd:f0:10:96:
ed:72:7a:3c:10:d9:dd:f1:fb:0f:f1:7f:10:00:53:
40:46:20:fb:d8:6c:a4:ca:d2:d2:48:b0:16:67:74:
fb:5a:51:dc:ee:4a:1a:0a:80:d9:03:04:f7:77:e7:
f4:39:71:8e:7f:cf:bc:33:20:3c:ce:8d:bf:59:ae:
95:13:32:47:8d:92:13:60:bc:23:41:97:05:f6:89:
92:d0:5f:d8:15:68:b4:2f:12:14:61:0d:b0:f1:97:
e4:c6:ca:e2:80:d9:73:6b:00:77:09:d1:a7:92:18:
cb:31:9c:9f:7e:ce:b2:92:2f:df:fd:ec:b8:d1:5d:
68:04:61:97:eb:b8:e4:35:d6:46:55:32:b0:f0:59:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:8E:20:63:A4:04:AF:0E:9D:15:17:09:8E:CF:15:62:EC:3B:FB
X509v3 Authority Key Identifier:
keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.81.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:92:93:25:72:1b:76:ad:66:c0:36:0e:5d:c0:5e:e1:d7:06:
3e:c9:4c:a4:38:80:07:1f:e5:d7:be:01:08:27:d6:5b:66:04:
0e:25:c7:8f:5d:82:3b:9e:ba:d7:7e:31:cc:0a:67:fe:b2:38:
84:c6:bf:04:a6:a8:c3:79:f7:0f:e2:42:fb:c2:44:42:ea:b9:
cc:ca:92:62:5f:26:2e:f5:dd:12:10:61:3d:a2:b9:ed:0b:00:
3a:e0:37:c6:b5:2e:8e:b2:3f:40:7d:1e:90:0d:8f:86:bf:48:
4d:c3:08:28:85:bc:e5:91:82:92:8d:a5:41:03:de:66:52:3d:
9a:ef:97:32:ae:c4:ca:a4:fb:72:5d:42:b1:58:69:cb:5d:1c:
8c:24:7b:8f:a0:95:37:32:e1:79:7b:88:3d:d7:3f:04:e9:76:
7b:cd:9f:d0:25:ae:65:59:11:a6:1b:21:87:07:6a:cc:46:86:
87:ea:17:49:1d:79:49:ba:0e:31:cf:df:de:d6:3d:ff:c7:7a:
9f:a5:a2:26:a3:62:dd:1c:df:d4:f5:ce:ca:a9:1e:1a:3d:11:
32:75:07:97:8e:fe:0c:92:26:98:a4:57:b0:ca:84:86:07:ea:
6d:53:ca:8e:db:18:57:0e:09:2e:ba:4c:9d:58:53:50:26:d8:
bf:9f:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:19:03 2025 by rpki-client