Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36312e302f32342d3234203d3e203435333132.roa
File: 3230322e38312e36312e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier: dsLGBjwD67TiLUfkM7p5B4kAE5WI4zq1Pt7cOFKZ7wE=
Subject key identifier: 9F:05:1F:3F:8E:93:59:9C:C4:E9:9C:1B:47:80:6F:77:E4:B8:A2:0A
Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial: 0C7B1D2F4B256FB02443E6C30D7068AB89892F74
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36312e302f32342d3234203d3e203435333132.roa
Signing time: Tue 17 Dec 2024 08:34:28 +0000
ROA not before: Tue 17 Dec 2024 08:29:28 +0000
ROA not after: Tue 16 Dec 2025 08:34:28 +0000
asID: 45312
IP address blocks: 202.81.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:7b:1d:2f:4b:25:6f:b0:24:43:e6:c3:0d:70:68:ab:89:89:2f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Validity
Not Before: Dec 17 08:29:28 2024 GMT
Not After : Dec 16 08:34:28 2025 GMT
Subject: CN=9F051F3F8E93599CC4E99C1B47806F77E4B8A20A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:d7:4a:53:d9:79:54:c4:71:94:aa:47:86:
27:85:f3:8f:71:bf:1a:20:93:10:3d:f2:76:ad:a2:
a5:22:04:3b:28:0f:1e:c5:e7:16:72:51:8d:ef:5e:
c6:3f:f3:be:68:d9:c0:f1:72:06:9e:8c:91:ce:09:
2f:4e:43:3c:43:70:ae:c8:c5:70:e3:56:fe:92:f8:
6d:c1:c5:cf:08:3c:73:bc:96:92:22:9d:40:d4:41:
d0:d9:c4:d1:99:0a:fb:bf:8f:2f:f6:3f:86:0e:2d:
26:8b:a7:4d:0c:fd:67:a3:b0:70:5d:98:59:68:e4:
97:4a:64:5f:51:11:e9:1b:c7:c3:15:2f:8c:1f:a9:
d2:c6:21:55:c7:50:fb:1d:c1:8b:ae:13:0f:1e:00:
57:c9:73:86:6a:6a:b1:40:f7:cd:91:e0:7c:45:f0:
31:68:59:ee:a6:05:af:43:dc:b7:2c:ae:66:d6:b8:
a2:7f:76:02:13:ec:55:48:75:22:f0:fb:68:45:f9:
a5:c9:c1:c8:22:91:65:7d:ea:bc:26:02:dc:da:8f:
36:2f:14:82:b0:93:6b:a3:07:69:25:2e:12:31:37:
79:0a:20:e0:fb:05:dd:ec:4d:b9:78:62:88:12:fe:
ee:f3:76:1d:55:2e:af:4a:a2:1d:3d:14:79:65:bf:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:1F:3F:8E:93:59:9C:C4:E9:9C:1B:47:80:6F:77:E4:B8:A2:0A
X509v3 Authority Key Identifier:
keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36312e302f32342d3234203d3e203435333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.81.61.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:16:fc:f7:6a:14:7d:ae:3f:01:24:a7:c5:47:d3:1b:0b:75:
b9:4a:28:6d:7d:56:a5:81:dd:a2:56:5f:8c:7d:1a:41:07:16:
e7:96:27:6d:bc:2a:11:fc:4e:90:1b:f2:52:d3:e2:9e:d9:74:
2b:e9:e4:0e:3d:7a:d6:bd:6b:7c:a9:52:63:21:95:75:f6:a6:
c5:88:0c:9d:6f:1a:64:9c:95:1a:88:53:ac:36:ec:b9:4c:a7:
29:c9:84:16:c1:5f:9f:3e:12:74:fd:f6:10:32:90:f1:23:9e:
4e:d2:ea:13:37:97:b2:d3:f6:38:be:91:1c:1d:0a:ff:8e:d3:
5e:95:21:39:a7:33:28:7c:a2:0f:f3:1a:66:27:8b:7e:a2:f1:
80:f9:cd:62:33:a5:86:f7:ca:fa:33:c3:56:3e:0d:15:5c:12:
27:07:b3:23:c2:08:c7:c4:1c:21:df:b5:85:6e:ee:5a:c0:8e:
f1:42:c5:a4:57:12:02:bd:ac:58:e6:eb:04:97:db:a3:6b:e6:
b7:ca:6a:99:8f:9e:72:83:40:aa:5a:38:24:68:09:4c:59:4b:
1e:c5:de:9d:fe:95:d0:07:77:f6:34:6c:ac:22:6f:4a:8b:ca:
e0:90:f2:39:33:1e:a7:cf:3b:8f:54:5d:cd:87:70:26:b5:32:
85:bb:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:19:03 2025 by rpki-client