Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131332e302f32342d3234203d3e203435333235.roa
File: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier: iAl8NmWNJlmHejJ5sIMuSWgzBreFnv6E6ju9qJHMnsY=
Subject key identifier: 24:D5:B6:7A:BC:8D:4D:CE:09:8E:2C:62:69:39:7C:DA:84:90:80:5D
Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial: 79C15DDFD9DC0EC56A4EEF545F1392424460D97A
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131332e302f32342d3234203d3e203435333235.roa
Signing time: Tue 05 Nov 2024 08:00:02 +0000
ROA not before: Tue 05 Nov 2024 07:55:02 +0000
ROA not after: Tue 04 Nov 2025 08:00:02 +0000
asID: 45325
IP address blocks: 202.43.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c1:5d:df:d9:dc:0e:c5:6a:4e:ef:54:5f:13:92:42:44:60:d9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Validity
Not Before: Nov 5 07:55:02 2024 GMT
Not After : Nov 4 08:00:02 2025 GMT
Subject: CN=24D5B67ABC8D4DCE098E2C6269397CDA8490805D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:db:94:5c:08:e4:d3:88:4d:97:56:46:8f:
51:9d:49:2f:95:a7:e7:6e:55:b4:e8:09:8f:d0:86:
9c:09:40:cf:d8:0b:82:ee:76:69:d8:ee:7c:6b:cc:
02:d2:da:dc:35:b8:92:2f:43:1e:4c:df:ce:17:80:
20:94:f2:5b:ed:1e:c1:d7:ae:e9:52:c8:16:cf:db:
f9:34:bc:20:41:f0:54:48:b3:1c:e5:16:95:ac:67:
dc:ad:4c:9d:3f:76:90:f7:f1:05:c6:f6:f1:49:2d:
8d:2b:03:70:ee:d1:da:56:d0:90:67:87:a3:df:dd:
71:03:13:2a:a0:aa:b3:89:21:cf:d9:40:2c:59:91:
2f:94:24:50:07:b9:81:9e:25:73:eb:34:dc:b5:87:
eb:3a:e2:20:d4:2f:1f:85:14:69:69:23:e1:a9:88:
2c:13:ed:6c:2f:9f:2d:19:59:7e:da:f7:a2:93:f4:
95:b6:3c:19:ab:42:eb:2e:bf:6e:5e:ca:7e:0a:8e:
4d:42:05:47:a5:8b:ad:f6:31:8c:ae:b7:f7:30:12:
f4:05:7b:da:a6:7d:ae:e5:8e:c6:ef:42:6f:a0:f0:
09:d6:4d:d3:97:9b:43:6b:fe:49:67:a7:b9:ef:1e:
76:7c:11:83:0d:85:be:86:cc:ae:41:e9:2f:3f:6d:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D5:B6:7A:BC:8D:4D:CE:09:8E:2C:62:69:39:7C:DA:84:90:80:5D
X509v3 Authority Key Identifier:
keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131332e302f32342d3234203d3e203435333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.43.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:67:63:d2:ec:1c:e8:b1:a7:24:f1:2e:0f:ef:15:21:a5:3a:
3d:85:53:fe:a0:9c:1d:2c:61:42:40:ae:b5:eb:be:51:4d:75:
33:9e:a2:6a:e9:e8:8d:6b:18:f2:79:31:3c:9f:5e:03:01:d3:
cf:9c:68:a0:7f:db:20:de:95:2f:5d:29:6b:5e:33:5c:21:cc:
2c:12:4f:11:59:d9:26:8f:9f:11:33:b4:10:c0:97:2e:f3:10:
71:38:05:6f:34:33:6b:73:a8:ce:87:e2:3d:a0:03:c9:56:a6:
87:b9:80:f0:ad:95:e3:22:48:02:4b:ec:72:7d:0d:8f:28:16:
37:13:f8:74:6a:cb:93:50:ff:40:24:3c:56:33:77:8d:a8:81:
52:71:ff:0a:b6:22:94:d8:6b:c2:fc:f2:de:dd:40:5f:6b:61:
49:88:6d:81:2e:22:8e:33:48:12:36:fb:3f:47:86:14:0d:91:
e6:b5:e2:7b:a0:7d:51:70:e1:e2:8a:c6:21:28:d5:d1:66:79:
cb:92:39:27:ec:2f:a2:73:16:9f:91:cd:1b:92:45:98:b8:e8:
69:5c:d4:aa:cb:4d:c3:84:d6:24:40:88:6a:9d:67:c7:2a:68:
76:9b:3a:76:ed:8f:0f:00:07:0c:b1:a2:c1:b1:fe:af:64:1d:
b3:8d:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:21 2025 by rpki-client