Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa
File: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (raw, json)
Hash identifier: hhBshcm+EKul/rgjGB0vKGzYcVlcsuOhqTD6zWl1raQ=
Subject key identifier: B0:B4:93:41:4C:24:52:8B:7D:4F:47:E0:90:A9:3B:EA:AB:7A:CE:E9
Certificate issuer: /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial: 34296B3D459D3D5B6E445901CD255E92DC1289EE
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa
Signing time: Sat 10 Aug 2024 15:00:01 +0000
ROA not before: Sat 10 Aug 2024 14:55:01 +0000
ROA not after: Sat 09 Aug 2025 15:00:01 +0000
asID: 131775
IP address blocks: 202.74.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:29:6b:3d:45:9d:3d:5b:6e:44:59:01:cd:25:5e:92:dc:12:89:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Validity
Not Before: Aug 10 14:55:01 2024 GMT
Not After : Aug 9 15:00:01 2025 GMT
Subject: CN=B0B493414C24528B7D4F47E090A93BEAAB7ACEE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:ee:15:dd:7a:66:0a:55:49:4e:6a:7f:2f:
d3:c8:0f:72:4f:65:76:fe:5b:4a:f5:3e:04:9b:65:
f7:96:cd:ee:9d:ef:16:d8:f0:03:30:76:aa:24:30:
a0:53:ea:82:26:99:20:f4:78:29:29:45:97:9b:08:
9b:46:93:ee:c9:02:db:94:a4:ed:59:69:36:c5:11:
e6:1d:38:3f:d6:ad:f4:c1:fd:97:d1:48:65:f2:1c:
f2:79:e5:4b:4a:9e:5c:f5:a9:3c:17:28:c7:2b:79:
f2:98:aa:4a:24:41:a5:15:ac:fd:26:d0:24:53:71:
e6:bb:6b:17:8e:99:7f:10:f2:6c:b7:4d:d6:7e:09:
32:f3:db:74:83:cb:bd:58:ea:a5:81:ff:9e:df:04:
b5:1d:98:88:fe:f8:bc:62:05:79:24:e8:2c:ca:5c:
ba:96:6e:06:c7:ff:f5:1d:30:14:68:fa:86:ce:fb:
05:b4:48:e1:ec:f2:cc:f1:0f:0d:28:20:1c:db:ff:
2f:bc:f4:81:f2:15:c6:2e:c6:63:cd:e5:83:18:0f:
16:92:e4:9c:8e:d7:b1:d4:d3:f3:4c:d5:24:10:ba:
b9:b9:04:e2:5f:2c:54:04:ab:ae:13:ce:52:a4:7e:
30:b1:71:b2:b6:5a:fd:b2:89:57:ee:dd:ed:f6:14:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:93:41:4C:24:52:8B:7D:4F:47:E0:90:A9:3B:EA:AB:7A:CE:E9
X509v3 Authority Key Identifier:
keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.74.236.0/23
Signature Algorithm: sha256WithRSAEncryption
58:5e:b3:8d:b2:9f:5c:d7:a9:d0:fd:c1:98:82:de:5b:30:c2:
b8:74:53:44:07:6d:b6:43:0b:24:3d:a5:d8:74:00:f7:97:a1:
b8:9f:d8:cf:64:d7:3e:48:1f:db:58:31:09:96:3d:a0:77:0b:
e2:de:91:d5:b1:08:7b:e3:ec:22:66:c7:ca:54:cc:ad:61:a8:
70:ec:d2:dd:d4:0b:cb:76:73:9f:f1:f4:f5:4e:6f:41:7e:f3:
fd:e9:12:da:0b:cd:2b:b6:bf:a5:8d:38:fb:49:0e:94:4d:02:
38:d8:f6:e4:75:e2:43:cc:4e:22:38:73:b5:eb:df:41:e4:94:
96:9e:14:8e:62:b0:a5:63:6f:3f:c5:a5:79:3f:37:ad:8e:26:
af:bc:b3:fb:af:21:78:92:38:0d:11:5f:24:4c:ba:20:7b:b2:
f1:f0:e5:e0:f2:44:32:97:e3:01:27:ca:f2:32:65:64:17:37:
5d:ab:92:64:be:ad:7c:f4:22:cd:af:6d:97:b8:d3:56:8b:7b:
98:3b:53:f1:cb:29:7f:c4:26:50:0e:50:bf:84:1e:84:2f:7c:
90:8c:86:63:70:a3:8a:29:8e:ec:03:47:4f:cb:e2:02:96:95:
ed:62:65:f6:5f:71:11:d1:f2:79:79:fb:b5:7d:75:25:00:e9:
48:f8:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:31 2025 by rpki-client