Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa
File: 3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier: 9tWn1tUw0lnAE7QTSe9gFD7FXQ8Wg/JsMqpIZEwXrcQ=
Subject key identifier: E0:8F:16:7D:D2:0F:97:7D:A6:1F:35:2B:FC:61:0B:D0:0C:0D:8C:04
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 28B2AFD79129F58698EE7C4890769D19A59EF716
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa
Signing time: Sat 14 Sep 2024 03:34:21 +0000
ROA not before: Sat 14 Sep 2024 03:29:21 +0000
ROA not after: Sat 13 Sep 2025 03:34:21 +0000
asID: 138077
IP address blocks: 203.84.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b2:af:d7:91:29:f5:86:98:ee:7c:48:90:76:9d:19:a5:9e:f7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Sep 14 03:29:21 2024 GMT
Not After : Sep 13 03:34:21 2025 GMT
Subject: CN=E08F167DD20F977DA61F352BFC610BD00C0D8C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:a5:6a:81:a5:ed:77:26:c6:d2:0b:da:0c:
e3:a8:27:de:99:17:61:83:23:99:0a:fc:5f:3b:9b:
6f:2d:87:77:bf:f3:02:b3:a2:03:7b:f1:a6:68:d5:
13:25:0f:7d:85:51:49:57:7a:82:d6:89:7c:46:0a:
e7:35:86:a2:1c:7c:8b:42:9a:d3:b6:32:b3:b4:c1:
ee:49:67:25:6c:62:b1:f0:24:25:89:7e:ee:6b:7f:
ca:31:6d:3b:e9:6e:68:11:82:3c:87:56:93:1c:cd:
8b:04:28:fe:c7:3b:69:20:b0:dd:60:fb:05:d3:93:
2e:f3:48:39:53:95:e4:8e:7d:82:9e:1d:85:1b:13:
d7:1e:6a:fc:e7:a0:98:23:67:68:8f:4a:eb:93:05:
c1:68:f1:ad:d7:2b:1c:f4:81:fa:65:57:b3:f3:87:
ae:2b:bb:bf:15:28:bc:a0:e9:e0:83:c7:40:66:0e:
a4:6a:ac:44:8d:fd:8c:02:9f:7b:a3:d2:fc:a5:57:
4f:94:b6:cb:d8:af:c9:2e:e4:a5:bb:3c:c4:0b:ef:
6d:18:28:3c:44:7e:44:f6:a4:23:61:1e:e0:ae:34:
d4:95:dd:b5:a4:7b:b8:9e:dc:f0:cf:77:46:e7:c4:
25:d6:c5:23:27:91:ff:ca:8b:a5:4d:3a:77:d8:57:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8F:16:7D:D2:0F:97:7D:A6:1F:35:2B:FC:61:0B:D0:0C:0D:8C:04
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.84.137.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:5a:ba:5c:16:42:9b:38:30:8f:1b:65:74:62:12:20:9e:99:
46:d6:5e:33:8e:b5:9a:3b:c1:70:5a:08:4f:fe:65:9c:6c:5e:
d7:68:61:b5:28:99:ef:5b:c1:2e:48:69:a7:97:b1:d0:29:a8:
00:f9:e6:5f:46:e1:a2:af:1e:35:d2:d6:fd:c8:7a:4f:21:3f:
51:02:a7:35:16:ec:0f:59:77:28:4e:77:ea:1e:3d:ad:43:c1:
2e:53:08:0d:10:38:be:65:c1:70:b3:10:08:96:7e:ff:98:d4:
3f:54:3a:2b:5c:ba:d9:a9:6c:ac:e5:73:fa:1f:9f:d3:ed:86:
4e:69:e7:e7:97:5f:91:09:4d:e9:21:63:93:0d:c3:86:0d:03:
39:22:7b:0d:00:ff:27:40:1f:41:e7:ae:27:07:16:23:ec:18:
ad:44:f9:48:76:fd:ee:6e:66:0d:fe:d2:4e:11:8c:b6:91:2d:
ca:6c:3c:c7:93:cc:d0:0b:60:36:7d:21:12:8a:19:6b:bc:7c:
09:01:71:63:08:9a:f6:65:f6:24:42:68:b3:4a:30:b4:ea:b5:
5b:88:6a:ee:99:81:7b:1a:ed:00:38:e3:e6:2d:1d:29:b7:85:
40:5e:09:d5:e1:71:da:4c:da:84:73:24:75:cc:91:ec:d3:c9:
ae:67:8c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:35 2025 by rpki-client