Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31392e302f32342d3234203d3e20313339393831.roa
File: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (raw, json)
Hash identifier: zszkuvV/DGJtyi38SwI+iyz6P0zwyMAcKOGOc8uu7vs=
Subject key identifier: CF:A3:63:67:53:95:ED:E7:6B:B4:E8:57:C4:D5:B7:40:26:0C:45:CE
Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial: 2A091214C3A386552C820084CFCB7BB673B315ED
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31392e302f32342d3234203d3e20313339393831.roa
Signing time: Sun 08 Dec 2024 02:00:01 +0000
ROA not before: Sun 08 Dec 2024 01:55:01 +0000
ROA not after: Sun 07 Dec 2025 02:00:01 +0000
asID: 139981
IP address blocks: 202.57.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:09:12:14:c3:a3:86:55:2c:82:00:84:cf:cb:7b:b6:73:b3:15:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Validity
Not Before: Dec 8 01:55:01 2024 GMT
Not After : Dec 7 02:00:01 2025 GMT
Subject: CN=CFA363675395EDE76BB4E857C4D5B740260C45CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:bb:01:9a:4d:ec:f5:75:24:51:29:1f:24:
cd:ac:2c:c2:40:5a:ca:80:79:8f:ec:b6:c6:78:69:
ea:6c:c1:8d:51:de:cf:b3:3b:13:a5:c9:d0:18:75:
d7:4c:77:09:78:ef:f4:23:44:29:dc:ed:52:70:92:
e2:0c:58:32:96:93:99:98:40:c8:f7:e2:53:7e:e6:
2f:80:63:fe:be:46:10:c5:04:b6:aa:51:ea:37:a5:
71:b5:09:71:7c:b9:b7:a6:25:9d:fc:87:73:cb:9d:
b4:bb:b9:b2:5a:ad:4d:6c:d4:0f:2f:98:24:df:82:
80:63:4b:9c:9c:c4:19:92:04:a3:69:01:84:f3:96:
b2:92:ac:f6:5e:12:e8:db:f6:2c:4b:39:1c:90:cf:
ed:91:a4:06:92:35:b6:59:73:10:7c:b9:aa:9f:6e:
b7:c6:39:b0:35:e9:11:8b:11:5d:f7:3c:19:e2:09:
97:5f:db:db:c0:e7:83:15:2e:48:8b:fb:36:54:0c:
39:11:8c:59:53:bb:ba:ae:ad:3f:0f:69:94:0a:2d:
bd:54:b5:73:6a:83:47:cc:65:ce:c7:53:e9:d4:0e:
75:23:3f:13:2b:c3:42:c0:eb:45:0a:dc:f8:73:bf:
d8:bc:4c:77:15:a2:ab:db:73:0d:da:9d:72:06:5c:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:63:67:53:95:ED:E7:6B:B4:E8:57:C4:D5:B7:40:26:0C:45:CE
X509v3 Authority Key Identifier:
keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31392e302f32342d3234203d3e20313339393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.19.0/24
Signature Algorithm: sha256WithRSAEncryption
30:45:4f:b5:a4:1d:2c:41:04:ab:39:68:16:d8:bc:a3:5d:72:
31:3b:e6:75:ab:ae:17:d1:92:3c:54:5e:e1:83:65:76:5b:da:
b8:57:f5:43:3b:13:b4:e6:7c:8d:06:eb:f7:d5:c4:14:df:ce:
fc:97:86:8f:5d:2e:4c:7b:4e:87:28:71:fa:8b:ce:c0:4f:93:
df:35:f5:41:57:66:72:44:75:3c:ea:be:a1:0b:c8:01:24:91:
92:06:79:f2:fc:a7:a3:54:d2:6c:36:9b:d5:94:df:f3:24:68:
99:cf:e7:ce:bd:9c:a0:ef:15:25:34:ab:17:0d:9e:59:5d:82:
05:db:da:2b:83:f4:ff:55:c1:42:b6:68:1b:07:b1:ad:4b:1d:
52:67:11:ed:02:5f:9e:97:51:d4:10:68:2b:b2:f7:0e:21:46:
a6:a5:50:cd:20:00:c4:98:14:70:29:42:18:83:2d:3d:da:03:
b8:d7:1c:c5:cf:6f:f3:65:85:4b:d9:87:67:54:f1:a8:41:dc:
b0:e7:0d:a7:5d:1c:ba:49:5b:fa:da:19:cb:69:d5:b8:ee:dc:
7c:90:d0:56:f9:fd:f5:26:e1:24:4f:fb:51:fd:40:38:e8:de:
11:5e:1a:da:7a:d9:73:8d:88:da:83:18:d5:d8:b0:9b:d8:0e:
6f:bb:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:14 2025 by rpki-client