Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa
File: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier: tyd06R+4HHVBIJKdI6hJNZndkBBBI3S4VRSvra/Gtys=
Subject key identifier: 10:8E:1B:F6:22:1D:68:91:C4:62:53:C0:C4:24:38:42:A9:9A:B6:96
Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial: 5B1B237EE86D017B2A1A5034233E0E54394F423E
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa
Signing time: Wed 21 Aug 2024 13:00:00 +0000
ROA not before: Wed 21 Aug 2024 12:55:00 +0000
ROA not after: Wed 20 Aug 2025 13:00:00 +0000
asID: 4382
IP address blocks: 202.93.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1b:23:7e:e8:6d:01:7b:2a:1a:50:34:23:3e:0e:54:39:4f:42:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Validity
Not Before: Aug 21 12:55:00 2024 GMT
Not After : Aug 20 13:00:00 2025 GMT
Subject: CN=108E1BF6221D6891C46253C0C4243842A99AB696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:50:e8:9e:fb:08:40:3d:d1:06:29:a2:75:
3a:cb:d2:06:be:bc:9b:75:78:a3:e1:8f:3e:c2:eb:
2d:c0:18:1e:c2:61:f9:81:45:b0:c8:05:2e:45:ff:
a4:11:46:1c:b1:94:cf:68:c6:f3:87:98:52:e2:23:
a8:36:64:92:3c:65:52:0b:55:62:59:10:9d:88:38:
c7:74:8e:a4:f6:a6:50:fa:15:6f:e8:ea:e7:c9:95:
1a:85:a7:ef:1f:3d:b1:53:a7:e5:40:be:67:1b:71:
27:63:27:4f:f9:e4:92:61:44:f8:de:a3:20:b6:8f:
ab:6b:ec:66:eb:3c:a4:fa:21:f7:36:12:08:3b:f7:
19:c4:4e:77:4c:00:6f:78:d5:65:8d:f4:41:f6:35:
41:60:5f:c0:66:cc:e4:b6:d7:e3:c4:08:16:3b:af:
c1:fe:1f:43:ef:33:47:70:ef:43:38:7e:e2:da:73:
6a:c4:7c:18:d5:55:cd:d5:53:2a:ae:c6:f4:0d:81:
92:60:c3:a8:6c:5e:38:ee:ed:dc:5a:64:7a:f2:58:
4d:47:c2:2b:5e:82:98:95:6e:58:4d:91:76:12:75:
fc:ea:b2:6b:7c:cc:04:2b:df:93:51:66:ea:8a:0c:
7d:1a:2b:84:0a:86:61:1d:aa:52:ab:1b:c1:84:c5:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8E:1B:F6:22:1D:68:91:C4:62:53:C0:C4:24:38:42:A9:9A:B6:96
X509v3 Authority Key Identifier:
keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.140.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ec:47:b9:26:2e:39:82:04:f6:2a:bb:f4:69:8c:fa:90:b8:
5a:d4:37:ca:d0:41:df:4f:c0:e4:ef:3a:f1:89:c9:71:22:bc:
87:c2:36:c1:c4:48:61:1d:a5:66:7c:8a:f9:ae:70:b3:50:e1:
32:c4:19:d9:58:36:0a:9e:32:d1:da:42:55:6b:d1:95:86:63:
18:14:49:00:5e:b9:a5:1a:db:60:17:a8:e2:d6:7d:84:61:f3:
29:11:e2:37:95:72:7c:0a:d7:e5:29:db:ed:c4:d3:50:b2:71:
0b:ae:b0:10:31:27:ad:fe:f5:8e:c6:e8:a9:76:5a:ce:b9:c7:
b9:5e:a8:94:10:5d:74:b7:4b:8c:b3:32:af:d7:58:1c:bb:18:
d2:70:05:4c:ad:c9:12:7f:05:e3:cd:e6:80:c6:1c:23:1a:61:
32:52:2c:2c:d8:9f:d2:98:d0:6b:84:19:08:a1:4f:a6:79:60:
b6:cd:61:83:ef:06:dc:3c:c3:75:9f:c6:f4:29:58:3b:e2:e9:
81:02:35:d7:d6:73:2c:d5:98:aa:ec:11:16:f7:d9:05:d0:0b:
99:0c:95:2b:79:76:bb:b9:00:75:07:cc:fc:31:92:b1:36:db:
36:34:cb:67:ee:3f:8e:48:24:f3:9f:55:7d:31:d9:c1:2a:61:
6d:3c:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:39 2025 by rpki-client