Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3139322e302f32312d3234203d3e203233363739.roa
File: 3230322e3136322e3139322e302f32312d3234203d3e203233363739.roa (raw, json)
Hash identifier: ZBrXKoV3PwDLYU+Y1U1a6xXeDobsncJa17lUOF4JM3Y=
Subject key identifier: BE:41:D4:EF:43:70:E2:1F:E8:9C:74:1A:1C:24:19:B9:A9:6A:1F:2F
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 22B2CF51235B0535EA156FCCD935E484704F7898
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3139322e302f32312d3234203d3e203233363739.roa
Signing time: Fri 09 Aug 2024 06:00:47 +0000
ROA not before: Fri 09 Aug 2024 05:55:47 +0000
ROA not after: Fri 08 Aug 2025 06:00:47 +0000
asID: 23679
IP address blocks: 202.162.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b2:cf:51:23:5b:05:35:ea:15:6f:cc:d9:35:e4:84:70:4f:78:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Aug 9 05:55:47 2024 GMT
Not After : Aug 8 06:00:47 2025 GMT
Subject: CN=BE41D4EF4370E21FE89C741A1C2419B9A96A1F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:f8:b8:d4:0a:6a:27:2d:f3:8b:1c:f2:67:
b9:d3:6e:bc:30:2d:3d:c2:67:11:52:37:7e:60:59:
f9:40:ad:cd:06:3a:44:26:be:ce:ca:53:d9:8c:b5:
d4:4a:bc:65:bf:f9:ef:7e:0d:46:30:68:83:e1:27:
8c:32:89:57:0e:55:58:0b:b8:71:33:b9:de:3f:4e:
3f:bc:df:7a:d1:98:e1:47:bb:32:15:a4:19:e8:dd:
d0:d5:f2:d4:c7:9d:31:3e:3c:d9:d9:27:1e:1f:33:
2e:4c:dd:1a:fa:e9:39:57:a0:29:3a:da:59:e5:e4:
04:cd:d3:56:72:01:fa:c8:34:f1:03:28:c8:53:ac:
ef:22:70:6a:1c:52:91:e0:3d:50:19:fb:ce:0f:82:
c4:70:19:18:29:5c:ff:b1:a7:a8:1a:bc:92:be:60:
49:f6:4a:74:c1:66:cd:a6:03:b6:11:86:24:d5:72:
04:81:a9:e5:f0:89:39:d6:1f:b8:22:75:aa:b7:76:
b2:6c:5e:44:ee:9f:ec:0d:d9:ef:26:00:51:00:8d:
e6:d0:d1:83:14:69:ea:ec:a6:0c:75:22:b3:3c:f0:
e2:0d:54:c8:1e:c5:19:b0:e6:2c:ab:31:95:87:49:
a4:9a:83:48:d3:f7:f8:b3:4e:25:29:d1:e8:62:98:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:41:D4:EF:43:70:E2:1F:E8:9C:74:1A:1C:24:19:B9:A9:6A:1F:2F
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3139322e302f32312d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.162.192.0/21
Signature Algorithm: sha256WithRSAEncryption
47:9a:e4:d1:fa:c2:a6:d7:9d:ca:cf:f8:5f:d0:c3:2f:84:be:
46:8f:72:51:f1:83:20:63:6d:41:6d:c3:2b:48:07:b0:b8:52:
a6:bf:10:2c:44:b2:98:1f:11:1f:b9:50:e6:d7:c7:62:28:0e:
f4:20:f0:a3:d2:04:bd:ff:7d:c4:92:0e:41:9f:14:38:5c:6a:
66:6b:c6:7e:bd:89:3d:2c:34:c4:34:c7:36:dc:7e:c5:bb:c3:
5f:5c:17:74:bd:94:d8:2b:3a:8a:b0:1b:59:d6:61:b0:b1:95:
98:86:85:e6:28:2c:ea:88:cd:81:4f:1d:ed:6a:b7:74:3f:4b:
01:33:06:dc:f5:d9:f6:bc:0c:72:ee:86:d9:4f:77:2a:ba:11:
64:25:3d:44:7d:6c:0d:cd:e1:7a:9f:5e:33:5a:c4:df:26:a2:
37:1f:36:a4:49:85:87:b6:07:59:0e:de:89:77:5c:0a:5b:40:
26:0b:3f:8a:2a:21:d3:56:67:63:38:a4:2b:c2:49:3a:63:4a:
fc:ad:8e:1b:d1:4c:6e:7c:7a:79:0d:cd:39:b0:cc:3a:40:f9:
38:d7:d5:40:4a:c9:ef:5d:16:5a:79:2b:6d:22:14:b1:e4:a2:
21:26:67:8e:49:c6:39:07:76:cc:ea:9e:6e:10:57:99:85:ee:
2e:a6:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:36:49 2025 by rpki-client