Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e203535373031.roa
File: 3230322e37332e32352e302f32342d3234203d3e203535373031.roa (raw, json)
Hash identifier: HqD4IjlAAB7WAeJhjOQpOZ/rP4anUbI2BgXFyU4mlMc=
Subject key identifier: E5:6D:07:6A:2B:CA:BE:9A:1B:B3:64:C6:BA:C8:14:5D:81:AF:63:69
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 52894081690E435B8F4DE7DC861C029FAA832DA9
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e203535373031.roa
Signing time: Mon 05 Dec 2022 01:00:01 +0000
ROA not before: Mon 05 Dec 2022 00:55:01 +0000
ROA not after: Mon 04 Dec 2023 01:00:01 +0000
asID: 55701
IP address blocks: 202.73.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:89:40:81:69:0e:43:5b:8f:4d:e7:dc:86:1c:02:9f:aa:83:2d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: Dec 5 00:55:01 2022 GMT
Not After : Dec 4 01:00:01 2023 GMT
Subject: CN=E56D076A2BCABE9A1BB364C6BAC8145D81AF6369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:f3:a8:79:3c:72:14:5e:2e:4d:c0:05:1f:
45:f4:99:b9:00:c1:5d:64:67:67:29:32:f2:01:cd:
c2:24:56:70:1a:ab:f1:97:43:94:de:f1:af:3e:f1:
4c:2c:25:b2:4a:84:8e:3a:c0:f6:46:84:83:c2:31:
67:dd:eb:87:32:ac:38:f0:1c:e6:45:00:19:d1:11:
c0:a7:b0:23:e3:ed:84:e4:19:8d:43:c2:5e:29:0a:
4f:59:98:09:cd:f0:b8:81:26:83:84:0a:15:14:32:
c0:ee:d4:9d:b0:85:c3:01:1c:47:f6:27:13:8d:7a:
9a:bf:c9:c6:8e:f4:e9:7c:fc:f4:d9:99:54:c3:1e:
a1:6b:39:31:3c:49:f3:f3:83:86:35:2d:76:3b:8b:
7b:32:fe:73:08:b6:67:cb:4d:c2:6a:61:90:95:7c:
6c:54:fb:9c:08:97:d6:68:87:bc:d0:c1:1a:cf:e5:
66:b2:6c:39:7d:cf:ff:3e:78:e0:f9:f7:e0:e5:b4:
be:5f:e1:12:0a:17:70:96:39:f8:20:f7:d6:d1:ce:
9f:2d:0c:73:62:c0:71:ba:91:b6:fc:4c:3e:83:81:
1e:92:f4:d2:ad:aa:97:80:4e:90:5b:35:d1:87:45:
83:f5:c6:0e:4d:27:46:32:26:7c:5a:dc:fe:b7:51:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:07:6A:2B:CA:BE:9A:1B:B3:64:C6:BA:C8:14:5D:81:AF:63:69
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3230322e37332e32352e302f32342d3234203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.73.25.0/24
Signature Algorithm: sha256WithRSAEncryption
be:4f:ef:6a:80:3b:eb:f0:52:2d:d3:2f:b6:39:8a:19:8e:17:
df:f4:f3:e8:74:5d:9f:6d:2f:2f:0c:7b:3a:3c:64:88:72:72:
dd:86:d0:6d:de:23:3e:64:c3:17:5a:04:50:e7:23:f7:37:7f:
89:10:1e:d0:25:9a:7f:4a:5a:fb:66:45:33:2a:b7:2c:fc:c6:
34:56:8c:45:e4:3b:e2:84:7b:6d:91:17:c0:29:31:51:5d:8e:
65:95:4c:3b:9a:75:a9:4f:ca:94:c8:48:43:19:f4:9f:24:53:
c6:cb:c5:71:12:5f:c3:ad:86:c5:06:c5:a8:a4:20:24:5b:d0:
97:e0:d8:c7:ca:bf:39:57:6f:60:ea:f1:e6:7a:bf:4a:1e:5a:
2b:9a:71:99:f9:75:2f:82:85:90:58:ab:94:1a:75:a9:7e:3d:
e2:05:fa:92:bd:3e:48:ed:af:fe:88:b9:19:94:15:20:de:26:
1c:0a:94:4c:67:bc:70:1a:0c:5b:95:70:83:4a:6a:ae:3a:2c:
72:cc:07:0b:11:a6:8d:e8:af:3c:64:60:7a:34:96:38:8b:c6:
b8:c6:81:bd:b5:88:0c:63:8a:cd:46:ce:c4:8f:5f:28:2e:74:
56:ca:51:8f:bc:b1:62:7b:f1:91:44:95:2f:b8:5d:d2:8a:50:
78:99:4d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:04 2025 by rpki-client