Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa
File: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (raw, json)
Hash identifier: /KzEuAJHbJBmL5pgo4HQUQfG2vh0jJ3hOFNjN0Pvcz8=
Subject key identifier: E0:63:12:05:6F:A5:7F:5B:D3:FE:40:F3:A7:8D:88:80:3E:DD:92:F2
Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1
Certificate serial: 042448CA80FD2C24FBFD1E04D37F8C596B3D6519
Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa
Signing time: Fri 13 Dec 2024 08:00:34 +0000
ROA not before: Fri 13 Dec 2024 07:55:34 +0000
ROA not after: Fri 12 Dec 2025 08:00:34 +0000
asID: 152045
IP address blocks: 210.79.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:24:48:ca:80:fd:2c:24:fb:fd:1e:04:d3:7f:8c:59:6b:3d:65:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1
Validity
Not Before: Dec 13 07:55:34 2024 GMT
Not After : Dec 12 08:00:34 2025 GMT
Subject: CN=E06312056FA57F5BD3FE40F3A78D88803EDD92F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:37:85:b2:48:1c:dc:ba:7d:07:ad:e8:dd:
af:9e:5c:74:b0:8c:90:b2:38:2b:fa:50:31:4d:b8:
c6:4e:cc:00:cd:81:01:6c:c1:d1:a8:97:65:63:c0:
91:84:e5:36:8d:2e:e4:a5:48:b2:8c:7c:cd:ee:59:
2a:0a:6c:49:e7:27:c6:27:03:cd:4a:7b:76:e8:53:
1b:26:db:dd:0d:4a:14:86:d3:8a:a9:2a:e8:80:a2:
46:96:00:f9:a4:2f:ca:b5:3a:72:cb:d1:fe:83:f2:
cc:b3:23:2d:34:5a:ea:63:30:76:f2:e9:cd:38:8c:
61:78:13:48:44:48:58:4e:2d:25:91:87:47:6f:77:
06:b2:36:a3:7a:a3:eb:76:00:61:d8:63:94:73:96:
1b:db:6c:83:30:15:1b:36:96:32:b2:18:69:f6:63:
fb:94:13:2b:ef:da:b4:0a:75:47:5a:08:ec:57:99:
6a:f5:d4:7e:5b:d6:5e:c2:85:d0:cf:41:e2:e5:b3:
0c:f3:f0:6b:5e:be:20:59:28:91:c9:19:6c:f7:35:
2d:e5:ab:7e:bb:45:6a:ee:e6:35:4f:1c:13:16:08:
3b:de:ad:f3:66:96:b3:15:9f:c1:1f:f8:cb:10:a7:
bf:6d:5e:e9:04:62:34:67:0c:1e:8b:d3:9f:f0:18:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:63:12:05:6F:A5:7F:5B:D3:FE:40:F3:A7:8D:88:80:3E:DD:92:F2
X509v3 Authority Key Identifier:
keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c2:2e:26:64:bf:8e:5c:82:3a:37:5c:58:22:8c:1c:fa:9d:
41:6a:15:de:39:68:34:d1:25:d1:ca:bc:a7:99:51:48:b0:22:
57:17:56:bb:96:30:1f:61:53:94:be:29:97:22:e0:fe:a9:cc:
22:43:a5:99:5d:13:43:8e:ef:56:64:d3:29:b3:f2:64:39:bd:
51:1d:de:cf:95:8a:78:7f:05:df:73:a6:98:4c:46:8f:53:40:
ae:b8:9e:b6:05:60:69:1a:2d:83:0f:1e:4d:87:5d:41:03:5e:
ff:b8:12:33:bc:ff:17:6d:a3:63:f6:42:13:d6:3d:11:2e:2d:
80:4f:15:c3:d9:59:48:fc:06:db:01:31:5e:63:3c:13:91:f4:
3e:0f:4e:fc:bc:18:58:47:27:40:5b:be:41:00:d2:f4:84:cc:
81:38:c0:4e:01:66:0a:8d:c6:80:cb:e5:3a:fc:bf:ed:4a:88:
4a:85:88:a7:7f:a3:12:3d:5a:7d:22:27:1f:73:c2:6a:42:52:
e0:86:a0:af:dd:fd:3f:73:42:ba:cf:53:82:49:02:7f:e1:a2:
14:1a:45:40:e2:7e:16:ff:73:84:58:fd:d4:02:10:02:aa:b3:
30:36:38:1a:e4:92:7f:38:8c:2a:6f:07:fe:5b:46:ee:03:84:
1f:4c:d7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:21:43 2025 by rpki-client