Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa
File: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (raw, json)
Hash identifier: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=
Subject key identifier: B6:D3:28:97:BB:88:DD:34:DA:5E:56:7A:C1:C1:DF:47:95:AB:A0:90
Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E
Certificate serial: 4ACAB781C77894A995FD5F0324A3F0D108A5222E
Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa
Signing time: Mon 30 Dec 2024 10:00:02 +0000
ROA not before: Mon 30 Dec 2024 09:55:02 +0000
ROA not after: Mon 29 Dec 2025 10:00:02 +0000
asID: 152076
IP address blocks: 202.47.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ca:b7:81:c7:78:94:a9:95:fd:5f:03:24:a3:f0:d1:08:a5:22:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E
Validity
Not Before: Dec 30 09:55:02 2024 GMT
Not After : Dec 29 10:00:02 2025 GMT
Subject: CN=B6D32897BB88DD34DA5E567AC1C1DF4795ABA090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:c1:09:c7:5f:13:ff:66:dd:73:02:99:1a:
a7:b8:1a:60:e5:15:d7:16:c6:62:64:e5:96:5e:09:
40:7d:65:e6:31:ad:a3:a7:df:ac:d0:71:a4:3a:cf:
fe:13:39:97:25:93:71:47:6b:15:43:04:28:bc:25:
7f:ab:fd:4b:4e:52:30:b2:8f:7e:f9:f8:0f:3b:e1:
03:93:8f:76:1c:1f:20:e1:60:d4:8b:86:82:2d:85:
f4:33:05:1e:19:c1:94:bf:1c:8a:9c:b4:3c:c1:5d:
10:a4:b3:05:5f:ec:72:f0:9f:67:d1:34:81:d9:c9:
9f:64:52:ea:8d:c7:e2:cc:33:e7:d1:32:34:fd:46:
f5:f0:3b:c3:4d:ad:37:a8:aa:85:5b:68:b5:f9:4b:
28:a1:84:a2:72:5c:40:70:f7:67:be:7b:14:45:dc:
f1:e8:3a:78:5a:03:25:15:75:43:7a:ef:57:24:81:
5b:8c:4c:b6:34:54:d9:0e:8d:a0:17:52:29:ce:e1:
d8:eb:5d:02:80:21:0d:f0:73:d0:11:6a:eb:cf:a2:
1d:0a:2b:6e:1a:a7:bf:47:4d:77:03:c4:95:31:71:
a7:ea:64:62:1d:53:92:ab:b4:f3:9a:c2:af:b7:2e:
a8:30:11:7e:d8:e5:b0:ce:31:93:e8:f3:ae:35:2d:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D3:28:97:BB:88:DD:34:DA:5E:56:7A:C1:C1:DF:47:95:AB:A0:90
X509v3 Authority Key Identifier:
keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.160.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bb:07:ce:ee:72:7f:06:bc:99:9a:a2:c4:77:23:1a:b1:fe:
c2:f5:1b:14:5a:93:3d:db:d4:e3:93:fb:e6:70:97:d8:a0:44:
91:33:c8:4b:3e:2d:e5:d5:e5:7c:77:5a:3d:f2:51:fa:99:5b:
fc:a0:8f:b6:03:11:95:cb:8a:a6:2b:27:07:50:a1:91:6a:f3:
f1:50:c1:8a:7b:0d:15:6b:b0:57:ca:9d:a4:38:7a:2b:d2:bd:
10:9d:19:b1:0d:56:20:93:db:a6:a1:b2:50:c5:f2:0e:73:85:
71:0d:c8:49:8d:18:b1:b1:5b:d9:35:90:4d:13:68:55:11:40:
5e:23:41:5c:80:84:d5:f4:f4:88:ec:bb:3e:62:27:31:f8:69:
33:b4:c8:24:55:e9:98:b7:51:14:7c:84:1d:d8:60:81:9b:c5:
60:39:8a:08:d2:c5:96:5b:17:09:d3:7a:45:e8:2e:0a:99:3d:
0b:1a:78:14:f6:43:8b:95:72:fe:89:0f:8e:0a:bf:eb:8f:b3:
52:82:7f:49:2c:a6:a2:aa:05:91:02:d1:36:1d:f2:d3:67:8f:
3a:e9:c1:7a:fa:fd:59:c8:42:94:61:f3:00:36:05:ae:03:80:
38:d1:6a:45:98:0e:04:73:c0:3c:32:ac:33:d8:dd:38:53:f1:
af:f3:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:16 2025 by rpki-client