Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31302e302f32342d3234203d3e2034343334.roa
File: 3230322e3135342e31302e302f32342d3234203d3e2034343334.roa (raw, json)
Hash identifier: ZpeBe7mFPzRy0Xq+EOYdgnsyG4slFk56sszTgA3jwV4=
Subject key identifier: 04:09:3C:65:B0:B8:84:EF:8E:CC:1E:F6:F1:A3:18:3A:D2:61:09:B8
Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial: 4726238B965726339197F19AD035D2D09305995D
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31302e302f32342d3234203d3e2034343334.roa
Signing time: Wed 21 Aug 2024 11:00:52 +0000
ROA not before: Wed 21 Aug 2024 10:55:52 +0000
ROA not after: Wed 20 Aug 2025 11:00:52 +0000
asID: 4434
IP address blocks: 202.154.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:26:23:8b:96:57:26:33:91:97:f1:9a:d0:35:d2:d0:93:05:99:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Validity
Not Before: Aug 21 10:55:52 2024 GMT
Not After : Aug 20 11:00:52 2025 GMT
Subject: CN=04093C65B0B884EF8ECC1EF6F1A3183AD26109B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:1d:1e:01:50:87:76:3b:06:02:58:82:d4:
59:71:5f:83:b2:95:77:06:51:8d:7b:ac:7b:29:3b:
7c:86:98:50:09:a2:39:8e:d8:56:15:e6:b7:e2:55:
91:5e:4e:e5:4e:38:a5:3b:ad:26:48:2f:a1:e9:50:
48:23:6a:5a:5d:0e:b0:f8:b8:65:9e:40:6c:d1:f2:
71:f2:14:1a:0a:f9:33:75:24:05:8d:c9:27:32:fb:
5b:83:59:9b:db:7a:a5:ad:54:b0:b5:ed:11:1c:5b:
49:30:1e:fc:44:4b:db:cf:18:44:b5:26:cd:bc:d1:
b6:5c:d9:d8:c9:d3:27:2a:dc:08:0e:42:14:a1:42:
63:8d:d4:75:f0:3b:37:85:be:02:76:8c:0f:63:f5:
56:60:66:bc:e0:fa:da:d9:28:bb:43:bd:31:0e:ab:
32:99:54:19:d7:41:42:f5:71:a6:e3:89:3c:32:95:
2c:45:fb:89:7d:51:28:8b:f5:42:f7:ae:0e:49:9f:
e4:1d:68:5f:52:14:a0:32:10:01:28:1c:7c:aa:65:
76:80:47:c0:e3:9b:6e:31:c0:07:17:b0:ff:5f:07:
43:f1:8a:2e:e2:af:b4:c4:47:72:6f:72:4c:81:d7:
63:79:8d:0b:3b:3a:6c:4c:67:49:4f:ee:42:bf:07:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:3C:65:B0:B8:84:EF:8E:CC:1E:F6:F1:A3:18:3A:D2:61:09:B8
X509v3 Authority Key Identifier:
keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31302e302f32342d3234203d3e2034343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c9:69:2f:f1:3c:50:cc:4f:fe:8c:90:b6:f4:3a:05:fb:11:
7a:3b:35:f9:05:bd:6f:e4:a2:53:1a:69:50:9a:5b:3d:ec:09:
27:62:5e:2f:d8:24:04:c7:07:e4:9c:6c:80:45:b4:d2:a0:12:
41:01:61:79:78:5c:be:80:eb:d6:cf:b2:c8:19:66:7d:94:f6:
27:c9:de:50:a0:d7:4b:21:18:b3:71:1c:4a:9e:c4:c1:f2:0f:
e8:bb:82:ca:38:2c:b6:dd:7b:d7:12:88:88:78:41:bf:da:dc:
4d:50:96:d4:de:44:28:d1:53:3e:d2:b2:f5:52:94:81:52:7e:
b2:c4:82:52:37:f1:be:6b:dd:ee:fa:bf:bd:34:d5:d5:70:e7:
f2:35:da:1f:d4:a4:5f:b6:a3:d9:55:59:0e:d3:b9:d1:fa:12:
ea:5e:6d:d3:1a:bb:9b:57:de:43:f8:0f:9b:47:ec:3f:f4:36:
27:bd:fa:94:d7:44:59:ec:00:7f:58:3f:a1:b3:43:ef:40:bf:
28:22:c5:8e:38:51:78:8c:52:a1:49:cb:a7:3f:84:77:60:d5:
84:fa:c2:02:68:46:ba:d9:5e:c2:3b:75:e7:5d:b6:a2:bd:9d:
dd:21:ca:43:9d:e9:c5:ea:55:00:ef:68:c6:5e:ae:64:9f:e9:
ee:67:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:27 2025 by rpki-client