Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa
File: 3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa (raw, json)
Hash identifier: vsVamVUBMTKANhMAeppT9+J9M/iZDaPm12oxsublMoE=
Subject key identifier: F2:F2:01:0C:69:31:A0:7E:B6:64:18:09:B3:43:E3:32:AA:AF:58:27
Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial: 1BD7B133261E9D1D9397CA670E32612C963FA893
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa
Signing time: Wed 11 Sep 2024 10:00:01 +0000
ROA not before: Wed 11 Sep 2024 09:55:01 +0000
ROA not after: Wed 10 Sep 2025 10:00:01 +0000
asID: 136121
IP address blocks: 202.154.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d7:b1:33:26:1e:9d:1d:93:97:ca:67:0e:32:61:2c:96:3f:a8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Validity
Not Before: Sep 11 09:55:01 2024 GMT
Not After : Sep 10 10:00:01 2025 GMT
Subject: CN=F2F2010C6931A07EB6641809B343E332AAAF5827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:bc:4c:0c:33:a3:ad:c4:ba:36:2f:8b:f3:
66:b4:2b:fb:0d:fa:0a:d1:bc:71:d5:be:97:55:6a:
de:21:29:22:d1:f1:ac:02:15:21:0b:0f:fa:1e:00:
1f:40:4e:ea:03:b6:f2:64:d3:07:42:6a:ee:31:27:
72:28:52:5b:9b:ee:5c:53:24:61:2c:7b:12:75:7b:
25:f8:7b:db:29:4b:92:6e:d5:ce:a2:87:2d:7d:fc:
33:23:28:56:93:f8:ad:55:b3:24:ae:41:84:b7:45:
37:21:9d:f6:e7:5d:38:0f:ec:78:74:e3:d2:be:10:
ce:f4:ad:fa:f0:e2:7e:da:6a:0a:d5:64:59:89:51:
16:36:6b:2d:54:fa:4b:bd:ef:13:e4:6a:a6:70:08:
d6:e5:82:8f:27:17:20:19:b4:6e:c9:ca:9a:8f:28:
5a:80:af:60:2b:09:66:12:e6:60:97:4e:64:17:1f:
b0:54:2a:6c:c1:90:4d:4d:d1:6a:57:4f:0d:46:ed:
26:69:21:fb:2a:09:4d:53:1f:50:c5:6f:aa:7f:19:
d5:98:d0:80:9a:fb:1c:dd:19:8a:d8:09:05:c7:a6:
c3:d1:02:f2:7e:dc:be:0d:6a:1d:bc:ba:3d:a3:9f:
c6:6d:5a:58:bb:48:20:39:92:b4:0c:bf:2c:b2:6f:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F2:01:0C:69:31:A0:7E:B6:64:18:09:B3:43:E3:32:AA:AF:58:27
X509v3 Authority Key Identifier:
keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.18.0/24
Signature Algorithm: sha256WithRSAEncryption
58:8f:a7:f3:20:c3:7f:30:1a:b3:ca:29:08:ba:e1:8c:8b:b0:
3c:b8:50:1b:34:8a:dd:df:2c:30:7e:3a:b7:85:8b:36:29:6e:
6b:2a:78:4b:52:3c:c9:bb:c8:06:af:78:88:d6:05:39:4e:f4:
79:94:52:24:35:ce:6f:88:0a:ef:fc:4b:6d:90:78:3e:a3:34:
38:9a:f1:d1:4c:f7:bb:25:13:6c:f9:ab:86:8f:71:43:09:89:
30:81:fd:82:79:07:35:80:df:44:eb:73:63:74:24:f8:69:77:
9e:a1:35:9e:ac:ea:2e:40:41:e3:0f:dc:13:bd:ad:29:f1:89:
d7:cd:f1:4c:b3:f1:e9:c8:47:20:ac:c9:2f:0c:e9:64:2a:e6:
ad:af:ec:29:56:08:6e:db:70:8f:df:2e:68:bd:15:60:ce:de:
fb:a9:bc:76:8a:f3:ee:28:7e:7d:de:40:4b:1a:6a:18:47:31:
3a:a9:fe:50:a9:e1:11:4e:ef:27:23:88:0a:ca:08:60:0c:9b:
81:55:4f:36:15:36:42:ed:3c:c9:3e:cd:f3:90:e6:8b:6e:a4:
41:90:9f:85:ac:af:df:0a:3b:80:80:98:b4:db:4b:e9:e3:52:
10:a9:ae:d3:e2:f0:50:cc:c4:8e:2e:2f:20:91:cf:44:70:19:
2f:39:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:26 2025 by rpki-client