Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa
File: 3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa (raw, json)
Hash identifier: 4azYJIfIwLBN6QOXYJQcD/4KChhMtRRTK+Od9tKQdq8=
Subject key identifier: 3F:B9:3A:D1:90:61:AA:AF:6B:6C:36:DD:62:22:F8:2E:45:7F:05:04
Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial: 101EEFE3C58B3F63B9F78EAFAABA013566CF083E
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa
Signing time: Fri 06 Dec 2024 10:00:01 +0000
ROA not before: Fri 06 Dec 2024 09:55:01 +0000
ROA not after: Fri 05 Dec 2025 10:00:01 +0000
asID: 141607
IP address blocks: 202.154.36.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1e:ef:e3:c5:8b:3f:63:b9:f7:8e:af:aa:ba:01:35:66:cf:08:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Validity
Not Before: Dec 6 09:55:01 2024 GMT
Not After : Dec 5 10:00:01 2025 GMT
Subject: CN=3FB93AD19061AAAF6B6C36DD6222F82E457F0504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:4c:21:87:37:50:f2:a6:d9:f6:9c:4a:ec:
c8:a3:59:e7:6a:bb:96:2b:68:f8:d3:93:5c:8c:aa:
3e:81:0d:49:39:e2:6e:e8:b1:da:8b:61:64:0b:d9:
24:94:f0:6c:45:7a:97:f7:4d:98:20:4b:5b:c6:b1:
e2:39:4a:8f:63:6c:79:a3:32:19:eb:b8:bd:68:1b:
00:a3:2c:90:94:5c:f3:a7:d6:23:c8:d1:85:7e:70:
24:09:43:cc:43:8e:ef:18:88:0c:ab:06:06:1a:a3:
11:27:2e:3e:44:64:d1:81:e8:06:b5:ef:a7:56:a9:
72:70:e8:51:3b:35:49:3b:40:40:d2:31:e5:66:4e:
5b:d1:a6:4b:f3:c6:c8:65:1f:5c:58:d9:2e:45:28:
fa:ca:82:cd:30:40:4e:1a:db:4e:58:45:c2:17:cd:
d4:09:9f:d9:5b:01:ea:60:4f:72:b0:98:55:26:f9:
3c:3d:51:04:e5:d9:4c:f5:b6:ed:e6:f7:72:78:44:
08:9d:3c:69:3c:66:06:df:a1:d5:a7:b6:54:50:a6:
63:36:2e:60:52:eb:16:ac:21:53:e1:db:b7:de:da:
04:3e:3f:6a:e6:ea:0d:e6:e3:76:f0:8e:5c:12:5d:
2e:d8:8f:3b:28:0e:a4:74:12:27:88:ca:e0:33:3c:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B9:3A:D1:90:61:AA:AF:6B:6C:36:DD:62:22:F8:2E:45:7F:05:04
X509v3 Authority Key Identifier:
keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.36.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:08:51:8f:cb:55:ec:54:57:c2:e3:64:3e:90:7f:8a:63:c8:
89:b5:99:0d:52:95:6c:f7:4c:d6:38:86:0e:65:ff:d2:52:b5:
3a:a7:87:b7:4a:49:2f:78:b0:ac:6f:83:57:a7:b9:c2:5e:c7:
54:bb:53:77:7e:ec:34:df:09:b9:e3:1c:6c:1d:c3:af:34:20:
19:05:f4:19:8e:87:4d:ec:bf:35:94:43:5c:af:75:a3:8d:4a:
a4:5a:94:06:b1:69:2a:bf:5b:56:ed:31:0f:17:1a:f5:43:03:
5b:38:38:a0:a4:0d:23:83:be:93:2e:43:d2:c2:b3:a4:41:aa:
3c:ff:e1:1f:33:ff:8d:71:62:c7:d9:cc:54:a5:b9:e5:05:bf:
15:bb:6a:4a:e6:5c:2f:32:5f:98:d2:76:c2:89:16:5f:eb:6e:
9f:ed:55:66:16:cf:b4:8e:69:fe:80:ee:33:5f:ec:97:b8:48:
4d:0b:1b:0f:e5:0a:ef:f8:18:46:23:56:aa:fd:dc:e1:34:fb:
a9:7f:5a:ec:c4:8b:7e:0b:60:04:61:b6:52:39:74:4d:b0:fe:
69:bc:4b:2f:cc:16:5a:45:70:55:ce:30:be:6b:1f:5a:38:ef:
8c:db:20:d5:b0:74:17:9f:0f:e0:3f:b4:e2:5a:bf:e2:22:ee:
e9:34:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:34 2025 by rpki-client