Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa
File: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (raw, json)
Hash identifier: I1MqTlW3Nbk576r2Yxvip0ZNvGZvD6MB25x1BaXP3Z4=
Subject key identifier: 26:5F:E3:21:F2:D2:9F:04:F2:2B:F7:4D:18:F1:2E:A3:7F:07:CA:95
Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C
Certificate serial: 387114F93FE716213706A0225CE45F8FE6073236
Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa
Signing time: Mon 01 Jul 2024 01:04:48 +0000
ROA not before: Mon 01 Jul 2024 00:59:48 +0000
ROA not after: Mon 30 Jun 2025 01:04:48 +0000
asID: 24202
IP address blocks: 202.87.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:71:14:f9:3f:e7:16:21:37:06:a0:22:5c:e4:5f:8f:e6:07:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C
Validity
Not Before: Jul 1 00:59:48 2024 GMT
Not After : Jun 30 01:04:48 2025 GMT
Subject: CN=265FE321F2D29F04F22BF74D18F12EA37F07CA95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:6a:bf:5c:49:ce:cb:d2:38:a5:10:61:a9:
e5:d6:2d:06:f2:2c:21:df:b0:f0:bb:96:99:6d:1e:
6a:55:ce:1f:26:25:71:10:b8:fc:28:65:89:e5:4a:
e9:d1:4d:b1:4f:96:21:e9:1d:4d:1e:cc:80:be:5f:
db:95:fc:be:b9:99:9a:a6:c0:df:52:09:6a:88:8b:
90:b6:95:19:b2:19:74:df:03:7c:11:7a:a7:8c:e3:
3e:0f:cc:38:57:4f:ad:2f:bf:46:6a:15:4f:f2:9a:
a8:2e:e0:0b:26:ba:51:2f:df:08:f2:8f:23:a5:9c:
c0:88:ea:e2:b1:c9:10:c6:80:83:42:05:e8:99:f6:
86:f9:5d:22:6f:67:e6:b3:5b:9d:f5:a1:93:ff:2e:
cb:37:e6:03:9e:58:0f:56:e4:b0:76:d9:78:f7:f2:
17:0c:5f:1b:38:b6:f4:a4:12:30:a4:9e:d4:99:3c:
de:c2:e8:bf:a3:32:2e:45:74:f7:07:08:66:2c:86:
aa:bc:f8:0d:5d:d1:bf:91:78:e7:ee:4b:2a:60:04:
fe:e7:aa:a3:66:d3:15:94:f5:7a:0b:bc:0f:c5:52:
b1:29:2a:e3:b3:ea:1b:ba:ed:a1:a8:3e:53:c3:af:
7c:4a:94:5c:be:d6:1b:8a:95:68:07:55:ab:f5:7c:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5F:E3:21:F2:D2:9F:04:F2:2B:F7:4D:18:F1:2E:A3:7F:07:CA:95
X509v3 Authority Key Identifier:
keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.240.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:b6:fc:e2:d8:b5:27:95:be:50:d0:c5:d7:a6:b9:1c:32:d8:
98:36:37:5f:63:9d:c2:d6:b1:f7:16:7d:77:ff:26:70:78:d7:
71:c1:89:3e:98:68:cb:22:95:e0:3c:cf:6d:53:2f:5c:7c:6a:
8c:0a:bf:6e:3d:f8:8b:6e:3c:22:3e:88:c0:11:86:05:c9:63:
3a:79:42:67:89:be:ec:6d:c0:c9:ff:1b:a9:5b:45:bd:42:a4:
e9:db:d6:ea:11:c5:00:af:d8:a4:a1:52:f7:f0:ec:e7:18:8b:
dc:80:b7:a7:75:18:96:1d:4a:a7:a6:11:4b:8f:54:62:0c:67:
94:b4:da:bc:78:e9:a5:54:be:44:7e:1f:72:4a:05:5e:5f:6a:
13:f3:2f:08:7d:f7:78:52:0d:98:d0:f9:61:fc:20:73:7e:ec:
03:9d:5d:96:08:42:b6:ac:fd:d6:1e:76:f3:2c:64:f6:6d:35:
c2:15:c4:d9:39:d5:89:01:ff:3b:7e:31:f2:ea:ec:24:8b:2c:
15:d7:65:5e:9a:bd:a8:25:14:28:b5:4f:a7:27:f8:5e:a7:49:
8f:1c:c7:18:0b:f3:77:97:09:72:a6:c9:97:21:1b:73:29:57:
42:8c:1c:bd:22:d5:eb:1b:77:69:30:08:71:32:39:52:1a:0a:
48:32:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:26:02 2025 by rpki-client