Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e302e302f32342d3234203d3e203234323030.roa
File: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (raw, json)
Hash identifier: Pppa12U1FBCWUbrjFLtimpCCb2f/w2y+Q5IjM+b5DpI=
Subject key identifier: 85:2A:41:D0:F2:BD:49:3C:F7:16:D1:91:51:69:17:46:C7:D8:71:28
Certificate issuer: /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40
Certificate serial: 32427EB571B5A3B65F07DB62F6346EF23C637F88
Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e302e302f32342d3234203d3e203234323030.roa
Signing time: Mon 23 Dec 2024 08:32:55 +0000
ROA not before: Mon 23 Dec 2024 08:27:55 +0000
ROA not after: Mon 22 Dec 2025 08:32:55 +0000
asID: 24200
IP address blocks: 202.133.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:42:7e:b5:71:b5:a3:b6:5f:07:db:62:f6:34:6e:f2:3c:63:7f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40
Validity
Not Before: Dec 23 08:27:55 2024 GMT
Not After : Dec 22 08:32:55 2025 GMT
Subject: CN=852A41D0F2BD493CF716D19151691746C7D87128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:4e:1e:6c:97:f8:d2:e3:f6:1a:eb:26:7d:
b9:62:54:2b:bd:28:c0:9e:c4:c6:7c:47:70:5e:52:
1a:48:c0:b2:04:af:d7:b5:69:5f:19:5f:ef:08:c1:
fc:29:76:8d:6c:9e:9d:43:b0:30:cf:50:a5:f9:78:
a5:36:a2:47:5d:9d:73:08:e4:18:3e:a1:3d:14:1f:
0a:0c:76:42:1d:ff:13:89:63:ac:37:6b:ce:36:e5:
75:b0:9a:73:38:91:96:e3:c5:95:e8:c8:34:1f:9f:
db:27:3f:cd:07:43:69:c2:53:c2:d1:da:61:54:c9:
87:0d:79:3a:e9:71:06:88:f6:68:86:bc:72:a6:ae:
8e:f0:f5:01:37:a3:b9:14:14:fc:8c:34:e8:f4:73:
ac:65:61:09:99:77:cd:2a:bc:cb:0a:04:eb:40:79:
06:12:d4:c5:30:36:12:e2:5c:36:3e:bd:da:3c:a5:
d6:78:a3:32:45:76:f8:c0:3d:3e:8d:47:26:59:6f:
fd:e5:c4:08:82:b7:cd:6c:a6:2f:c6:2b:04:7e:79:
31:21:e9:86:70:b1:f5:21:94:fd:89:73:11:e1:d6:
68:f2:61:c7:23:80:89:2c:6f:0e:83:b9:5e:73:cd:
78:0c:e2:dc:9d:9b:f2:88:20:a7:96:62:1a:c4:26:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2A:41:D0:F2:BD:49:3C:F7:16:D1:91:51:69:17:46:C7:D8:71:28
X509v3 Authority Key Identifier:
keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e302e302f32342d3234203d3e203234323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.133.0.0/24
Signature Algorithm: sha256WithRSAEncryption
67:be:44:35:5d:a7:05:86:79:75:fa:6f:15:3a:44:4d:cb:96:
61:cc:74:13:ce:24:2c:96:cf:c7:c0:e0:ae:35:d0:d4:7c:35:
2c:6c:7f:23:63:63:0d:26:74:81:4d:15:e6:ff:fe:60:f9:5a:
db:3f:2c:95:14:5e:a9:88:8b:e7:01:9b:df:3a:e2:5f:54:cf:
62:cf:5c:e1:f0:da:14:e5:35:d6:a8:3e:ee:49:c3:74:e9:fc:
72:14:01:d4:fb:c1:4e:4e:b0:d2:71:27:84:83:43:d0:77:5d:
68:f0:51:cd:68:eb:35:64:93:c6:fa:46:01:d0:06:77:f0:c0:
93:ed:1f:8c:4f:46:10:71:f5:41:40:f7:3c:e4:7f:bb:a7:a6:
ad:d4:4c:d0:cd:80:c5:6c:b8:38:31:b0:dd:81:a1:00:86:95:
d3:bc:62:0f:06:b3:90:8f:a3:8b:52:b5:d8:bd:1b:7b:e7:a6:
83:ab:61:d6:92:06:f2:72:f5:67:b7:ff:06:cc:9e:22:f5:16:
5e:83:36:50:4a:ea:d3:43:c4:e4:e2:51:18:fa:67:5e:c3:c2:
08:dd:ec:86:fc:86:ad:64:0d:7a:05:3e:ad:9b:fd:a6:54:76:
fa:cf:77:b0:2c:ae:d8:f6:af:ed:f4:a9:3d:86:f2:88:85:89:
54:d0:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:42:59 2025 by rpki-client