Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/3230322e39302e3139382e302f32342d3234203d3e203338373739.roa
File: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (raw, json)
Hash identifier: WTE+7ChgCtzWctqna6lhsd8Kl1Ur43QevQNEi2ASl5Q=
Subject key identifier: 36:E5:05:8E:95:98:55:13:3E:62:90:08:B5:7A:F3:20:16:07:BB:98
Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40
Certificate serial: 3265A09F93D6BC4BC01B273BB00075960C086C7C
Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/3230322e39302e3139382e302f32342d3234203d3e203338373739.roa
Signing time: Mon 30 Dec 2024 15:42:56 +0000
ROA not before: Mon 30 Dec 2024 15:37:56 +0000
ROA not after: Mon 29 Dec 2025 15:42:56 +0000
asID: 38779
IP address blocks: 202.90.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:65:a0:9f:93:d6:bc:4b:c0:1b:27:3b:b0:00:75:96:0c:08:6c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40
Validity
Not Before: Dec 30 15:37:56 2024 GMT
Not After : Dec 29 15:42:56 2025 GMT
Subject: CN=36E5058E959855133E629008B57AF3201607BB98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:08:28:21:32:dc:ab:87:4e:b3:43:cb:3a:db:
b2:11:ee:2f:0d:fa:d1:ef:ec:3b:a1:4f:6a:04:93:
8b:4b:3f:8c:ac:95:76:97:2e:3b:3e:46:e1:e2:2d:
db:04:1d:c1:f7:30:bb:77:7b:79:74:12:7a:1c:02:
6a:01:a3:8e:b7:4a:dd:0c:b6:e3:54:e6:23:65:0a:
32:1b:ee:b9:1f:88:58:0c:d9:80:b3:bf:56:99:c2:
fc:95:0e:db:a5:5f:91:26:a1:ce:ff:b9:b4:67:ce:
f1:1d:ab:91:bc:f2:6c:55:97:77:7b:99:39:a7:38:
91:29:1d:74:d1:c7:db:90:3a:dc:0e:95:a3:fa:e3:
eb:a0:d3:3b:ab:4e:fa:03:0a:43:54:84:f5:d7:cf:
d6:e1:13:cc:23:52:a8:f1:28:21:53:d2:5f:96:b6:
39:0d:5e:b0:3e:89:0c:d4:74:dd:14:05:b6:5b:2c:
74:cb:6d:46:a6:06:95:0c:12:1e:e6:da:19:71:6e:
dd:bb:86:4d:39:de:95:56:fa:8c:c3:79:cd:9a:7f:
14:bc:3c:da:42:5f:55:8e:de:29:f4:4f:17:ee:5a:
71:04:35:01:13:23:17:04:14:ee:db:72:d6:66:1f:
7a:e6:68:1c:af:b2:67:5a:53:51:04:20:e2:36:30:
71:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E5:05:8E:95:98:55:13:3E:62:90:08:B5:7A:F3:20:16:07:BB:98
X509v3 Authority Key Identifier:
keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/3230322e39302e3139382e302f32342d3234203d3e203338373739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.90.198.0/24
Signature Algorithm: sha256WithRSAEncryption
05:80:65:f6:13:ff:7d:ed:d6:f7:15:46:c1:0a:fe:b1:11:d8:
2c:56:4a:bc:68:02:2a:93:0a:1e:e4:72:d4:7c:75:c6:bb:5d:
73:f7:d8:0b:6a:02:26:e8:3f:a6:8d:2c:b0:d7:f2:ce:d3:8e:
55:43:76:8a:30:95:c5:7d:0b:79:50:02:d2:1f:3a:28:77:d1:
e8:8b:3e:70:e0:fb:2a:2b:8a:40:ca:aa:4f:68:25:2b:8e:e4:
88:2b:8b:69:4a:6e:d2:a2:b6:88:13:95:b8:07:0c:01:04:ab:
f5:af:5d:d5:5d:1c:82:94:62:2f:a0:c8:43:a5:67:bb:e0:af:
6b:1b:e6:7a:20:1c:bd:ff:14:4f:6a:a1:08:08:47:68:1a:e1:
8d:cc:e6:8b:cd:f4:a1:1f:60:f8:38:28:4a:1c:d3:67:1d:36:
b6:ce:19:cc:8b:e7:27:54:7b:57:00:5a:e1:cf:ac:d8:48:da:
ef:65:a7:4b:43:e3:a4:f7:f8:31:87:8a:9b:a4:e1:ab:00:2d:
0f:1e:5b:ef:1f:07:7d:65:3c:4c:01:fe:fd:06:08:3b:52:e8:
39:d7:cc:88:6e:bb:58:f8:2e:d7:73:4b:a0:11:b2:b8:ad:64:
ba:ad:79:39:49:5d:87:17:51:52:e0:e0:ae:de:5c:a1:60:94:
49:29:64:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:26 2025 by rpki-client