Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa
File: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (raw, json)
Hash identifier: +MtI3Paga95mLoPbEq+emS8LducTIoyRFm8yliuN86s=
Subject key identifier: 3D:C4:27:78:0F:FF:A3:2A:B0:9C:94:A8:90:4A:58:0A:5D:34:10:30
Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4
Certificate serial: 7938F91137E7B6AAC21BE5CC2BE4677443FD44E2
Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa
Signing time: Sat 02 Nov 2024 12:00:00 +0000
ROA not before: Sat 02 Nov 2024 11:55:00 +0000
ROA not after: Sat 01 Nov 2025 12:00:00 +0000
asID: 24536
IP address blocks: 202.146.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:38:f9:11:37:e7:b6:aa:c2:1b:e5:cc:2b:e4:67:74:43:fd:44:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4
Validity
Not Before: Nov 2 11:55:00 2024 GMT
Not After : Nov 1 12:00:00 2025 GMT
Subject: CN=3DC427780FFFA32AB09C94A8904A580A5D341030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:c9:b8:38:c0:5e:4e:27:16:b3:b4:11:bf:
ba:9e:cd:a4:14:ba:14:8c:b3:69:87:01:9b:1c:14:
d5:34:88:c7:57:65:d2:a0:60:79:77:f8:29:4b:c1:
d5:b6:bf:2b:17:84:a9:f9:9d:d8:15:36:1c:12:c5:
00:8b:80:24:13:d7:1f:88:1c:88:50:f3:f3:f3:b4:
b9:60:4f:88:a1:7f:cc:70:b9:91:65:f9:c2:e0:5d:
1a:be:7b:63:44:f7:af:c8:15:1e:df:4a:d7:08:67:
a0:86:4d:29:34:16:fe:70:fd:e4:12:57:ef:cd:08:
4d:45:ee:35:a4:d6:09:16:85:64:d5:fb:86:09:51:
e7:26:cd:a3:40:b9:db:99:81:99:04:b1:9e:f3:46:
30:f2:b5:33:b2:0e:3e:95:c8:10:db:7a:b3:ef:d0:
7f:ad:1f:8a:6c:ab:29:cd:e0:45:c5:80:df:6c:cf:
64:9f:ab:87:15:7a:24:e7:9f:86:a8:15:d2:ac:89:
73:52:3f:90:8e:1a:96:01:95:2a:e6:9c:ee:fd:05:
74:91:ac:72:85:b0:2c:8e:97:fd:d0:13:d7:f9:5a:
41:5b:f2:71:c8:a8:f1:91:32:de:f6:11:f5:6e:06:
ef:a7:ab:81:0f:34:49:25:9b:a8:4c:eb:8b:b1:78:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:27:78:0F:FF:A3:2A:B0:9C:94:A8:90:4A:58:0A:5D:34:10:30
X509v3 Authority Key Identifier:
keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.146.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:96:6e:a7:32:0c:9b:df:a4:96:7f:84:25:7a:ee:18:97:31:
34:fe:58:d7:1e:f3:f3:8d:4e:eb:49:73:d9:b8:24:03:0b:d9:
c8:15:e2:26:a7:d4:1f:51:36:9e:4d:02:c1:53:85:07:34:1c:
f8:0c:cb:b4:4c:34:6a:35:73:3d:cd:95:18:ed:bf:7d:1f:36:
f8:69:5c:40:57:2e:11:4f:b5:5a:ff:52:17:f7:b2:78:f8:9d:
6d:9a:fe:70:57:3e:22:a8:38:bf:b8:65:e5:9c:22:91:a3:47:
4f:63:ad:a1:ee:9a:05:b4:f7:07:76:05:28:7e:bb:c2:a1:db:
e4:0b:b8:db:f4:3d:40:c8:63:8b:8a:6e:04:2d:e8:ed:74:34:
48:56:65:89:c7:7f:8d:00:fe:ee:52:c5:f9:f2:e5:e0:95:7b:
c9:b3:b2:31:31:23:2b:61:1f:a9:55:18:83:5d:f0:d9:6e:39:
18:7e:5f:da:80:7b:de:83:55:28:03:33:ad:56:f2:d3:97:9f:
28:be:de:4f:4a:02:dd:8e:d2:d7:cf:a0:8b:63:19:16:6b:de:
8b:eb:33:cc:ff:aa:84:de:0e:d5:bf:b6:8e:72:d8:67:92:60:
9d:d8:e7:fd:7a:88:12:c5:44:31:3c:d4:7c:f4:ff:ad:39:80:
b2:e9:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:00 2025 by rpki-client