Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37302e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: vMb7ajGeGNPlBXrmstAemMn5dpepMEIIT3EbFiXhXVA=
Subject key identifier: 3C:24:B6:19:38:92:33:63:3B:6B:C9:01:29:53:E2:05:59:5F:AE:73
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 48A476B83DEA37F6180BD3E23C99BE8CB6549B96
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa
Signing time: Sat 15 Jun 2024 12:01:53 +0000
ROA not before: Sat 15 Jun 2024 11:56:53 +0000
ROA not after: Sat 14 Jun 2025 12:01:53 +0000
asID: 17671
IP address blocks: 202.47.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a4:76:b8:3d:ea:37:f6:18:0b:d3:e2:3c:99:be:8c:b6:54:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Jun 15 11:56:53 2024 GMT
Not After : Jun 14 12:01:53 2025 GMT
Subject: CN=3C24B619389233633B6BC9012953E205595FAE73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:1b:af:bc:47:0e:0a:a7:05:1d:fe:b4:89:
5e:41:9b:46:40:d5:dc:62:1a:93:21:8c:ab:9d:98:
17:53:9b:fd:09:91:af:2a:bb:9f:fb:25:e8:ec:9d:
5d:ce:aa:94:53:db:27:f3:06:7a:8d:c8:a1:42:bd:
39:0f:f4:b6:f6:bb:7b:dc:18:ca:9d:b0:c0:3c:f6:
bf:da:5d:b4:7a:9d:67:b6:14:0e:59:bd:16:f9:01:
6d:b6:a6:7f:b8:68:2e:7d:ed:83:07:81:a6:15:d6:
3d:c4:31:a6:7a:8c:ba:2c:0b:94:47:83:e1:8e:c3:
73:90:8d:1d:49:68:d8:5e:bc:8c:da:ae:a9:8b:78:
fd:91:39:61:6e:f5:77:e9:68:1e:e4:a9:fb:aa:2b:
31:cc:0d:47:46:3b:44:03:05:bb:f6:66:4d:b5:c5:
54:ac:7d:13:ee:e0:25:78:88:55:83:c2:74:3f:57:
f6:36:67:32:16:7e:4a:10:21:ae:f2:ea:85:63:45:
32:c7:29:22:4f:01:16:af:bb:15:ff:af:fa:7f:f5:
40:51:89:7b:67:57:5b:a1:00:42:78:db:7c:23:ea:
62:6e:6b:d9:c9:64:da:06:0e:d7:6c:92:c7:e0:c7:
5f:26:06:5c:51:b8:42:93:16:7d:d2:fa:8e:ef:9d:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:B6:19:38:92:33:63:3B:6B:C9:01:29:53:E2:05:59:5F:AE:73
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.70.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9e:67:d7:32:08:48:5e:1c:11:f4:95:bd:9d:10:ba:8a:67:
2a:99:c5:2d:cd:f4:17:c7:92:26:12:e2:b9:15:5b:bf:1e:a7:
0a:d2:3b:86:7f:4b:f6:9b:bd:4a:1e:13:23:57:9e:ec:e8:c7:
88:66:74:f2:c2:38:b3:ba:1b:62:46:ee:e1:f5:53:78:1f:33:
6f:81:d7:21:73:3e:d0:77:ef:58:9d:5d:ac:f6:d5:cf:d4:52:
35:e4:5d:40:af:6f:2f:5e:11:bc:a2:88:66:10:25:6d:31:f0:
ed:69:12:23:d5:4b:23:a5:25:3b:b7:5d:00:be:1c:07:69:c7:
0b:a5:de:02:07:a5:aa:4b:c9:e2:da:c9:d6:42:38:7d:1d:f7:
e2:60:98:c4:12:e4:2d:6f:17:ca:be:34:d8:75:ea:f4:f7:ff:
ea:b4:5a:63:54:fc:da:80:c9:77:fe:2f:dd:86:3a:f7:90:5f:
17:37:bc:34:40:52:63:81:42:2e:36:93:bf:73:50:29:50:0f:
7b:9a:9b:e7:e4:6b:02:7c:e9:99:c5:f5:f0:da:80:05:30:45:
01:b0:ee:b4:6e:0a:84:2d:04:68:35:f6:f2:70:3f:04:bc:42:
e9:36:cd:79:64:bb:09:dc:6f:2e:69:8f:55:fd:4e:b6:cc:1e:
72:23:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:27:49 2025 by rpki-client