Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37362e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: JryeZCc8Rd2dE/fZIEgbaU3GAf6gEuiMFiC+cKgh9aY=
Subject key identifier: 14:A1:A2:49:D3:DB:60:39:17:08:2F:AE:D9:00:F5:FD:55:23:86:3B
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 4374374EF988B497B7F45813BD1584C8FABC31B4
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa
Signing time: Sat 15 Jun 2024 12:01:51 +0000
ROA not before: Sat 15 Jun 2024 11:56:51 +0000
ROA not after: Sat 14 Jun 2025 12:01:51 +0000
asID: 17671
IP address blocks: 202.47.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:74:37:4e:f9:88:b4:97:b7:f4:58:13:bd:15:84:c8:fa:bc:31:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Jun 15 11:56:51 2024 GMT
Not After : Jun 14 12:01:51 2025 GMT
Subject: CN=14A1A249D3DB603917082FAED900F5FD5523863B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:75:d2:c9:10:e5:74:48:2c:b7:bd:68:36:
59:13:6c:4b:3d:81:a0:fc:19:d1:85:96:f6:2d:d9:
37:80:de:8a:09:f9:10:c2:b3:a1:46:85:e1:48:2b:
d4:ef:f2:a0:2f:3c:70:ac:b8:d3:d4:4c:02:10:44:
24:c7:b9:77:69:79:ff:f7:a6:43:ea:64:84:0f:f7:
b1:50:13:37:b2:2b:b6:f2:5e:72:16:46:65:29:03:
0b:a4:ee:f1:e9:08:48:2e:69:c8:d2:aa:70:13:5e:
80:31:79:8a:f4:ba:c3:71:c1:8a:b0:ea:39:8b:d6:
31:49:74:bb:d7:6d:ab:82:39:89:93:53:42:f4:9b:
ea:e9:23:47:53:8f:3a:66:46:3b:8b:7b:15:79:f8:
c4:d8:65:05:55:a5:54:05:fe:17:53:70:df:3d:fc:
61:56:ea:47:bf:93:af:78:26:be:73:4a:87:e2:18:
9d:d7:c4:94:4d:40:ea:97:68:3f:d8:26:31:36:81:
d2:05:4d:14:31:ed:e8:77:18:a8:dc:9f:2f:3a:ff:
4c:3e:e5:b0:7f:4f:11:2a:dd:71:7b:47:7f:18:41:
44:1a:03:23:12:63:57:2b:f3:1d:f5:22:49:2e:62:
3a:c6:ef:20:a0:65:79:b8:5b:85:1f:12:94:9b:61:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:A2:49:D3:DB:60:39:17:08:2F:AE:D9:00:F5:FD:55:23:86:3B
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.76.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4c:5c:68:e4:1f:57:39:a4:04:93:59:40:33:13:63:fa:85:
72:6b:1f:46:00:07:bb:61:6f:cf:8b:d3:7f:75:8f:54:88:53:
af:ca:39:c4:64:4b:9f:a8:37:e0:df:6e:61:19:60:13:2e:69:
82:cc:db:6a:2d:9e:9e:2d:9f:4a:1b:61:01:dd:37:b9:0f:a8:
ec:4a:15:8e:b3:6b:c0:e2:b7:a0:4e:d9:72:d5:2f:44:9a:83:
1a:bf:84:8f:76:a1:18:bb:84:e1:b0:55:c0:d5:47:ef:5c:d3:
ff:2f:c0:f6:22:6b:4c:79:51:7c:60:fc:31:51:7c:fb:cd:05:
35:9b:1f:bb:5a:02:99:79:7a:0a:f5:f4:7f:44:86:54:a4:94:
a4:f1:f9:83:17:d5:30:f0:a9:81:46:7c:e2:ef:50:e3:52:08:
66:d1:26:f3:52:c8:50:16:39:98:82:ec:70:d4:0f:a4:e3:8f:
9c:65:e8:05:cb:42:c8:7c:ae:2f:2c:d7:c4:50:58:06:3a:0a:
83:90:c0:1e:4f:19:64:43:79:d0:87:a5:f7:b1:fc:36:48:31:
6a:34:38:05:01:f6:a6:ec:74:7b:e4:50:e8:b6:22:b9:fe:3d:
e9:44:1b:5d:f6:42:9a:69:26:b2:f9:0e:a9:e5:53:d0:3b:cc:
c5:ff:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:27:54 2025 by rpki-client