Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa
File: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier: LpfpsRHdtzDbS8mVC806nMN0DKSFJFJPb+lmJ69PmFM=
Subject key identifier: 75:58:55:82:E8:E2:76:BE:CA:A4:2B:91:E0:DA:CA:AD:62:15:1C:00
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 3DE2C97F6D063BE5A972E8BD4BB3C6F4E0B729E8
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa
Signing time: Tue 18 Jun 2024 06:00:01 +0000
ROA not before: Tue 18 Jun 2024 05:55:01 +0000
ROA not after: Tue 17 Jun 2025 06:00:01 +0000
asID: 38143
IP address blocks: 202.169.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e2:c9:7f:6d:06:3b:e5:a9:72:e8:bd:4b:b3:c6:f4:e0:b7:29:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Jun 18 05:55:01 2024 GMT
Not After : Jun 17 06:00:01 2025 GMT
Subject: CN=75585582E8E276BECAA42B91E0DACAAD62151C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:49:ac:0a:b6:87:c6:0b:81:09:9d:dd:5d:
a3:d5:44:e7:f2:d1:fd:1a:08:76:eb:82:ab:78:21:
30:58:c7:75:a0:46:94:6c:c6:df:b8:e0:a0:76:25:
0c:a7:94:4d:9f:9d:b3:34:97:d4:9f:f2:35:49:84:
d9:2f:b2:0e:19:ea:2c:e2:ed:69:a3:b8:92:7a:99:
b2:39:95:39:08:cc:53:a5:2e:2c:12:18:e6:79:ac:
47:f9:05:f5:a5:8a:d8:f5:15:22:8e:45:f4:df:a6:
be:46:0c:0f:7e:07:c1:2a:57:77:1a:34:42:11:ef:
2f:e6:30:94:86:78:45:18:f0:76:74:b1:14:3d:8a:
a0:1d:d3:af:91:61:78:64:27:54:2f:40:db:d4:4f:
08:ed:fd:ab:e8:3d:88:54:01:83:58:f6:3b:7c:0b:
46:75:61:57:bd:b4:20:00:6b:86:f8:5b:74:94:35:
f2:1c:25:5e:fb:a6:3d:9b:3f:84:7f:07:29:de:f1:
2a:5b:5e:b1:7d:54:0b:0c:13:69:2e:8d:59:7f:af:
48:fd:c5:c2:21:1d:89:24:7d:e1:77:01:3a:f8:fb:
b4:01:86:7a:36:37:7f:1c:cd:0b:38:21:13:8f:58:
46:7c:eb:d1:5a:a7:68:45:aa:06:20:d0:4d:76:e0:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:58:55:82:E8:E2:76:BE:CA:A4:2B:91:E0:DA:CA:AD:62:15:1C:00
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.247.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a7:0d:7b:98:ec:34:f2:f8:bb:22:db:18:4d:c1:37:04:c0:
91:19:86:37:ec:f0:02:08:83:77:36:79:71:6d:9f:66:88:7f:
a5:6e:09:d9:fb:19:2a:67:ab:78:2e:b6:f0:7f:5c:33:13:d1:
70:df:74:66:c5:44:13:d0:b2:dc:4d:f6:a5:98:6e:0d:d8:60:
50:bf:cf:bf:04:f6:10:cb:31:70:d5:5d:04:55:31:b7:cf:b2:
f5:bd:ca:1b:77:74:bd:8a:78:6e:42:f5:71:91:e6:1d:23:23:
ff:eb:af:d9:c7:38:c3:e3:45:e7:25:76:f7:06:d8:d8:fb:13:
81:4a:c4:ef:f3:41:bb:09:69:b9:1c:43:37:6a:26:2b:05:46:
db:c0:68:60:86:91:e5:51:7d:d9:c1:1a:e5:5f:aa:03:cb:ed:
d4:e6:4a:bc:41:98:04:92:1c:e3:34:33:70:6a:04:4c:3b:78:
25:de:1d:b0:95:ad:f4:f9:79:c3:23:0e:4d:ca:9c:42:97:40:
67:74:b6:14:fd:42:cc:b5:c2:84:c9:f1:4c:c5:24:8a:84:e7:
ec:4e:de:9d:6e:18:43:eb:00:91:c6:57:c4:77:60:83:81:2d:
67:4e:f8:1c:6a:50:be:93:c7:2d:7e:0c:7d:1b:94:63:97:62:
57:45:94:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:31 2025 by rpki-client