Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e203338313433.roa
File: 3230322e3136392e3234382e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier: L6pEG9OhAzYEAGOerzX9Qn4ANwT+1ekx5/wMVBDoACE=
Subject key identifier: C5:93:24:EA:D3:93:B9:3D:97:C8:1F:0E:60:EF:05:42:B8:10:34:8E
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 1E2173AA112052FCA0262E8D416FDF288377FA24
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e203338313433.roa
Signing time: Tue 18 Jun 2024 06:00:01 +0000
ROA not before: Tue 18 Jun 2024 05:55:01 +0000
ROA not after: Tue 17 Jun 2025 06:00:01 +0000
asID: 38143
IP address blocks: 202.169.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:21:73:aa:11:20:52:fc:a0:26:2e:8d:41:6f:df:28:83:77:fa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Jun 18 05:55:01 2024 GMT
Not After : Jun 17 06:00:01 2025 GMT
Subject: CN=C59324EAD393B93D97C81F0E60EF0542B810348E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:64:40:52:12:9f:a6:ab:b4:0e:8d:3e:fc:
59:33:dd:89:5a:6e:df:da:04:9b:5e:e2:d3:bb:db:
c6:8d:18:cc:3f:46:19:32:a6:28:1b:1a:31:fa:8a:
a7:2e:ee:96:26:bc:0b:68:81:8a:70:73:1b:f1:06:
b1:bd:a5:89:e9:6f:0c:af:1d:54:a8:e3:07:3d:39:
79:2b:3f:87:d9:1a:aa:df:ee:0b:31:cd:dd:d8:4d:
b6:79:83:90:6d:ad:56:c3:2f:3d:47:95:25:73:d6:
7e:28:29:04:35:23:5e:cf:d9:b6:8c:c4:a3:43:35:
9a:9c:5c:f6:b8:4f:bb:5a:c9:09:53:86:7a:f7:8c:
8d:ad:ff:33:f4:be:e4:8f:ee:0a:97:6f:b5:d1:fd:
55:e2:49:0b:87:3d:2a:86:07:c8:5e:60:d3:b0:33:
65:5d:6a:d6:ee:15:6c:1b:3b:78:50:30:0e:98:6e:
a6:51:64:76:a6:bb:6e:70:69:4f:3b:d2:67:11:c8:
73:2a:05:62:18:1b:5e:f4:68:c8:2b:80:1f:dd:0e:
5b:58:1c:3a:0c:6d:bb:ac:70:7b:43:47:aa:1e:53:
d2:71:98:24:5a:22:81:f4:ad:d0:a5:53:f7:6b:9e:
21:c7:0e:88:0b:3d:01:a1:ca:f5:9e:53:32:06:0d:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:93:24:EA:D3:93:B9:3D:97:C8:1F:0E:60:EF:05:42:B8:10:34:8E
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:16:23:59:06:78:78:fb:16:94:07:8c:1e:d5:c6:7f:f5:3c:
0d:c3:50:36:c0:7e:a7:0c:4e:66:2c:03:62:ef:20:68:f7:ce:
92:38:3c:51:ae:e1:d3:de:c7:87:60:54:62:ad:a5:0e:76:94:
23:eb:af:08:1b:00:da:b7:50:e0:59:89:b0:02:87:60:b9:2f:
b6:93:95:74:2c:79:c8:ce:57:e2:25:21:64:d9:74:2b:4c:16:
aa:4b:c7:cd:0e:64:3b:13:41:ba:26:ac:19:8e:70:13:4d:bd:
e0:72:e1:6a:05:29:fe:b7:f5:be:11:dd:e9:0e:89:f3:20:aa:
b4:8c:0f:9f:cd:4b:54:ae:04:72:cd:6f:8f:5f:45:c3:a4:f5:
2d:4c:46:6b:8a:7e:f5:70:23:51:93:d4:59:c7:4e:9f:8c:27:
eb:88:06:1c:54:f8:38:4f:b8:7f:d5:64:12:0b:24:6b:64:7f:
54:75:bd:8b:97:fc:53:8b:b8:25:9f:74:41:68:50:d5:72:9f:
54:f4:3f:47:96:75:6c:3f:d3:f1:47:96:a6:ab:24:48:26:6f:
93:ce:04:19:b7:eb:aa:1c:83:8a:42:e3:7f:d2:54:81:c4:b7:
b8:4d:a4:b1:56:58:af:b1:59:81:9c:72:8a:31:1b:f9:a5:3d:
f2:15:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:11 2025 by rpki-client