Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
File: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=
Subject key identifier: C4:85:60:8D:F2:F3:B9:AE:CE:90:03:AE:D5:A3:AB:A3:F1:EA:71:12
Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
Certificate serial: 6A33967F7C20156DE45F483FD69D518E66D5A303
Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
Signing time: Wed 19 Mar 2025 09:54:19 +0000
ROA not before: Wed 19 Mar 2025 09:49:19 +0000
ROA not after: Wed 18 Mar 2026 09:54:19 +0000
asID: 133800
IP address blocks: 202.74.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:33:96:7f:7c:20:15:6d:e4:5f:48:3f:d6:9d:51:8e:66:d5:a3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
Validity
Not Before: Mar 19 09:49:19 2025 GMT
Not After : Mar 18 09:54:19 2026 GMT
Subject: CN=C485608DF2F3B9AECE9003AED5A3ABA3F1EA7112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:11:67:59:e7:ac:39:0e:83:a7:1c:cc:c3:
54:07:87:5c:b1:b4:6a:e4:60:d2:b5:21:90:fb:ed:
74:6d:60:91:1b:00:df:d9:61:4a:20:81:2d:e0:30:
c7:f6:b4:cc:79:79:1f:ff:00:e6:bb:e0:d8:64:38:
3f:e2:9d:10:85:1c:88:db:0c:63:df:a3:2b:34:53:
3d:8f:2a:94:f9:7f:a6:57:0b:6c:e2:63:26:5b:f4:
39:e8:d6:cc:f4:cc:99:84:e4:fd:60:b8:50:f1:61:
8a:14:d8:7f:56:01:3d:71:27:c8:3c:5b:1f:3a:70:
87:b0:8c:f8:c7:f2:ef:2a:1c:39:29:2a:74:45:3f:
de:c9:a2:c1:fd:ed:9f:0a:9e:ef:ea:75:8d:60:ac:
58:69:c2:4a:1d:43:41:6a:6b:ad:99:46:ec:a3:51:
b4:97:a1:d8:63:c1:a4:65:76:20:c1:2f:b2:c5:ef:
13:59:72:9f:cd:1e:60:37:e7:15:cf:0c:59:80:37:
ce:36:30:9a:c0:44:68:85:a9:d6:0a:5b:0e:67:0e:
a1:d8:55:88:a7:a7:ed:7e:bf:6c:67:e7:47:0a:07:
b2:ce:6e:25:60:c1:54:53:33:4e:b6:91:22:67:5f:
31:01:aa:62:b5:db:43:92:9f:37:70:5d:50:3c:a7:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:85:60:8D:F2:F3:B9:AE:CE:90:03:AE:D5:A3:AB:A3:F1:EA:71:12
X509v3 Authority Key Identifier:
keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.74.74.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:7d:05:6f:2e:78:c6:79:0b:18:a2:91:2f:b6:03:8b:fd:47:
3a:6d:25:ee:e9:0e:91:8d:d7:0f:f6:82:90:59:a9:c0:2d:61:
4b:86:d4:bd:54:b2:77:1f:af:c7:20:2c:1b:57:6c:41:d7:62:
ec:c3:dd:44:de:e4:44:c9:0c:0c:4e:1d:90:3a:37:e1:cb:51:
d2:51:6a:dc:21:d9:23:77:95:84:6e:df:9d:73:b6:cd:05:ab:
01:60:ae:66:1c:f6:6b:da:6f:47:e7:a7:8d:20:dd:af:a1:4e:
5f:9e:af:a1:80:fa:ed:6f:a4:6e:fb:8b:fb:79:2c:a6:39:a7:
e2:65:fe:74:76:48:7a:57:9b:b8:7e:2e:e4:04:7b:4f:30:9f:
0b:7f:6b:03:11:52:7e:e0:53:42:99:23:79:9e:98:8c:45:c9:
fe:c4:56:36:c1:9e:dc:84:3e:61:f7:ca:25:71:e5:b1:92:30:
92:ff:11:13:f3:76:33:cf:03:47:1b:3b:e6:9f:3f:84:31:39:
08:c5:5b:d0:c7:5a:24:46:79:1b:f1:6d:6f:92:e0:d3:5d:34:
b5:6f:86:66:c9:56:2a:96:6e:2a:f2:41:ce:6d:fb:85:df:6e:
a9:e7:15:18:f6:3e:02:b1:1d:f7:c8:02:fe:7f:a1:71:d5:e7:
2b:cd:ef:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:07:26 2025 by rpki-client