Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32322d3234203d3e203436303233.roa
File: 3137352e3130362e382e302f32322d3234203d3e203436303233.roa (raw, json)
Hash identifier: +UZ4X6o1F6EL5roKaCeOhxG1kawlmtHDGSCS3FAi6TM=
Subject key identifier: BB:7E:AE:1D:CF:3B:48:35:B5:DD:5D:9C:B7:31:55:81:F0:8B:73:1D
Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial: 6CA5393364321B3BE20EC47A312ECF6F65424783
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32322d3234203d3e203436303233.roa
Signing time: Tue 12 Nov 2024 15:04:16 +0000
ROA not before: Tue 12 Nov 2024 14:59:16 +0000
ROA not after: Tue 11 Nov 2025 15:04:16 +0000
asID: 46023
IP address blocks: 175.106.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a5:39:33:64:32:1b:3b:e2:0e:c4:7a:31:2e:cf:6f:65:42:47:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Validity
Not Before: Nov 12 14:59:16 2024 GMT
Not After : Nov 11 15:04:16 2025 GMT
Subject: CN=BB7EAE1DCF3B4835B5DD5D9CB7315581F08B731D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8e:3f:8f:bf:61:db:d0:34:08:78:6e:1c:e2:
54:ae:b2:a0:b5:b1:48:0a:9f:f0:f2:4f:b3:82:2b:
0a:d8:a1:e5:f5:59:04:d8:8c:8a:d3:81:a4:ee:78:
ff:fe:fe:fc:16:f4:1b:bb:01:f9:2a:22:90:0c:3c:
30:c5:82:9f:dc:8d:83:32:89:e0:2d:09:fb:88:61:
38:f4:1e:0c:53:2e:d5:ba:b6:17:79:cb:7a:25:ab:
a4:75:2a:19:f1:f6:26:50:99:d2:6f:8c:74:0b:74:
6b:17:94:b4:d3:ad:c5:cb:3a:38:fa:28:40:0b:a3:
f9:9f:59:c0:90:b0:89:a8:d5:29:49:b4:7d:c3:70:
39:55:d8:cb:0b:99:f8:cc:c0:5a:52:9a:f7:75:39:
ba:fe:60:8a:65:15:71:3a:d6:4d:92:c8:cf:37:1a:
9e:14:85:d2:79:03:e3:fb:ab:30:72:d6:6a:1e:48:
5e:77:82:4b:5b:95:0f:77:3d:8e:21:a4:1d:2b:7e:
a3:a7:9a:13:7f:66:11:c8:fb:80:8a:8a:1a:47:c8:
55:5d:b9:f2:29:80:5c:c6:74:12:d7:bd:73:c6:ce:
91:41:c2:d5:49:ca:d8:50:d6:45:70:8f:22:a9:86:
5b:3d:06:75:13:f2:8c:f5:b6:6f:fc:4b:85:f7:2c:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7E:AE:1D:CF:3B:48:35:B5:DD:5D:9C:B7:31:55:81:F0:8B:73:1D
X509v3 Authority Key Identifier:
keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32322d3234203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.106.8.0/22
Signature Algorithm: sha256WithRSAEncryption
83:44:b4:1b:15:7e:51:5d:56:16:ea:8c:7f:f6:4b:66:d1:5e:
bf:58:0a:5f:39:41:a9:f5:20:5e:e7:bd:64:fd:74:47:98:50:
7c:46:04:89:29:fd:d0:c9:aa:77:d7:63:96:1d:18:7b:cc:1a:
c1:3e:e4:77:e0:a7:45:7b:8b:ca:2a:7a:49:c0:34:51:92:02:
29:ed:2e:f2:8d:f2:eb:e3:a1:17:98:e2:5b:e8:0f:98:4a:18:
d8:8c:0a:50:b6:e9:6a:ef:f9:ce:64:b2:87:24:4b:d1:24:53:
af:fa:e2:d3:ff:08:8a:8f:51:2b:00:35:76:9e:f5:1b:51:73:
83:aa:64:3f:a1:a0:98:c2:8d:6c:46:f3:aa:9d:c6:eb:fa:1c:
4a:73:ed:af:16:89:7f:3d:9a:a0:5f:8a:9c:66:cb:da:a2:8b:
08:14:d1:cc:f5:2b:23:73:fc:aa:53:9b:c0:bc:28:c1:da:fb:
79:19:18:c5:cc:62:a4:b7:7f:19:8e:5f:2d:e4:90:f4:6e:40:
6e:6e:eb:e1:3e:db:d9:f5:98:8e:71:3a:2b:17:9c:95:53:43:
3d:5f:fb:a4:c5:68:cf:d6:3e:62:b0:e6:39:aa:fd:46:3e:22:
98:18:63:3f:96:79:03:76:39:f6:d2:1d:d0:1d:b0:b2:a1:78:
5e:ec:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:21:34 2025 by rpki-client