Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32342d3234203d3e203436303233.roa
File: 3137352e3130362e382e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier: bvgWi5KwAbxj4+qnsZngX5dz87jfKBXVEq0UZmnF738=
Subject key identifier: DB:59:F1:1B:EC:86:6C:2E:38:AE:EA:B2:0A:6A:EE:C7:C0:05:CE:E4
Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial: 7D26D7C4E3FDA20290A9069B21212815DD097FF7
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32342d3234203d3e203436303233.roa
Signing time: Mon 12 Aug 2024 15:25:26 +0000
ROA not before: Mon 12 Aug 2024 15:20:26 +0000
ROA not after: Mon 11 Aug 2025 15:25:26 +0000
asID: 46023
IP address blocks: 175.106.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:26:d7:c4:e3:fd:a2:02:90:a9:06:9b:21:21:28:15:dd:09:7f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Validity
Not Before: Aug 12 15:20:26 2024 GMT
Not After : Aug 11 15:25:26 2025 GMT
Subject: CN=DB59F11BEC866C2E38AEEAB20A6AEEC7C005CEE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:5a:fd:22:c3:eb:17:40:68:9a:aa:c3:76:
73:1e:2a:50:1c:ea:1b:fb:28:40:4d:cf:fa:77:be:
d7:d0:0c:70:5b:7b:c5:af:4f:5b:c9:32:68:a8:01:
85:1c:d1:79:94:09:68:98:ba:6d:38:9e:67:31:ff:
54:6d:3e:8c:b2:e3:6e:cb:7c:8d:b6:17:c6:cb:d5:
94:f4:7a:b3:01:6d:ec:ee:8d:f5:4c:b5:19:9b:5a:
e9:b8:2a:45:07:22:3c:6e:ad:10:20:ec:d4:12:af:
9c:4c:f0:ac:4a:47:af:90:1e:6a:78:09:e5:b3:5e:
3b:35:fd:20:40:a2:c2:c5:b6:af:5a:e7:d6:8c:fb:
2a:a5:47:26:18:5f:e9:9d:71:df:46:3a:68:0c:41:
bb:a8:8c:45:c2:39:98:9d:eb:72:6c:a9:be:e0:16:
ac:dc:72:4c:19:f3:7b:54:b1:1e:a5:13:85:b9:dc:
0a:e9:13:df:04:5c:17:d1:a8:79:7c:bd:0a:05:fd:
d5:e6:55:f5:b6:0d:c7:75:13:50:c6:4c:eb:18:72:
be:c8:3a:a4:78:0e:9f:97:77:00:a4:89:b8:41:6d:
cb:80:0d:0d:a9:cb:30:35:05:c7:38:2d:92:90:14:
b4:b9:3b:d3:7f:a2:ec:c3:e6:07:d4:c3:da:b0:d0:
46:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:59:F1:1B:EC:86:6C:2E:38:AE:EA:B2:0A:6A:EE:C7:C0:05:CE:E4
X509v3 Authority Key Identifier:
keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32342d3234203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.106.8.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c1:26:c9:78:1d:5e:b0:f8:78:bb:b3:a7:fa:4a:da:63:b9:
76:4f:36:e8:a6:ce:ea:6e:e9:c8:1f:ec:ae:7c:03:3f:e0:60:
6d:d8:31:94:74:16:b4:7e:50:e7:03:7e:f6:c0:4c:86:9e:52:
db:8b:66:95:89:cb:91:da:14:75:7a:e8:1d:c0:f0:dc:8d:da:
9e:88:fc:7d:73:4b:d6:91:aa:8c:4d:18:a5:6f:72:ba:d4:a8:
49:93:47:aa:c7:01:d2:ac:12:51:8b:37:ee:ff:ef:c1:72:88:
c5:54:94:33:af:62:05:a2:a1:56:ba:a3:2b:2b:5f:7b:b7:d1:
fc:17:bb:8b:89:50:5c:44:53:3b:c7:38:e5:9b:70:77:fa:36:
b6:4a:42:4c:ea:04:45:bb:5d:2f:89:f6:99:96:91:b4:2d:d8:
d9:33:fc:0e:a6:34:84:57:de:b4:48:0a:9d:4b:26:90:bc:b4:
be:30:0c:29:67:67:16:af:24:7b:e5:f2:c2:97:c5:0b:41:bd:
de:4e:68:dd:5e:c7:bf:23:b2:a3:af:44:a5:2c:a6:02:f2:0f:
2f:f7:11:ec:5a:4b:8c:a2:74:4d:f6:2a:49:41:96:06:7d:e4:
d7:6a:97:a0:61:56:6c:0d:3b:23:fb:0a:5d:b7:0d:e4:53:1a:
0d:e8:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:38 2025 by rpki-client