Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa
File: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier: Tr8KoztX4g1WXnF+96HqpgOulMvRhy41cuaQJFwuUXc=
Subject key identifier: B7:AD:C2:A4:D4:87:30:28:A5:2B:A5:64:89:27:9F:D0:52:1E:AB:7A
Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial: 01E2DD04E8F1E9B14F701C214CD07E73BF451945
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa
Signing time: Sat 20 Jul 2024 12:00:00 +0000
ROA not before: Sat 20 Jul 2024 11:55:00 +0000
ROA not after: Sat 19 Jul 2025 12:00:00 +0000
asID: 24534
IP address blocks: 58.147.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e2:dd:04:e8:f1:e9:b1:4f:70:1c:21:4c:d0:7e:73:bf:45:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Validity
Not Before: Jul 20 11:55:00 2024 GMT
Not After : Jul 19 12:00:00 2025 GMT
Subject: CN=B7ADC2A4D4873028A52BA56489279FD0521EAB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:b5:88:34:3d:11:e9:6c:a5:e7:30:6e:cd:
d0:20:3b:3a:3a:e1:df:b9:f5:d6:35:bb:cd:65:3a:
d0:81:35:84:6d:aa:48:93:c2:b0:22:87:f5:56:bc:
26:3d:79:e6:23:cd:76:d3:49:c6:44:e0:53:fa:31:
27:ec:26:de:7c:c0:6b:2d:47:87:22:d5:2d:ce:51:
04:40:0a:54:29:13:87:58:df:40:0c:f7:ab:00:a7:
2a:c3:09:fc:5a:cd:3b:d5:64:86:dc:9b:3a:23:5e:
b5:5f:c0:0f:bf:73:fa:15:07:63:ec:34:70:42:53:
9c:06:6e:82:51:ce:d7:93:32:d9:2f:0b:a2:96:54:
b5:01:b9:6b:91:82:10:53:aa:c2:86:af:a2:8e:06:
de:e0:58:16:08:c9:e9:64:62:18:68:d2:2b:4a:1c:
5f:ca:dc:e4:93:53:0b:56:1c:1b:38:1d:8d:f2:86:
d9:82:9e:ef:bb:a8:57:38:a6:c4:92:d5:75:6f:e5:
86:5c:ba:7e:dc:3a:f1:ef:23:8d:63:3b:51:ad:7d:
45:15:03:fc:8c:f8:94:21:1b:d0:14:88:56:2a:1e:
4e:05:83:2c:60:b5:3c:c3:65:fc:fe:bc:42:10:22:
79:78:9d:5d:15:61:a4:10:f3:e7:93:db:cf:77:a2:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AD:C2:A4:D4:87:30:28:A5:2B:A5:64:89:27:9F:D0:52:1E:AB:7A
X509v3 Authority Key Identifier:
keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138382e302f32342d3234203d3e203234353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.147.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:53:f8:bb:05:8c:cd:4c:c9:d7:ed:63:fb:2e:19:0c:5c:75:
4e:2c:ee:8f:e6:7c:ea:98:88:95:72:ed:4a:10:04:ac:ee:21:
41:d3:fa:67:89:2f:20:0e:e4:31:41:80:a2:da:1f:c0:64:24:
43:61:60:51:b8:21:99:47:98:16:93:4a:81:74:ae:6c:5d:4e:
c0:3d:67:69:e9:3e:90:af:6d:09:63:88:07:f4:ec:21:29:e6:
64:42:fe:7e:24:af:2d:37:46:54:a4:c4:d3:7e:7f:78:f5:54:
45:84:e7:c7:9b:ea:c3:2d:0f:4f:4b:f1:68:08:96:ce:b9:68:
59:46:85:82:64:b6:86:a8:3c:a9:92:c8:bb:b5:24:f7:3d:d9:
4b:ec:ac:5b:f6:50:10:ef:12:29:30:7b:5b:60:2c:fd:67:a2:
a6:ec:19:1b:79:b0:c1:00:42:e5:bc:5c:24:8d:40:c5:85:62:
81:eb:33:5b:6f:2a:e6:8b:0d:a4:5e:73:34:f2:70:4d:78:2b:
a6:36:aa:61:d3:02:15:8d:21:cf:27:2c:bd:ab:d5:ee:6f:5a:
10:dd:0c:69:41:90:06:e0:27:8a:07:51:05:8b:14:4f:d2:02:
9c:a0:92:ac:47:ea:80:aa:4d:23:58:a9:7f:84:f4:b4:b7:35:
e7:ae:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:04 2025 by rpki-client