Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
File: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier: TBYiidUmRB4B4AnNGe8/OkhNHvV8B02mLtlF0GlENt0=
Subject key identifier: 7C:3A:AE:48:F5:FD:03:64:51:84:71:6A:8A:68:4B:96:ED:F5:02:12
Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial: 1645EC332DF15DB4A689D940F31DD4F87D646303
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
Signing time: Tue 09 Apr 2024 10:01:10 +0000
ROA not before: Tue 09 Apr 2024 09:56:10 +0000
ROA not after: Tue 08 Apr 2025 10:01:10 +0000
asID: 55690
IP address blocks: 42.62.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:45:ec:33:2d:f1:5d:b4:a6:89:d9:40:f3:1d:d4:f8:7d:64:63:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Validity
Not Before: Apr 9 09:56:10 2024 GMT
Not After : Apr 8 10:01:10 2025 GMT
Subject: CN=7C3AAE48F5FD03645184716A8A684B96EDF50212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0e:f5:e8:00:23:f3:09:87:b6:3d:f6:66:b2:
f0:50:ff:98:13:98:25:96:9e:a7:62:29:53:03:0f:
3c:41:47:88:e1:d8:73:1d:38:e3:6f:23:04:da:7b:
d4:66:b8:03:a9:75:22:8c:1a:ed:29:d8:9d:d4:89:
72:c3:b9:9a:89:1b:da:0a:92:12:59:ad:18:97:66:
6e:f0:3d:3a:93:ec:da:91:ef:18:4c:58:ec:aa:f3:
5a:3c:37:8e:32:dd:23:e1:6a:94:ab:b0:11:b2:bd:
80:64:13:32:a6:18:1e:f5:ac:50:71:5e:19:2f:80:
50:f5:d3:64:39:0b:11:c0:04:51:38:2b:22:fd:f4:
58:d8:18:2e:86:11:21:fb:a7:e7:76:54:69:15:a4:
67:37:f4:b7:39:f5:bc:18:3c:f5:7a:db:fb:ca:a4:
77:9e:7a:0d:45:7d:68:d8:b7:33:04:42:ed:c3:ce:
a4:d6:1a:62:23:2e:45:d4:6a:a5:58:f6:24:ed:a0:
65:b3:ab:5c:54:1e:60:42:68:5c:9b:25:30:b8:93:
72:30:a2:9a:53:b8:e0:53:71:67:21:2d:eb:f0:df:
75:9d:b1:0d:c2:03:52:0e:dc:45:e1:72:ec:3a:da:
c1:4e:c7:a2:94:dd:9c:1b:b7:89:3a:ab:2f:94:b1:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3A:AE:48:F5:FD:03:64:51:84:71:6A:8A:68:4B:96:ED:F5:02:12
X509v3 Authority Key Identifier:
keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.176.0/24
Signature Algorithm: sha256WithRSAEncryption
66:81:47:f7:1e:35:a1:b5:e4:d3:ad:9f:ba:e6:fd:46:06:9f:
22:bf:73:38:03:b8:ae:df:ef:8a:8b:e0:44:38:f6:2c:79:f7:
6d:84:6c:c0:4b:d7:fe:42:50:ce:52:2c:7e:cd:d5:2b:c7:83:
db:0b:4a:98:7f:15:9a:b0:cd:b5:46:2b:7c:a2:74:8b:8c:b7:
ce:06:0e:33:20:68:c2:6c:4d:eb:cd:4a:c7:f3:02:da:c0:f0:
42:d3:5b:b3:e1:09:d5:c4:ca:3a:dd:5a:06:88:82:aa:44:86:
6d:31:66:55:3f:53:75:7a:cd:31:9a:d4:83:4c:7b:0b:21:41:
a9:c0:35:45:3d:bb:2a:58:d3:15:42:d3:48:29:27:b4:35:90:
aa:51:54:46:9e:52:9b:bc:a4:01:b8:2b:31:ec:b1:2f:43:b1:
6d:ee:d3:a8:59:04:aa:a8:a6:a7:af:f0:c8:cd:f3:ed:ba:7b:
61:a9:80:e2:38:b7:f6:48:08:9c:8c:98:7a:03:e1:82:34:85:
a3:d3:bf:a6:5b:9f:ce:48:b8:a9:95:4c:5f:7a:7b:5c:22:68:
21:54:27:21:33:ba:77:43:1f:57:63:44:60:03:55:c7:01:84:
a0:59:94:7c:b0:8c:eb:77:eb:02:b2:b1:d5:39:57:e5:9d:42:
73:68:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:38 2025 by rpki-client