Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137382e302f32342d3234203d3e203535363930.roa
File: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier: 1ZKcpMmJqaU3gGp5GNF27GAvGl7mJPmDYDXPl0ljM1I=
Subject key identifier: 3E:3B:CC:1A:28:9E:F3:AF:F2:96:98:9A:62:6E:6E:36:0A:E7:59:EC
Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial: 3BF17224AAF3C4750C80B6EAEA92B2EB68D35F27
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137382e302f32342d3234203d3e203535363930.roa
Signing time: Tue 09 Apr 2024 10:01:10 +0000
ROA not before: Tue 09 Apr 2024 09:56:10 +0000
ROA not after: Tue 08 Apr 2025 10:01:10 +0000
asID: 55690
IP address blocks: 42.62.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f1:72:24:aa:f3:c4:75:0c:80:b6:ea:ea:92:b2:eb:68:d3:5f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Validity
Not Before: Apr 9 09:56:10 2024 GMT
Not After : Apr 8 10:01:10 2025 GMT
Subject: CN=3E3BCC1A289EF3AFF296989A626E6E360AE759EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:8b:f6:58:a9:e0:ac:3e:e9:49:5e:87:63:
f7:6b:2a:d8:89:a4:37:5c:45:22:d4:aa:7e:5e:a1:
45:02:1d:bb:fc:95:d6:91:ee:a1:25:f8:3a:08:52:
e5:ac:15:c8:d9:ec:9d:50:b7:cd:1b:e9:39:b3:3c:
7d:67:57:b5:83:d5:08:eb:51:4e:2d:54:99:78:d9:
5c:d4:75:13:ad:37:03:27:53:a6:35:3d:54:65:bf:
10:99:d7:cf:e3:c1:0f:e7:75:41:74:09:e2:26:df:
a5:dd:b2:23:cb:b5:31:75:4d:ee:ee:9f:ec:f4:8a:
0e:d0:ff:f5:45:e4:8a:80:41:9b:48:d5:e0:48:bf:
30:e7:64:47:56:7e:ed:87:48:9a:a6:57:71:d9:7b:
69:19:05:cf:e3:36:4f:a5:57:08:a7:15:d6:fc:2d:
4e:a1:0e:4e:2f:f5:a3:2d:d2:34:af:e9:21:c5:f9:
d2:55:97:d8:4f:d3:8d:69:2a:e9:89:6d:41:81:7a:
82:06:9b:83:85:69:58:3e:27:f7:73:32:89:8b:72:
f6:b8:3e:c9:f0:d6:c3:8d:59:8a:46:4c:b8:7c:a7:
18:17:07:79:10:1b:7d:22:af:32:1a:46:d6:d2:68:
78:82:be:8f:6c:6a:b9:7d:82:e8:a9:82:2d:ee:86:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3B:CC:1A:28:9E:F3:AF:F2:96:98:9A:62:6E:6E:36:0A:E7:59:EC
X509v3 Authority Key Identifier:
keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137382e302f32342d3234203d3e203535363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.178.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:26:f1:0f:1c:27:cb:b4:69:6e:54:08:68:45:49:a2:d1:39:
12:02:18:bb:c3:96:a4:3d:00:18:b4:e9:34:fd:84:d7:a3:1b:
fa:ee:72:0a:3c:e3:9c:5c:33:ca:9e:ea:77:44:52:5d:d7:b7:
53:69:67:c3:9b:4f:47:99:ee:88:7d:4c:cf:d7:d0:36:a1:a4:
a4:6a:b6:b3:61:af:e5:6c:24:ec:3a:20:28:7b:9d:96:85:4e:
5f:a2:8b:16:b5:51:f2:eb:9b:9e:af:4c:5d:b5:d8:2e:11:ac:
7d:a5:74:df:96:03:45:ad:54:ff:5b:25:d8:d3:f1:28:74:89:
c0:27:e8:98:e5:25:cc:8f:4d:ef:25:7e:5d:a2:99:9c:0e:37:
94:b2:c3:dd:5b:e1:73:b2:31:9f:41:60:d2:4d:47:ce:75:dc:
cb:9e:3e:95:78:31:ac:33:b6:85:47:83:9f:1f:0c:0d:e5:b4:
fb:68:71:94:a7:b9:d0:7d:6c:7e:9e:8f:c8:f6:84:0f:cd:d7:
cf:cb:76:92:a0:17:bb:f2:0c:ce:b1:ef:a7:c8:3b:79:00:bc:
f5:7a:65:2b:1b:97:0b:95:dc:c8:a5:40:0e:1a:d4:29:45:fc:
25:68:b2:48:49:83:66:97:1e:43:97:68:23:39:8f:b6:42:76:
70:2e:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:49 2025 by rpki-client