Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa
File: 3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa (raw, json)
Hash identifier: VVGF2t5EsBSlgMF476rTNcfQjJvym7o1JetmeOmmEfY=
Subject key identifier: 7B:01:CE:40:39:5E:8E:15:FE:EF:17:C4:C3:C4:22:81:C3:66:A3:0F
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 1D842D14D4A3E5FF363425E3311EE387BE4C4D99
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa
Signing time: Mon 01 Jul 2024 01:04:34 +0000
ROA not before: Mon 01 Jul 2024 00:59:34 +0000
ROA not after: Mon 30 Jun 2025 01:04:34 +0000
asID: 58369
IP address blocks: 116.197.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:84:2d:14:d4:a3:e5:ff:36:34:25:e3:31:1e:e3:87:be:4c:4d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Jul 1 00:59:34 2024 GMT
Not After : Jun 30 01:04:34 2025 GMT
Subject: CN=7B01CE40395E8E15FEEF17C4C3C42281C366A30F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:98:d0:ff:c5:a8:77:dd:35:0f:25:ba:39:
9d:c9:48:5f:f5:d7:4e:2b:42:7f:e7:af:5a:13:61:
c0:48:a4:a0:25:1d:eb:2a:9e:8e:f3:ea:10:76:00:
ac:da:b4:92:6e:02:c1:05:25:f9:f8:f6:ca:56:ac:
9c:dc:13:c2:43:f3:d7:d5:94:3f:95:6d:89:1b:8c:
55:c2:54:86:98:1f:82:dc:32:61:46:46:e9:2d:6c:
dd:cf:af:05:6e:e4:5b:f8:f2:64:7c:bf:a8:c0:ce:
fb:13:0b:ab:c8:e4:36:84:98:82:3d:29:f0:fe:cb:
a5:a1:52:4f:6a:8f:82:1e:7f:78:71:7c:68:fb:cb:
a4:0a:6a:aa:dd:db:41:a4:6f:07:99:24:46:4e:3f:
2f:7e:44:60:23:fa:c7:17:dc:b1:e8:31:28:49:58:
e0:a7:f6:80:b8:69:16:a9:67:39:12:d6:a8:73:42:
b2:50:1e:6a:dd:be:7d:d9:d4:ba:99:d1:87:9b:4d:
ec:93:6b:2a:be:b9:4c:5a:69:eb:0f:2f:9c:e0:79:
95:1f:30:ae:37:87:8c:9a:43:3a:14:08:02:77:4b:
46:73:0e:6a:40:0f:ca:12:80:b5:30:b8:66:19:59:
81:be:30:59:6f:9a:44:93:bc:a2:40:a8:ed:27:fd:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:01:CE:40:39:5E:8E:15:FE:EF:17:C4:C3:C4:22:81:C3:66:A3:0F
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.197.128.0/21
Signature Algorithm: sha256WithRSAEncryption
78:6b:08:68:83:ce:af:6b:fb:5c:bd:b8:44:dc:53:ee:4f:e2:
1d:04:6e:1e:12:b5:dc:3d:1c:02:47:ef:74:15:6c:56:38:d8:
b7:fb:0a:fc:59:72:f4:11:b8:ff:d7:d7:74:0f:b4:44:13:bd:
c9:a9:42:72:e4:26:c2:a1:66:9b:14:0c:19:7f:ab:4d:2f:9c:
46:08:ba:c7:00:8c:fe:3c:5d:db:9e:22:56:60:dd:1b:f5:5c:
d5:14:40:aa:d1:b5:95:1f:f6:3f:d3:10:4e:0f:2a:15:59:15:
16:15:33:71:90:15:84:7f:17:a0:d6:73:bc:fe:49:06:03:2d:
3a:42:f0:c9:91:5c:fe:ac:a2:7c:ec:dd:ab:c7:15:d3:c4:77:
82:ce:10:f1:a0:51:6e:f3:8d:d1:1a:1c:21:d5:11:de:5a:cc:
a6:57:1a:c2:72:2c:fa:1e:44:a0:70:57:97:dd:ec:de:ad:4f:
eb:1f:db:79:6e:02:3c:55:04:14:c2:fa:57:9b:2d:8c:c3:18:
5b:44:9d:07:81:e8:2d:bb:7a:af:28:ca:a5:ab:dc:ef:f0:cc:
93:13:e4:85:52:87:50:9c:3e:91:d7:30:97:67:16:14:8d:c5:
90:e5:91:1b:d4:f9:a7:8b:d4:42:72:57:94:3b:1d:f5:e1:cf:
c9:14:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:07 2025 by rpki-client