Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232302e302f32322d3232203d3e203538333639.roa
File: 32372e3132332e3232302e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier: HFZglbqfvUJ5UUA05mfoJxHTzCX9kcrV779daMxFWWI=
Subject key identifier: 19:9B:09:D4:DF:41:8B:DA:1E:48:7C:A6:35:0C:85:A6:32:2C:1A:67
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 5D659DEC9D0BA3E03FC68521B3B07E2FB4E491C0
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232302e302f32322d3232203d3e203538333639.roa
Signing time: Mon 01 Jul 2024 01:04:31 +0000
ROA not before: Mon 01 Jul 2024 00:59:31 +0000
ROA not after: Mon 30 Jun 2025 01:04:31 +0000
asID: 58369
IP address blocks: 27.123.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:65:9d:ec:9d:0b:a3:e0:3f:c6:85:21:b3:b0:7e:2f:b4:e4:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Jul 1 00:59:31 2024 GMT
Not After : Jun 30 01:04:31 2025 GMT
Subject: CN=199B09D4DF418BDA1E487CA6350C85A6322C1A67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:05:da:31:fc:3b:84:e6:96:e5:5f:30:5d:
7d:5c:6e:8f:e1:19:26:a1:f1:e7:32:bf:2a:20:92:
ee:c3:4e:18:30:a1:ff:36:0b:58:71:2a:b3:2a:a8:
5f:cf:e7:39:92:21:35:8c:58:63:fd:69:0e:93:39:
d4:7d:ee:5d:7c:18:64:2a:77:cf:b8:fd:b6:17:6a:
89:22:2f:52:19:e8:48:f4:cd:ff:3d:53:46:28:4d:
4d:46:49:a0:cb:12:1f:dd:e9:36:8f:85:3f:9c:ba:
a2:7f:c8:29:ef:03:d9:86:3f:b7:f1:10:06:9d:18:
d5:39:ef:4a:cb:93:85:a8:16:ac:fa:7a:01:11:c4:
ce:49:5c:5b:fd:17:52:7a:45:d3:5d:ea:3c:d5:f0:
21:eb:65:d2:d0:2c:f9:39:42:66:0a:21:a0:06:c7:
0f:68:d9:43:f4:38:93:34:a9:14:e0:7e:ef:19:c3:
b1:aa:1d:07:ff:d1:e8:f4:0d:47:4c:cd:09:29:5c:
1a:24:a4:34:2d:23:fe:af:02:18:4b:05:b1:dd:b5:
51:10:d4:81:77:45:68:b8:d9:70:f3:c9:b5:ba:1d:
46:25:9b:44:7f:6d:e8:3f:55:da:3a:31:90:d4:b3:
83:00:00:bd:66:a7:e8:3d:c6:35:9a:e2:9d:76:f0:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9B:09:D4:DF:41:8B:DA:1E:48:7C:A6:35:0C:85:A6:32:2C:1A:67
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232302e302f32322d3232203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.123.220.0/22
Signature Algorithm: sha256WithRSAEncryption
41:52:69:6c:41:6d:63:0b:24:b7:c8:87:ce:6f:33:15:28:34:
39:4a:89:58:8e:1d:5b:d5:d6:60:34:52:76:5e:14:a0:bb:0a:
82:c1:87:d1:b4:c8:8f:0b:d2:4f:cf:d7:a5:5a:cf:c5:3e:66:
fb:9a:cc:e3:e8:31:1e:7f:13:82:84:d9:a3:f3:c1:75:ab:01:
b1:2f:22:44:7a:7b:f4:e5:3a:28:c2:ff:99:11:4e:3d:2d:3c:
55:fe:bd:8c:3a:46:f1:8d:fa:ac:b5:6f:19:9c:a2:1d:8e:6e:
69:05:74:97:26:1f:25:e9:91:09:dd:71:2b:25:5e:de:93:5e:
16:49:62:64:1e:25:0a:77:82:62:7c:9c:52:cf:89:5b:dd:a2:
19:b5:ea:37:7f:6f:1d:11:41:a0:d0:ae:22:02:72:12:5a:39:
c2:e7:cd:77:ad:aa:d3:97:20:83:f0:49:a8:b5:cf:af:a9:e9:
e9:71:6f:49:14:73:23:96:a5:2c:e8:47:e4:83:f2:85:e6:45:
ef:d8:9a:a2:6b:5a:0e:1d:22:7d:6e:85:05:1c:7e:16:4e:1a:
c3:8c:18:6b:0f:24:8e:80:f5:12:92:17:ee:b4:60:0f:62:81:
6c:31:81:b9:a7:1e:c5:11:ef:da:b2:6b:e8:7f:f7:db:be:89:
b8:d9:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:30 2025 by rpki-client