Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203338373634.roa
File: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (raw, json)
Hash identifier: BX9QXEo5+DeT0FFJeJtGFqqCX7is6TLuP+owGzNXawI=
Subject key identifier: 20:27:A9:9A:AC:3B:F4:65:6A:F1:13:34:BC:0E:BC:00:AE:84:C0:1C
Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251
Certificate serial: 3837FAE35BB5AF99D0DB341427982CC3E514381C
Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203338373634.roa
Signing time: Wed 20 Mar 2024 10:02:07 +0000
ROA not before: Wed 20 Mar 2024 09:57:07 +0000
ROA not after: Wed 19 Mar 2025 10:02:07 +0000
asID: 38764
IP address blocks: 120.29.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:37:fa:e3:5b:b5:af:99:d0:db:34:14:27:98:2c:c3:e5:14:38:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251
Validity
Not Before: Mar 20 09:57:07 2024 GMT
Not After : Mar 19 10:02:07 2025 GMT
Subject: CN=2027A99AAC3BF4656AF11334BC0EBC00AE84C01C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:29:32:ad:3f:4b:38:b6:58:c4:4c:b5:7a:
96:52:4b:ea:16:fd:5a:b8:ef:e6:ee:81:d4:99:e8:
5d:e8:5d:70:43:84:86:a8:44:f7:50:1f:03:d7:de:
e9:4a:94:76:ae:a7:86:1d:57:a4:86:01:83:29:66:
af:d6:18:ef:3c:37:f0:ce:68:16:a0:1d:96:b4:48:
03:87:9e:68:68:52:55:41:54:61:78:e0:ea:44:9d:
05:f7:59:76:4d:d5:1e:36:cd:32:d5:a3:4a:66:46:
fb:8c:3a:b2:03:e8:5a:5f:b2:7f:eb:3e:29:c7:0f:
0c:47:85:f2:f8:62:62:b5:cf:b1:bf:10:d1:28:e8:
c2:a1:19:2f:8e:42:08:2a:40:70:54:cb:96:e4:94:
14:40:31:9f:e7:8a:86:db:9f:c6:1c:c4:62:8c:85:
8a:53:80:c8:69:d7:27:4e:42:bd:f4:66:8e:96:cd:
c0:d9:77:9e:fc:1c:b3:82:31:0d:d2:65:74:ec:94:
73:bf:9a:29:27:0d:e9:23:44:b2:cc:4a:1a:23:31:
30:b0:e1:ee:89:77:8a:92:2f:64:db:93:0c:f9:7e:
0c:f6:08:84:e6:0a:81:5e:70:16:4b:89:58:29:52:
5c:53:ff:fd:31:e4:2b:2b:42:2d:f1:03:1c:e8:58:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:27:A9:9A:AC:3B:F4:65:6A:F1:13:34:BC:0E:BC:00:AE:84:C0:1C
X509v3 Authority Key Identifier:
keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3232392e302f32342d3234203d3e203338373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.29.229.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8a:9a:3b:06:22:8e:7c:3a:81:22:4b:46:b1:6c:2e:5f:a0:
76:c8:cc:66:fe:3a:9c:71:b2:e2:6e:18:b2:41:e8:a1:c9:61:
d9:f6:d1:9c:4b:e8:e1:ec:77:85:87:a5:8b:1f:d8:47:db:55:
96:0b:9a:53:60:b4:1a:48:b8:30:47:03:07:e5:e3:81:1c:76:
5d:5f:6f:ae:0c:a3:2e:3a:41:b6:15:bc:5e:bb:91:25:e1:b0:
7b:66:ee:41:4a:ee:88:07:75:d6:ad:ca:a3:f7:2b:7a:25:ba:
12:d3:d3:2c:05:8e:a5:03:c5:9f:b9:97:6d:59:3f:c6:0b:e2:
14:b4:56:98:5b:e7:c2:d1:72:08:97:92:01:ee:38:c1:c7:5f:
c7:bf:14:2b:03:97:57:8b:26:e4:31:e6:9c:fb:0d:0c:e9:4a:
48:47:0d:5c:84:de:87:37:4f:5c:5d:3c:3c:9f:2e:13:5b:d8:
70:39:98:2d:19:ca:fc:59:68:fc:7f:e4:09:d2:60:2a:cb:3f:
1a:f5:68:68:a1:b6:51:39:8f:5a:15:25:3c:d3:ee:b3:f9:37:
26:a8:85:cf:58:4d:32:43:fe:e5:ce:91:5c:6a:de:19:56:36:
c8:ea:bf:14:34:01:23:cb:fd:05:ef:8b:db:12:d1:09:eb:5d:
a2:fe:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:02:49 2025 by rpki-client