Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa
File: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (raw, json)
Hash identifier: sVlYe4YwBTbjgpWjyM0IiuXuS9wKYuYxgEwsXXeb5wQ=
Subject key identifier: 3E:FA:34:3B:39:97:4B:35:9A:04:0A:CC:D6:51:5C:52:F8:68:C2:AF
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 15A9AF727C392AC057257D30CCB697708904EB88
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa
Signing time: Mon 01 Jul 2024 01:05:59 +0000
ROA not before: Mon 01 Jul 2024 01:00:59 +0000
ROA not after: Mon 30 Jun 2025 01:05:59 +0000
asID: 55701
IP address blocks: 43.252.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a9:af:72:7c:39:2a:c0:57:25:7d:30:cc:b6:97:70:89:04:eb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: Jul 1 01:00:59 2024 GMT
Not After : Jun 30 01:05:59 2025 GMT
Subject: CN=3EFA343B39974B359A040ACCD6515C52F868C2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:71:91:d5:cb:3e:56:b7:22:ed:63:67:e2:
af:3d:64:09:77:32:04:86:fe:6a:89:3a:17:54:0b:
72:83:ef:46:11:a8:ec:c2:a6:7a:5e:6c:53:72:d3:
a6:48:90:5e:c7:a7:e8:9f:2f:f6:ca:e8:69:a0:73:
1f:43:98:cc:f8:55:07:2e:8d:8e:2a:86:a9:d4:0f:
28:6e:52:1d:a7:f7:f7:2e:a8:46:94:ed:d9:2d:6f:
df:d9:62:b3:34:84:51:29:0d:d4:46:00:b3:2f:1d:
c8:ee:24:f7:83:fd:d4:39:cd:4a:c8:3a:ab:27:03:
62:21:4f:92:e0:7c:2e:07:80:30:0a:6a:e1:42:c4:
ec:65:46:2f:87:1b:c0:b6:9e:23:24:49:64:5e:60:
29:12:1e:27:8e:68:39:61:9d:3d:77:ff:e2:32:e7:
b4:eb:12:1e:ad:cf:1d:17:03:93:81:53:4f:1e:b0:
9b:8c:38:95:7c:ba:c0:15:d3:85:b8:53:8c:b7:c1:
86:b6:af:12:fa:aa:68:9e:66:8e:92:fa:19:36:f3:
47:c9:eb:73:5e:56:75:e7:25:cb:6e:b3:2b:68:f2:
c6:91:35:1c:24:4b:55:56:94:5e:5e:de:9f:7f:76:
c9:b2:3a:03:49:c0:f0:46:7d:12:63:af:ad:a1:20:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FA:34:3B:39:97:4B:35:9A:04:0A:CC:D6:51:5C:52:F8:68:C2:AF
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34332e3235322e3233362e302f32332d3234203d3e203535373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.252.236.0/23
Signature Algorithm: sha256WithRSAEncryption
67:a5:cb:3f:89:43:17:8d:d3:39:d8:12:ad:9f:2e:11:8b:ff:
89:b0:fb:7c:c1:5e:a6:2c:80:1f:8b:08:cc:4e:dd:0a:31:a0:
fe:32:95:d7:4f:1b:63:58:86:76:11:23:40:e1:5a:1b:ee:7d:
bc:e9:79:69:38:12:ad:e0:62:1e:a5:23:c2:74:57:a9:11:3d:
98:9b:04:f5:7a:6b:4f:cf:40:cc:10:9f:96:9e:70:64:c6:b8:
44:3f:cf:81:be:5e:e6:68:5b:58:e4:6a:c3:ab:2b:9a:c9:bd:
d0:1b:1d:66:a8:c0:f8:7d:71:f2:2c:3b:3b:18:2f:b4:b8:7e:
4a:3c:34:bb:2e:75:bf:dd:6d:35:90:03:d6:09:0d:b4:e8:ce:
07:41:8b:6f:89:dd:fb:bb:27:2e:4c:84:bf:09:29:f6:21:fa:
bf:39:02:03:39:ef:33:53:46:72:5b:8c:5b:ea:3d:1b:05:6e:
71:35:b7:68:25:62:1f:c5:64:57:0c:77:ab:68:93:44:a2:18:
e6:80:4a:62:5f:ec:9f:28:2a:1e:be:12:39:d5:fb:ae:5f:01:
1c:4d:f3:a1:b2:f1:6d:94:7c:c3:1f:16:61:7f:1c:a7:5e:e1:
43:2c:4f:11:21:27:f8:2b:df:c5:18:97:d9:c3:69:bc:40:d5:
95:d8:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:49 2025 by rpki-client