
Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa
File: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (raw, json)
Hash identifier: vZOtLaOfjMhQfEcCJdIUC/qN22seOwp7tbsXKZXwRVo=
Subject key identifier: DA:C1:AC:61:CD:CB:B5:F8:C6:47:20:FE:3B:6E:99:84:63:BE:BC:14
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 63DDA5055E24A7D336A7A38F7137AC72CC0F66EE
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa
Signing time: Tue 16 Jul 2024 01:18:01 +0000
ROA not before: Tue 16 Jul 2024 01:13:01 +0000
ROA not after: Tue 15 Jul 2025 01:18:01 +0000
asID: 262929
IP address blocks: 122.128.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:dd:a5:05:5e:24:a7:d3:36:a7:a3:8f:71:37:ac:72:cc:0f:66:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Jul 16 01:13:01 2024 GMT
Not After : Jul 15 01:18:01 2025 GMT
Subject: CN=DAC1AC61CDCBB5F8C64720FE3B6E998463BEBC14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:23:49:21:35:54:b2:20:6c:28:9f:9c:fd:
b1:cd:36:89:ce:32:fb:76:c0:6e:60:69:e5:7c:74:
7d:11:1b:30:3d:0c:35:2e:d1:a7:78:26:76:24:45:
17:2b:2a:cd:bb:fb:83:2f:2d:97:6f:d9:56:16:be:
16:3f:85:eb:0c:8e:d4:5f:fc:3b:75:9d:2d:b2:02:
7d:f3:40:c4:40:85:0d:c9:7d:9a:35:e9:03:a9:88:
c8:ab:b9:21:6f:1e:29:50:b1:a6:72:2e:13:0b:2f:
10:d2:bb:cc:a3:a4:f3:f7:65:0d:06:75:8d:e2:2b:
ec:31:63:ca:64:d2:3c:85:23:42:37:c2:58:77:d6:
b9:de:58:22:f2:dd:48:a7:dc:14:1d:74:2f:a2:1e:
69:3b:70:86:1d:d7:bb:9f:36:0b:4d:87:09:31:ca:
b4:84:b5:80:92:e2:0d:6c:37:d8:5e:0d:54:29:42:
c2:94:8a:b6:8a:76:63:d3:c1:49:81:b5:03:db:e8:
b2:8f:b4:c8:01:07:69:f5:1e:49:bc:49:8f:1f:d2:
18:82:07:9c:15:28:eb:da:4b:08:ed:00:50:79:bb:
a2:11:76:1e:7d:35:60:c1:d0:5a:64:82:a4:15:9a:
1a:90:11:96:d9:f2:ba:8c:46:bb:f5:99:f0:1d:31:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C1:AC:61:CD:CB:B5:F8:C6:47:20:FE:3B:6E:99:84:63:BE:BC:14
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.21.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1f:78:af:b9:6e:6b:9c:29:81:9e:77:32:dc:2e:6e:be:29:
41:88:3c:29:95:06:2b:1e:2f:48:0b:8c:6a:62:5e:10:c2:30:
a6:36:65:bf:36:c4:dd:74:96:c1:a7:9c:f2:7b:de:78:32:a2:
8a:b7:88:fa:a2:a0:1a:e2:23:0b:69:77:ff:58:87:98:51:92:
9f:cc:84:32:69:0f:8b:9a:4c:b4:3b:33:c6:a4:41:06:e7:5a:
44:56:58:72:14:f9:69:d0:54:9c:64:5f:6a:28:6b:8f:f9:7a:
07:94:51:10:77:7b:8d:14:fa:e5:b6:51:cf:c0:41:f0:c9:e4:
69:62:c4:72:6d:fb:74:27:a7:5f:c0:1a:86:53:c0:e5:08:72:
fe:f4:68:95:ba:89:51:3c:8d:82:46:90:d0:20:ea:53:f2:7b:
e0:c7:40:14:96:0a:95:58:a7:50:9e:3f:7a:ec:f7:f1:59:ac:
36:04:53:bc:75:bf:cc:d7:a3:9b:0c:88:d7:2f:76:9d:12:fb:
0c:4e:90:4d:48:20:f8:79:78:a4:68:02:7a:0a:db:1b:98:f4:
d3:cf:6f:e1:06:56:d6:94:84:6f:89:f6:3b:8e:08:95:bf:fa:
f7:aa:06:06:81:88:51:26:8e:1e:ea:26:1e:a4:6c:9e:11:d2:
78:ef:68:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:46:32 2025 by rpki-client