Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233392e302f32342d3234203d3e203633383539.roa
File: 36362e39362e3233392e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier: KAQfBX/kM9Wfqw4iKQstnd3g/hm//0U1f2PgC+7mags=
Subject key identifier: FF:F3:F7:D7:28:32:24:4E:96:EE:C2:E2:28:54:29:3B:39:6D:6E:1B
Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF
Certificate serial: 0E8C09C6E3AA7D46A7D7D996B4DA9B908EBE6D12
Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233392e302f32342d3234203d3e203633383539.roa
Signing time: Sun 11 Aug 2024 11:00:03 +0000
ROA not before: Sun 11 Aug 2024 10:55:03 +0000
ROA not after: Sun 10 Aug 2025 11:00:03 +0000
asID: 63859
IP address blocks: 66.96.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:8c:09:c6:e3:aa:7d:46:a7:d7:d9:96:b4:da:9b:90:8e:be:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF
Validity
Not Before: Aug 11 10:55:03 2024 GMT
Not After : Aug 10 11:00:03 2025 GMT
Subject: CN=FFF3F7D72832244E96EEC2E22854293B396D6E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ad:34:b3:00:06:45:a1:31:a4:f9:8e:95:0c:
35:19:34:e4:88:9d:14:7c:76:65:e2:60:ea:36:57:
7d:a4:78:ce:b7:cb:0c:06:9b:a2:50:1a:ae:ba:08:
43:6c:6b:99:9c:80:4e:8e:62:72:59:be:4d:76:a2:
f8:e3:91:d1:46:84:dc:77:ce:bc:85:dc:cb:0f:a2:
d6:24:5d:ac:bd:d4:9a:e6:4a:da:17:2e:0e:22:67:
73:f9:dd:5f:18:8f:98:f4:02:0e:4a:ce:fa:a9:a5:
ce:4b:5a:e7:91:7f:3b:d3:a3:bd:03:30:3e:2a:19:
f2:7b:ec:e9:6e:b6:31:7e:ff:32:b4:0d:15:4b:ed:
c0:77:ec:9d:62:06:f6:f6:8b:09:0a:25:e7:02:5e:
2f:73:cc:55:5a:32:6a:e2:46:34:1b:46:a2:c6:7c:
f0:fc:d0:42:ea:11:ad:f6:0b:e7:a1:be:e1:a6:74:
be:92:06:c9:a7:69:6e:66:6f:08:1a:ed:c2:0a:88:
95:78:20:23:8b:0d:9d:ca:cd:4d:e0:f6:f8:8a:fc:
48:b5:10:57:ba:18:e0:49:3e:37:ce:bc:4c:cf:c6:
6b:57:4b:c8:a5:62:5a:cc:85:c2:03:62:3c:9c:40:
42:8e:fd:df:86:49:11:6a:6e:83:7e:22:62:de:31:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:F7:D7:28:32:24:4E:96:EE:C2:E2:28:54:29:3B:39:6D:6E:1B
X509v3 Authority Key Identifier:
keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233392e302f32342d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.96.239.0/24
Signature Algorithm: sha256WithRSAEncryption
05:92:32:4d:89:1d:13:fd:16:40:de:86:73:78:e7:cc:92:ed:
e7:d1:db:08:24:ae:26:2f:79:86:07:bc:5b:d4:f0:32:67:ff:
e0:ed:3d:53:07:19:89:12:4c:a7:23:a8:5a:d7:41:16:b1:92:
fd:11:36:e0:6b:7a:e9:40:44:52:c0:ab:86:00:c9:1d:05:b2:
69:56:ff:03:d0:9a:4b:86:8f:89:9f:29:80:27:b9:5d:94:79:
21:30:2b:33:7c:66:46:35:0f:28:bf:db:e3:75:81:1f:5f:b0:
b1:15:24:18:6d:57:de:f2:46:5d:d4:6c:78:28:5d:9a:a6:05:
a4:9a:71:61:0f:92:ce:05:5a:38:7c:5a:4d:19:1a:66:38:ea:
a6:10:53:e7:72:78:4f:14:1e:19:00:c6:a1:67:67:fd:1c:42:
c5:92:21:ff:10:a6:e6:bc:09:ea:d2:23:2b:b7:a4:97:07:d8:
e8:2e:9e:04:11:f8:ad:0b:c9:21:3e:2d:eb:1a:b6:9f:73:d0:
28:dc:e4:e6:80:b4:1e:90:cb:43:92:bb:84:7d:6c:2d:ba:cc:
9d:76:44:2f:02:b0:20:f4:38:34:ab:7b:7c:bf:d6:c1:71:55:
de:bc:47:81:b3:29:62:56:3e:d2:9c:0d:53:3a:80:84:6b:9a:
2f:4c:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:45 2025 by rpki-client