Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36352e302f32342d3234203d3e203338353133.roa
File: 3138322e32332e36352e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier: 6wcMkC1EpMqsmxhaZ2QE9l1t6kfaOOOGGZP7reUYloM=
Subject key identifier: C5:4B:46:F7:7E:64:DD:86:40:D5:6D:25:E5:AB:9E:46:BA:72:8B:1C
Certificate issuer: /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial: 5A29399B49796F17CB79D4935CA8F0F6C23184E2
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36352e302f32342d3234203d3e203338353133.roa
Signing time: Mon 01 Jul 2024 01:03:18 +0000
ROA not before: Mon 01 Jul 2024 00:58:18 +0000
ROA not after: Mon 30 Jun 2025 01:03:18 +0000
asID: 38513
IP address blocks: 182.23.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:29:39:9b:49:79:6f:17:cb:79:d4:93:5c:a8:f0:f6:c2:31:84:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Validity
Not Before: Jul 1 00:58:18 2024 GMT
Not After : Jun 30 01:03:18 2025 GMT
Subject: CN=C54B46F77E64DD8640D56D25E5AB9E46BA728B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:8b:41:fb:45:c8:b6:bb:48:6a:fa:b6:dc:
fa:cc:50:3c:99:13:eb:2e:27:fd:d2:84:d8:60:50:
5f:da:66:18:32:b7:02:01:21:12:a8:41:65:2a:b9:
5d:58:a1:7d:e6:0a:dd:45:a6:1c:33:45:ef:d6:cd:
d6:dc:a4:6d:17:7c:2b:86:68:74:3b:bf:64:ed:fc:
17:ad:61:52:8c:80:29:6b:aa:4a:b5:25:51:15:af:
ed:67:3e:6c:df:4e:b9:00:b4:36:66:19:a4:9b:73:
ab:f1:a1:ad:08:b5:9a:08:00:0a:ec:d2:a3:2a:b6:
aa:d1:c8:c5:d6:2e:62:b9:39:40:c9:60:ca:7d:d6:
b4:9d:5b:81:2d:39:b7:fa:fa:c6:a5:51:7a:a9:0e:
df:73:d8:27:f4:95:34:16:ab:70:30:c0:ff:5d:5e:
78:f9:6f:e0:72:fe:13:3d:b5:9a:b8:f0:53:51:bd:
ec:51:e2:7e:cc:99:59:e4:e5:22:06:17:1e:10:e0:
4c:14:15:fc:d5:fc:f1:43:b7:ab:c2:50:41:e0:85:
fb:f2:14:ab:45:b5:d1:a8:76:0a:80:82:67:e2:ce:
00:7a:4d:8c:27:cc:b5:ef:97:b5:e0:11:f8:73:f1:
90:70:1c:60:a0:88:19:12:78:3c:70:7d:c5:c3:c9:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:46:F7:7E:64:DD:86:40:D5:6D:25:E5:AB:9E:46:BA:72:8B:1C
X509v3 Authority Key Identifier:
keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36352e302f32342d3234203d3e203338353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.23.65.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8b:d0:54:b5:03:b7:53:07:83:dc:b3:b6:51:67:d9:63:3e:
db:16:15:78:10:96:25:02:73:2a:ec:f2:45:6e:44:0e:51:4d:
18:b2:5d:75:76:ab:aa:0a:ed:b4:57:57:25:b3:7a:d6:61:7e:
3f:42:2c:7d:91:cd:e4:fe:c5:67:35:1a:36:ba:b3:ac:58:09:
a8:9e:d4:59:57:d3:42:0a:42:09:dd:8a:0f:b3:ab:f1:4d:5e:
85:3e:92:a7:3c:ea:37:f2:8a:ca:1d:57:35:e1:ef:71:4a:47:
82:40:60:55:5f:f5:b9:6f:93:61:5a:9e:44:3a:c5:7b:5b:5e:
53:6d:91:e3:7c:f7:a0:75:c9:ea:16:0e:ae:2f:35:42:9e:29:
df:2b:b2:77:98:dc:fb:50:09:24:98:50:5d:1b:9c:03:55:db:
75:ad:51:9b:e9:fc:91:34:ff:dc:7b:64:8a:d5:49:3f:b5:57:
3f:fe:f0:bc:3c:e0:ee:a3:26:b5:c1:3a:0a:ea:19:3d:2b:93:
db:5b:cb:c5:62:76:30:dd:b5:16:d2:d8:de:4d:05:f8:f8:27:
5d:d4:a9:cd:28:6f:98:37:c6:f4:f7:92:1d:c2:8f:9f:48:4a:
d2:fb:f8:76:52:92:a7:f5:96:9b:93:49:74:18:71:f0:dd:a3:
ff:28:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:40 2025 by rpki-client