Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38362e302f32342d3234203d3e2039333431.roa
File: 32372e3132342e38362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: Hd/Nmo42n41z81Pj/xu1ffigpaHtxyrxOZjDlLjgZGU=
Subject key identifier: 49:FB:A2:45:91:2A:80:BF:40:28:92:33:A3:D7:28:10:41:A9:F6:D1
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 407299BEF461DDCA708BF35B5A4ACBB80C6ACC43
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38362e302f32342d3234203d3e2039333431.roa
Signing time: Fri 26 Jul 2024 14:00:02 +0000
ROA not before: Fri 26 Jul 2024 13:55:02 +0000
ROA not after: Fri 25 Jul 2025 14:00:02 +0000
asID: 9341
IP address blocks: 27.124.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:72:99:be:f4:61:dd:ca:70:8b:f3:5b:5a:4a:cb:b8:0c:6a:cc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Jul 26 13:55:02 2024 GMT
Not After : Jul 25 14:00:02 2025 GMT
Subject: CN=49FBA245912A80BF40289233A3D7281041A9F6D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:82:2e:8b:02:54:62:0f:16:74:93:d7:d6:
71:d8:5d:45:af:20:67:67:5f:53:08:bd:b8:4d:c4:
3f:8d:95:d6:86:a6:ca:f9:42:6c:f5:60:15:ee:75:
91:26:b0:d6:e6:76:95:34:0b:68:df:26:91:88:0d:
81:cb:cf:39:f5:db:61:a5:5f:5d:75:3b:70:c3:84:
9b:80:17:e3:54:9f:e4:f2:eb:31:ea:41:08:2a:6b:
ca:a2:9d:bc:66:de:95:fa:4c:8f:1b:92:e1:81:0a:
07:2e:ad:07:97:79:5a:6c:09:fc:c4:76:cf:c6:e3:
56:f3:af:a8:f3:fc:1b:4a:d1:86:5b:6f:9a:4c:f7:
9c:a9:8a:92:7b:6f:34:a1:e4:bd:82:a5:a3:d1:13:
48:cd:dc:27:01:cd:e6:c9:a0:ca:4e:73:c0:dc:6d:
e3:ff:19:60:1a:45:93:89:e8:83:1a:6a:26:7a:f1:
90:d4:a1:19:cb:07:16:4e:b9:60:aa:63:c8:be:d7:
b2:4c:ce:18:6a:fc:7d:e9:7d:cd:85:55:33:f5:e3:
ff:53:23:3e:ed:84:d6:0e:15:66:0d:3f:b1:95:c1:
9c:ee:f6:7b:77:5f:5d:2a:95:83:6f:e2:35:97:3d:
07:fc:13:36:eb:22:6f:52:3e:0e:e6:e9:c5:b4:d3:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FB:A2:45:91:2A:80:BF:40:28:92:33:A3:D7:28:10:41:A9:F6:D1
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/32372e3132342e38362e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.86.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e2:9c:01:3c:2c:b9:d4:93:ac:ad:41:23:f7:dd:2c:89:52:
ae:de:c9:70:c2:63:61:a6:76:ae:4c:e6:27:5d:51:71:c4:b6:
22:58:b1:ea:73:21:1c:04:76:c6:8e:00:54:08:18:86:10:cd:
62:9a:6b:82:39:75:dd:ed:6a:fc:45:79:fc:d7:37:9e:e5:a8:
ff:a8:de:db:c9:07:b9:31:7f:cb:d9:e5:38:8b:1c:c6:1d:95:
9c:69:35:8e:ab:37:ad:ec:6e:a0:59:64:3b:d6:33:14:1f:93:
fb:87:dc:23:b8:7c:c8:94:8a:3f:fe:8c:88:87:7d:e2:9c:be:
a2:af:37:23:0e:4b:16:f9:18:5b:73:1e:98:30:e6:a5:fd:02:
28:43:68:a5:66:83:ae:a6:92:be:c2:e3:ad:e7:82:20:42:08:
b4:bb:11:c5:0d:6b:0d:e0:e3:d6:a5:1c:53:1c:0f:e2:d5:13:
d3:9c:5d:e2:40:24:bd:3f:31:bb:01:a8:0c:7a:a1:4a:3e:f7:
8a:77:50:2c:45:53:a3:49:e2:41:3b:ae:4d:67:fc:b8:7c:31:
37:cf:ca:86:e9:0c:6f:aa:3c:74:07:95:6b:98:a9:0d:e6:41:
46:ea:09:a8:8f:12:51:e6:fe:0c:5f:6f:ba:23:d4:3e:f7:29:
67:12:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:45:21 2025 by rpki-client