Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34342e302f32342d3234203d3e203338353234.roa
File: 3131392e322e34342e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier: KQh69ZSNN94ceVxQtEkKUGX90k12cg/aXsb69Z4i+z0=
Subject key identifier: CF:7B:79:18:4B:3F:AA:7D:BE:F3:5E:4F:D8:AC:DB:1E:94:8F:4E:A6
Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial: 501F51D993AE17D4F8D965035E777668A17AABCB
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34342e302f32342d3234203d3e203338353234.roa
Signing time: Mon 01 Jul 2024 01:03:43 +0000
ROA not before: Mon 01 Jul 2024 00:58:43 +0000
ROA not after: Mon 30 Jun 2025 01:03:43 +0000
asID: 38524
IP address blocks: 119.2.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1f:51:d9:93:ae:17:d4:f8:d9:65:03:5e:77:76:68:a1:7a:ab:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Validity
Not Before: Jul 1 00:58:43 2024 GMT
Not After : Jun 30 01:03:43 2025 GMT
Subject: CN=CF7B79184B3FAA7DBEF35E4FD8ACDB1E948F4EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:97:0d:bb:79:5c:4c:bd:cf:16:b5:62:b5:
84:87:76:d0:b0:4d:86:70:44:9f:ee:13:53:1b:c3:
96:0f:5e:69:40:d3:19:ea:bd:9b:00:4b:2d:e1:54:
f7:5c:c3:72:f5:9a:ac:b7:09:ed:51:d3:96:3a:39:
b9:d8:b6:81:3f:25:ac:2f:82:99:48:19:b6:3a:9e:
9d:c2:b1:1c:4c:58:83:92:47:38:1a:bb:2c:73:87:
47:ad:06:e6:43:c9:3e:f0:69:b1:2e:fc:da:da:76:
df:77:10:64:47:08:b0:49:b8:c6:14:62:86:91:02:
3a:94:59:7a:3c:8a:78:e3:b8:93:08:5c:8a:5e:1a:
09:c7:2d:bb:4f:1e:1d:c0:d5:67:3f:ba:d8:c8:7b:
c1:5e:d0:cc:a7:b6:7d:28:4d:58:9c:56:3e:fb:63:
ec:95:49:c5:42:29:e2:01:b6:a2:b4:92:f5:7a:e4:
4a:42:67:e4:53:e2:51:e4:1c:1e:08:b9:12:d6:a6:
bb:2c:66:44:b1:a2:08:b2:aa:e2:0e:0a:fb:fd:37:
04:8e:de:78:f5:77:84:b9:cd:a7:ff:8f:00:33:ca:
06:d3:8a:a9:95:0e:e0:38:79:42:58:05:ce:e6:85:
6c:46:2a:99:ea:df:06:cd:e1:ca:be:16:fe:15:e3:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7B:79:18:4B:3F:AA:7D:BE:F3:5E:4F:D8:AC:DB:1E:94:8F:4E:A6
X509v3 Authority Key Identifier:
keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34342e302f32342d3234203d3e203338353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.44.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4e:b7:86:49:6f:90:b9:ea:92:86:ae:64:2d:df:26:02:c5:
8e:b4:ee:78:37:a6:f6:33:66:21:93:c2:7a:f5:b4:0a:9a:57:
c4:43:7f:e7:94:5e:c7:29:2f:30:44:dd:4e:78:f1:bc:f4:9b:
c4:90:f4:27:fd:d6:3c:94:08:68:b4:3c:13:0e:1b:d4:6b:dd:
3e:1a:c5:4a:33:64:16:dd:b9:f8:86:70:4f:6e:32:f3:59:f0:
b7:f7:aa:32:dd:8b:66:c6:d3:2e:06:dc:6b:cd:e8:94:91:a7:
af:c7:57:c4:72:3d:14:02:4d:c3:5d:dc:b7:17:70:91:39:a5:
1c:15:b4:11:89:72:95:e6:a6:48:f7:b4:c6:ca:ef:2c:05:6b:
92:10:ab:04:dc:d1:4f:64:05:ed:26:d9:62:55:fa:37:cd:a8:
96:7d:ac:8c:6c:e1:85:49:51:74:77:d7:06:93:4e:bd:ad:33:
6e:59:28:0a:73:eb:c2:7c:91:ad:99:98:a5:47:7f:cc:2b:51:
2a:d1:df:39:00:e2:1c:a0:1f:2f:67:f1:4f:da:18:1f:73:1b:
df:ec:d8:f6:ed:6c:44:07:6d:3c:5c:0c:6e:32:84:4d:16:32:
87:16:63:e5:52:52:a5:0e:e8:4d:c7:e3:8c:f8:78:e2:4a:7b:
49:91:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:28 2025 by rpki-client