Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa
File: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (raw, json)
Hash identifier: rCOH3xxAAfj1pNlzN0wjwUk5FjWuLhDJdIwrQTwN1l8=
Subject key identifier: 4A:16:00:CE:4A:2E:67:37:80:FE:F9:42:9D:B6:7F:3F:3A:07:61:BA
Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial: 7FE0FE91AD75591CD1C6E0152EEE924108700F2D
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa
Signing time: Mon 08 Apr 2024 05:00:01 +0000
ROA not before: Mon 08 Apr 2024 04:55:01 +0000
ROA not after: Mon 07 Apr 2025 05:00:01 +0000
asID: 136873
IP address blocks: 223.25.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e0:fe:91:ad:75:59:1c:d1:c6:e0:15:2e:ee:92:41:08:70:0f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Validity
Not Before: Apr 8 04:55:01 2024 GMT
Not After : Apr 7 05:00:01 2025 GMT
Subject: CN=4A1600CE4A2E673780FEF9429DB67F3F3A0761BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:dd:0b:e1:db:2e:02:27:2d:81:32:22:31:
55:4a:f7:ea:e6:66:82:be:01:7b:5e:8f:bf:3f:bb:
05:56:eb:8c:35:3c:c7:ae:4c:0c:97:56:a4:05:5a:
43:1f:a5:f3:b0:6c:5e:3d:c2:bf:a8:e4:68:45:a5:
9e:03:57:d4:3f:39:8b:f5:b6:91:41:03:f3:fb:3d:
1c:71:e7:49:35:2a:0c:eb:dd:11:6d:4d:57:5a:e3:
dc:21:3a:5a:67:f7:e7:a5:9c:d5:d4:9a:60:7f:ce:
83:82:32:8a:e7:b2:1d:3a:5a:27:42:1a:21:f7:8d:
fc:dd:8b:fd:f3:8c:19:c6:75:68:1b:76:52:ac:0c:
89:0c:a5:3f:fa:f4:64:d6:1f:18:f3:80:3a:35:54:
0e:0f:93:61:75:44:61:34:f0:27:60:8c:34:2a:66:
e5:b8:5d:6a:dc:bb:b6:f5:ee:6d:fb:b4:7e:b5:96:
90:69:91:5e:08:b2:3d:fa:7a:73:82:bc:a9:92:e7:
78:a8:09:3e:12:12:de:c5:bf:77:d3:66:03:89:f2:
b6:81:a2:5c:fd:6b:8d:8e:ed:7e:e7:f8:e8:49:46:
41:9c:c7:3e:bc:4b:ce:7c:d6:8d:dd:4a:41:6c:b4:
00:e6:21:6d:b7:6e:65:b8:59:da:01:d8:25:6b:67:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:00:CE:4A:2E:67:37:80:FE:F9:42:9D:B6:7F:3F:3A:07:61:BA
X509v3 Authority Key Identifier:
keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.25.110.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5a:af:ad:17:41:a0:bc:73:b5:7f:2d:15:73:05:79:fd:58:
78:79:5b:c0:82:fd:a0:2a:aa:f0:c0:66:d4:97:a8:b5:a0:06:
1e:39:b9:b1:ea:2c:27:4d:f0:11:0e:4c:bd:03:fa:01:2c:70:
07:00:33:b7:b5:5b:91:08:d2:33:80:1a:bd:75:aa:8c:e6:f0:
9a:5c:a9:d0:ec:fb:21:05:80:f6:5b:b0:aa:2e:86:70:11:d2:
46:30:17:bc:db:70:29:66:6f:4e:9b:29:cc:94:68:08:04:74:
a3:2d:97:83:eb:79:82:64:b2:71:5c:36:a2:0d:2b:e5:73:55:
0a:76:c9:78:4c:b1:af:3b:80:05:ef:38:4f:d1:43:74:62:ad:
46:d0:0b:2e:17:74:be:e9:00:02:cd:7b:f4:e9:4f:61:1b:4f:
42:74:eb:bd:22:c8:c9:64:1a:5e:32:71:8c:c5:3c:7e:66:ba:
c0:b8:b2:32:f5:50:e7:2a:1f:7f:f6:c0:ed:71:13:93:2e:4f:
c3:31:34:9f:f4:ae:f4:07:b9:40:eb:2f:bb:3e:2f:ff:a1:54:
a4:b5:69:a5:43:7c:e6:00:ae:ca:b4:d1:41:9d:a7:c4:d9:a2:
f1:83:21:dc:e3:e3:3d:be:76:9a:dc:43:70:f9:9a:b4:3e:07:
e2:76:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:20 2025 by rpki-client