Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138352e302f32342d3234203d3e203633383237.roa
File: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier: d6Eei0Mi3Z0MIL/gTjyKioJhC1+Xma/Y2mDdx7nO/5M=
Subject key identifier: 5D:A1:3A:84:D6:A5:77:1E:0A:E4:30:D2:C2:7B:4F:3D:0F:87:51:52
Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial: 0C3E3037A4D8DAFC7E117CD15EEDE5E573DFEA05
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138352e302f32342d3234203d3e203633383237.roa
Signing time: Wed 20 Nov 2024 07:03:08 +0000
ROA not before: Wed 20 Nov 2024 06:58:08 +0000
ROA not after: Wed 19 Nov 2025 07:03:08 +0000
asID: 63827
IP address blocks: 43.243.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3e:30:37:a4:d8:da:fc:7e:11:7c:d1:5e:ed:e5:e5:73:df:ea:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Validity
Not Before: Nov 20 06:58:08 2024 GMT
Not After : Nov 19 07:03:08 2025 GMT
Subject: CN=5DA13A84D6A5771E0AE430D2C27B4F3D0F875152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:26:2f:90:19:3b:22:d0:90:1a:5c:f7:ed:
6b:2e:c5:1b:7e:75:f6:d6:b0:49:a1:25:23:24:9b:
9c:a2:91:36:0d:9d:73:e7:fd:37:08:64:64:b0:73:
01:d1:45:2e:fd:e7:c8:b3:a1:5f:d6:70:4a:26:9b:
88:a2:ff:28:41:8a:25:67:2a:f1:ce:55:d9:89:d4:
1f:7b:04:7d:8b:cb:65:8c:77:0f:24:f1:a1:19:86:
56:0e:40:49:f2:e2:8c:2a:15:f7:23:61:b7:65:0a:
63:2e:90:1c:3e:fb:ce:cd:c3:31:4d:af:e5:82:17:
66:11:57:b6:df:3e:16:df:d4:ab:cf:26:5e:9e:10:
2e:9b:11:b8:ba:0e:a1:73:4d:19:37:ec:a4:2c:1c:
68:76:74:a8:c3:a9:f4:91:24:7f:b6:bd:7d:cd:a0:
8e:83:05:0a:90:04:eb:2f:d6:14:e9:4e:14:f4:81:
d6:29:6f:42:51:91:66:56:60:ab:2a:ab:e8:d4:91:
56:7f:6d:6e:ed:d0:63:17:03:8e:0f:cd:5f:ae:ff:
3a:3b:0a:d5:f9:08:a9:76:ba:5f:d8:9c:8a:b5:df:
b1:f0:a4:c4:7e:3f:42:4e:79:45:5b:6e:ca:79:a9:
49:e6:e8:b9:fd:3e:19:22:38:47:df:b7:a9:0f:4a:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A1:3A:84:D6:A5:77:1E:0A:E4:30:D2:C2:7B:4F:3D:0F:87:51:52
X509v3 Authority Key Identifier:
keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138352e302f32342d3234203d3e203633383237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.243.185.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0b:ca:42:bd:f6:ff:aa:90:0e:1c:6e:57:b5:e9:be:c8:c9:
ab:ba:6b:01:58:15:31:c6:51:be:f8:52:77:6e:73:91:1a:58:
4a:99:b3:ba:62:47:51:63:6e:e2:f6:03:3c:c8:45:2b:f7:2d:
77:b8:85:bf:86:5e:ac:02:75:5c:2f:dc:f4:65:84:60:34:cd:
3e:91:89:6d:dd:38:20:23:46:a2:c1:2f:f0:64:b0:6c:40:33:
23:cd:38:99:fd:f5:60:09:d5:76:cb:76:72:75:58:64:64:10:
5a:e8:34:27:bc:09:3d:fc:4a:50:05:86:94:b2:a0:db:1b:ed:
14:76:3d:ca:9e:14:3e:e1:b4:e1:b7:e7:c3:5e:ee:14:79:4d:
ec:a7:71:e8:ef:32:62:3a:a7:01:d6:87:d6:28:2a:64:8f:92:
77:e3:23:ce:0f:d6:c8:86:86:31:6b:6e:8a:85:30:bd:49:8b:
46:4b:64:69:df:c3:06:c0:86:66:2f:bb:c9:b6:29:87:03:1f:
04:2f:1f:59:af:5b:a1:8f:ae:84:06:77:df:d3:a9:5c:d9:ca:
92:ea:69:8e:fd:7d:bf:19:65:89:c5:f0:2e:dd:5f:bb:35:ef:
7b:45:78:3a:5d:11:2f:a5:66:e5:12:42:70:9f:75:79:34:b0:
ae:a0:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:02:21 2025 by rpki-client