Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa
File: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (raw, json)
Hash identifier: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw=
Subject key identifier: 38:5C:B3:2E:87:CC:E3:93:06:F3:04:AF:2F:10:0A:39:C1:07:6C:6E
Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A
Certificate serial: 657783950FFEA3BD520414C98D3825DAB37DC042
Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa
Signing time: Thu 05 Dec 2024 07:02:34 +0000
ROA not before: Thu 05 Dec 2024 06:57:34 +0000
ROA not after: Thu 04 Dec 2025 07:02:34 +0000
asID: 152029
IP address blocks: 36.50.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:77:83:95:0f:fe:a3:bd:52:04:14:c9:8d:38:25:da:b3:7d:c0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A
Validity
Not Before: Dec 5 06:57:34 2024 GMT
Not After : Dec 4 07:02:34 2025 GMT
Subject: CN=385CB32E87CCE39306F304AF2F100A39C1076C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:95:88:8b:87:b6:83:67:8e:25:c0:74:d8:
2c:75:a2:cd:b0:63:6f:c8:01:83:a7:a1:c0:85:4e:
a9:c4:ae:bd:d8:9e:56:bd:09:86:a7:0f:cc:00:5d:
76:e3:90:31:eb:18:ae:3b:04:d7:35:d2:ab:9b:9a:
dc:a0:8b:80:06:c8:59:1e:d6:4d:d5:ed:4c:21:db:
93:70:a6:29:06:a0:c7:c1:3c:65:4d:8d:40:d1:35:
ae:c0:53:39:6b:f1:cb:60:dd:1f:a4:3f:2a:51:11:
2a:6c:ea:6c:1f:7c:d1:fa:19:14:85:f4:bc:d5:41:
7a:62:4b:47:59:40:c7:a3:b5:2a:a7:8a:b7:2e:0c:
02:18:31:f7:ed:1c:30:04:b2:03:ce:ad:21:bd:aa:
d8:8c:dc:11:b1:87:fd:63:5a:a2:91:9b:5b:2b:d4:
e7:64:54:cf:f7:aa:54:75:fc:3c:c9:59:6e:a6:07:
50:80:45:8b:e5:f8:23:50:0e:54:74:c8:5e:28:2a:
6e:5c:81:8b:f1:61:35:ea:95:65:e6:a0:8c:cd:ad:
4e:f7:c4:66:d7:6a:9d:7d:65:83:f2:71:57:97:da:
bd:2e:1b:5c:4b:94:27:87:27:d9:0b:84:6d:d2:8c:
2a:ba:4c:0d:ac:9d:f8:35:e2:4c:16:2b:b2:c7:84:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5C:B3:2E:87:CC:E3:93:06:F3:04:AF:2F:10:0A:39:C1:07:6C:6E
X509v3 Authority Key Identifier:
keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32332d3233203d3e20313532303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.56.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:c7:1b:58:6d:f6:f6:50:3e:2f:12:34:c4:d6:ed:03:2f:43:
82:57:f9:b3:14:3e:45:88:87:c5:cd:e8:04:98:6d:6c:e4:aa:
5f:13:90:33:c8:d6:a0:c8:da:6a:e8:4c:bf:fc:05:1c:59:2d:
b8:67:f2:20:45:c9:e8:f6:ff:aa:c0:c2:ba:87:3b:6d:04:ba:
08:3a:d1:69:f6:ac:54:d5:97:c2:92:3b:1b:20:81:08:d4:5c:
49:dc:ab:c7:2e:55:1f:e2:92:fe:7f:f9:f3:b0:e0:c2:3f:3f:
25:3e:b5:6f:30:fa:68:fd:32:09:5e:5e:98:dd:18:de:2f:00:
9e:22:68:98:84:e0:a5:2c:6e:42:16:9f:53:54:2f:02:79:b5:
ae:34:23:fc:47:b5:4d:61:79:f4:bd:44:3b:57:06:9b:fe:a8:
95:6c:1e:e2:23:1a:bd:8f:37:da:83:bd:10:ab:de:31:fc:1e:
12:3e:34:18:83:68:ea:32:76:92:9f:c5:c8:21:63:3d:a9:f6:
df:3a:50:ce:0d:c0:37:f1:ce:0d:62:d1:be:f3:e8:92:ae:5d:
f2:27:d4:32:08:07:96:fa:4d:82:09:bb:4f:1d:5f:de:1d:83:
12:84:a4:42:e3:2a:bd:4d:7f:12:fc:65:c0:a2:60:8c:fb:4c:
12:fb:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:59 2025 by rpki-client