Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e352e302f32342d3234203d3e203338373533.roa
File: 32372e3133312e352e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier: Z5indo3W3he//1vKrFKDUTP8LejI/xyv4FDMokBmuEM=
Subject key identifier: C1:6A:28:16:1D:5D:AB:1B:81:C2:AA:4D:CE:1D:E6:E2:C3:BC:72:A0
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 643D64B14835758A6551EFF52AA9D1C9F3A09D27
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e352e302f32342d3234203d3e203338373533.roa
Signing time: Tue 02 Jul 2024 02:00:01 +0000
ROA not before: Tue 02 Jul 2024 01:55:01 +0000
ROA not after: Tue 01 Jul 2025 02:00:01 +0000
asID: 38753
IP address blocks: 27.131.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3d:64:b1:48:35:75:8a:65:51:ef:f5:2a:a9:d1:c9:f3:a0:9d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Jul 2 01:55:01 2024 GMT
Not After : Jul 1 02:00:01 2025 GMT
Subject: CN=C16A28161D5DAB1B81C2AA4DCE1DE6E2C3BC72A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:00:62:4b:80:03:4f:06:43:0c:c8:e0:05:
dd:d2:b1:a8:56:01:a0:61:e3:71:ca:91:c0:3e:59:
c3:10:76:cb:81:00:37:a6:b7:9f:e4:08:01:bc:f9:
dd:6b:65:e4:c0:f6:42:77:66:48:c4:4a:62:2e:5c:
50:21:5d:4c:4b:92:ad:50:25:1d:8d:6a:27:0c:70:
2d:24:cc:aa:5d:27:60:3f:89:c9:7d:65:1e:41:ca:
0f:b4:f2:71:9f:f2:4c:35:7c:5a:cf:cf:3e:da:c7:
5d:b2:0a:e0:82:0c:ae:bc:f4:1a:a1:7b:08:ee:3d:
16:7f:7e:6b:30:58:a0:fa:93:15:25:af:31:67:6a:
20:c1:24:5e:99:e0:7a:2f:e1:d3:09:81:fb:14:d6:
3b:af:66:b2:17:4b:b2:a9:24:85:fc:d2:bc:34:4d:
2f:26:1c:37:ac:79:90:1c:09:46:f5:55:bf:c9:8b:
c8:86:6a:bb:8b:6f:17:f1:a0:96:18:b4:f9:83:94:
d2:c8:25:6e:a1:c9:c1:71:7e:d9:63:8e:d3:1c:f5:
5d:30:07:2b:86:21:da:c0:b2:5c:b7:b1:63:b4:fd:
41:8a:bc:eb:86:04:53:cc:f6:59:77:97:df:1c:c3:
aa:4a:9a:f1:39:a3:ca:c5:99:70:37:de:33:ce:50:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:28:16:1D:5D:AB:1B:81:C2:AA:4D:CE:1D:E6:E2:C3:BC:72:A0
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e352e302f32342d3234203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.131.5.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a2:11:9c:ad:21:fe:d0:83:30:6a:49:df:b1:89:fe:c8:99:
be:6f:2b:69:61:ef:a1:38:5d:d7:e8:e7:ef:41:44:fa:79:0d:
6d:8a:4f:44:4e:57:0e:49:be:79:a6:2b:c9:16:16:fd:a7:95:
e7:97:20:64:b9:23:4f:95:95:ab:2c:30:da:00:8e:5e:0a:8d:
18:80:5c:bd:a7:13:8a:09:89:ae:e8:21:bc:78:0d:c1:66:2f:
8b:0a:06:f1:cc:36:93:d3:b8:25:87:63:1a:03:a0:00:3e:1a:
40:13:06:be:b9:93:bd:e4:4e:41:a4:62:4b:f3:eb:ef:40:27:
70:84:d3:b2:2d:d9:21:55:6d:31:fc:49:e5:2e:d2:03:cd:9d:
07:64:36:b7:7a:73:58:14:a2:86:9e:4c:00:82:6b:f7:31:27:
74:6b:59:ea:cf:6b:ee:f3:d5:95:bc:38:35:70:a5:2d:8e:d9:
aa:56:a8:ca:ca:33:4d:31:6e:73:a1:bf:53:55:04:cc:c4:45:
fe:34:44:3e:c5:7b:cd:1f:51:70:b7:ef:cf:e5:31:e8:f9:95:
61:36:af:69:bc:15:39:3c:bc:a2:af:d9:08:03:a2:ec:75:54:
11:0f:57:93:52:37:10:3d:22:03:f5:3a:5a:b5:89:45:96:c8:
14:61:1c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:09 2025 by rpki-client