Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32332d3233203d3e203338373533.roa
File: 34352e3131352e36362e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier: Ooj1ChW8XvXVlHBNJ7rnMWwA/6ys4mLotG+xY2Vzq+U=
Subject key identifier: 4D:EB:6C:37:85:40:95:23:32:96:D2:CA:5D:C7:53:F5:45:6B:15:B9
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 435933F2048DFF80672E43C646A50095312792B1
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32332d3233203d3e203338373533.roa
Signing time: Tue 02 Jul 2024 08:03:18 +0000
ROA not before: Tue 02 Jul 2024 07:58:18 +0000
ROA not after: Tue 01 Jul 2025 08:03:18 +0000
asID: 38753
IP address blocks: 45.115.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:59:33:f2:04:8d:ff:80:67:2e:43:c6:46:a5:00:95:31:27:92:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Jul 2 07:58:18 2024 GMT
Not After : Jul 1 08:03:18 2025 GMT
Subject: CN=4DEB6C37854095233296D2CA5DC753F5456B15B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:6a:02:1c:ec:09:8d:28:00:0c:76:58:35:
56:53:1e:55:67:d4:41:b1:51:fe:ee:12:50:cf:48:
8f:ab:5d:f3:bf:61:8f:4f:86:df:1d:b4:30:d0:77:
e3:ba:b7:a8:6c:f2:1d:62:15:06:53:c5:8e:4e:d9:
d5:a9:43:2c:61:a0:3c:8e:13:73:7a:f9:e9:90:4b:
4b:9f:47:6d:e8:08:32:7f:eb:47:94:e0:39:12:9b:
15:95:27:95:12:69:52:74:18:e6:8d:e5:14:52:d2:
c4:3e:59:2e:36:e7:f8:e0:21:eb:69:1c:95:dc:5b:
f1:f3:ea:47:a0:62:18:fc:ab:1b:cb:6e:18:eb:af:
67:ae:99:bf:11:94:d3:8d:49:06:57:c1:37:9d:35:
71:00:fc:f8:34:c5:72:45:3c:30:c5:e7:15:64:5a:
9b:23:d8:bf:bb:f5:a0:d0:a4:0a:a8:62:ac:e5:47:
96:a3:6a:75:f4:ef:84:f6:ac:b8:e0:02:d7:44:c4:
4b:a3:09:d7:bf:dd:a9:29:f6:c0:67:48:b2:5d:7e:
8f:73:3f:33:b7:5f:3e:81:bb:c7:7f:9a:a4:08:5e:
c4:fa:ac:20:5b:ce:7b:89:90:d2:bc:60:1e:67:d3:
81:ee:26:26:fc:ae:b5:b8:67:8f:9f:16:e8:96:88:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EB:6C:37:85:40:95:23:32:96:D2:CA:5D:C7:53:F5:45:6B:15:B9
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32332d3233203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.66.0/23
Signature Algorithm: sha256WithRSAEncryption
51:12:ff:02:62:c1:7d:b7:c9:da:ce:bd:32:7f:76:c4:77:0d:
10:9f:75:b5:8f:d2:87:51:75:3b:d9:7e:3d:84:11:67:23:4f:
d9:03:8e:f3:6a:bd:3d:ff:0b:94:26:e4:fb:13:2f:fa:4a:88:
30:c0:7e:1f:a4:72:a4:c6:0c:a2:d2:59:1a:f5:12:a0:9f:17:
6c:4f:b2:15:d2:5f:f7:dc:39:70:82:d7:ab:7a:6c:a8:46:13:
3b:78:7c:ec:8f:6e:b6:8d:ae:63:c4:c4:f5:7f:a6:3f:5f:f5:
d9:91:db:4b:46:75:5b:f8:c9:26:fd:8c:a5:e4:52:39:78:10:
ea:cd:3d:aa:04:85:67:d5:1e:db:74:cf:62:83:21:a0:51:80:
25:29:22:ef:dd:48:5d:74:22:25:b1:a0:b8:bd:91:c8:b2:ac:
9f:88:fd:2c:f2:6e:8b:fa:a9:c8:a3:d3:a1:f2:c6:ab:1d:81:
c4:dd:fa:f0:38:81:d0:65:fd:91:59:be:f5:fa:19:37:bf:1f:
64:1e:3e:80:5b:75:7d:39:df:1e:e2:f2:30:9a:6c:68:d7:dd:
ec:84:77:e4:cf:fb:a2:eb:d6:25:b5:49:40:36:44:df:7f:ca:
07:c1:65:17:6d:ce:4c:16:9a:1a:e7:5f:1d:f5:cd:d2:d1:60:
bc:45:88:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:20 2025 by rpki-client