Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa
File: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier: armCdMsgrh9HBVd3tCBMp8GfztvN8GGDpG5VkguYG4U=
Subject key identifier: 5A:42:A1:EF:C3:60:9F:37:C1:7E:AC:78:73:BC:59:F3:A6:B8:4A:CF
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 677F13CF7FC7A7D5D17A1EB4220165B2773815AA
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa
Signing time: Fri 30 Aug 2024 16:00:01 +0000
ROA not before: Fri 30 Aug 2024 15:55:01 +0000
ROA not after: Fri 29 Aug 2025 16:00:01 +0000
asID: 24206
IP address blocks: 110.44.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7f:13:cf:7f:c7:a7:d5:d1:7a:1e:b4:22:01:65:b2:77:38:15:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Aug 30 15:55:01 2024 GMT
Not After : Aug 29 16:00:01 2025 GMT
Subject: CN=5A42A1EFC3609F37C17EAC7873BC59F3A6B84ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:c7:10:9a:34:b2:43:76:9d:40:60:36:3e:
20:70:a4:5b:63:e6:99:29:7e:da:86:08:7f:5f:12:
12:3c:14:09:aa:92:11:c6:b9:3a:75:5f:40:ad:26:
71:3b:ee:e8:5f:26:79:f5:5b:ba:ed:ac:e0:bf:a7:
fe:13:fd:dc:81:50:2a:9b:2e:4e:66:51:1f:49:86:
0c:71:84:54:67:6f:19:eb:86:ee:3e:fc:02:c9:7b:
b1:7d:25:f9:e4:dd:1d:a7:2a:3d:57:39:4e:aa:cb:
0f:af:28:6d:7b:b5:b5:7d:8d:7e:2e:0e:8d:6a:fb:
98:77:35:8a:33:64:cc:44:e1:f4:7c:be:e0:ed:60:
61:00:2f:f1:bc:61:ba:31:e4:a4:60:98:06:be:e8:
11:92:9f:bc:1e:2c:4c:35:2a:8c:31:ae:dd:2b:f9:
ff:13:59:cb:a1:00:6b:af:bb:44:fc:58:c1:69:72:
e8:38:7e:3b:96:ab:d0:db:24:92:cd:47:b3:05:ed:
82:c2:9f:66:ee:6b:a5:a2:ed:21:cf:89:d6:ca:7f:
7a:5f:63:4f:7e:7f:10:fd:52:c9:ab:82:5e:5e:2b:
64:5b:5a:53:ff:f1:43:99:d6:66:eb:c4:c2:4f:32:
d2:23:11:17:e3:27:36:02:ee:94:88:5b:5e:f9:38:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:42:A1:EF:C3:60:9F:37:C1:7E:AC:78:73:BC:59:F3:A6:B8:4A:CF
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.169.0/24
Signature Algorithm: sha256WithRSAEncryption
84:28:cb:4d:f5:1d:dc:ec:64:8e:77:a7:b6:f7:35:c3:71:12:
f5:c4:b2:f4:27:0e:16:4f:b8:78:25:96:88:19:de:7f:03:bc:
9c:6b:7d:64:cf:93:ad:f7:2c:23:f3:cf:fd:90:f3:be:d6:44:
b9:56:2d:8d:76:cc:90:7d:8f:69:cb:24:83:44:83:58:10:f8:
55:81:0a:d4:0e:84:32:f7:2a:6b:89:5e:3e:57:e7:5b:a1:33:
2c:f7:f3:4f:9b:15:b9:09:f8:59:dd:31:2f:5f:96:3b:f2:f0:
a2:7f:10:c9:14:45:d4:15:37:fa:20:e0:2f:a2:eb:9a:c7:3e:
96:02:aa:bc:f3:e8:69:b9:2e:9f:65:68:0b:9d:35:6c:b3:bc:
67:0e:1c:5c:9b:65:13:a8:2e:05:bf:1d:54:59:43:2b:58:26:
47:08:0a:5e:d1:21:f2:c7:af:fb:37:94:5f:33:66:eb:93:4b:
b8:27:ff:be:7d:70:ec:26:a2:57:42:a0:f2:bb:36:45:ac:28:
64:45:f5:e8:b2:57:fd:79:49:8b:41:03:a2:6e:89:0b:63:bf:
3d:07:68:35:0a:a8:20:13:68:d0:a1:6e:59:3e:e8:bd:ac:ea:
f4:f0:5d:1e:77:36:25:fc:d2:dd:9b:cd:1b:a0:14:6f:53:4a:
b4:f1:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:38 2025 by rpki-client