Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa
File: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (raw, json)
Hash identifier: hkjarDn9mLD3pYLM9+FCm3xKAyZZb8KbslY3PfkSGdQ=
Subject key identifier: 21:88:61:99:A1:2D:F6:43:75:A5:4D:4A:AA:33:55:AB:A7:08:2D:2A
Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282
Certificate serial: 7070E09214EE45240A6ED53065DBA91D2FB8DC59
Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa
Signing time: Mon 01 Jul 2024 01:03:13 +0000
ROA not before: Mon 01 Jul 2024 00:58:13 +0000
ROA not after: Mon 30 Jun 2025 01:03:13 +0000
asID: 23756
IP address blocks: 117.102.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:70:e0:92:14:ee:45:24:0a:6e:d5:30:65:db:a9:1d:2f:b8:dc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282
Validity
Not Before: Jul 1 00:58:13 2024 GMT
Not After : Jun 30 01:03:13 2025 GMT
Subject: CN=21886199A12DF64375A54D4AAA3355ABA7082D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:e6:67:56:26:91:a9:0d:05:ea:d6:4a:f9:
d3:55:d5:15:86:d8:37:c4:8f:67:cc:71:1d:8c:11:
45:42:f4:15:e4:34:54:1f:64:08:22:4b:b5:d5:86:
e5:69:fe:3d:76:bd:45:15:67:00:05:d3:5a:78:ae:
10:d3:1f:2c:70:0b:c5:95:a0:4e:ac:3e:93:15:95:
54:95:27:67:77:27:7f:7f:d5:cc:0c:0b:3d:c4:70:
87:6c:33:a0:53:3b:c3:70:be:3f:2f:e3:5c:b9:80:
fe:01:72:ec:7f:ad:bf:bb:a3:b6:4b:b1:86:0c:4e:
c0:6e:95:52:f4:80:1c:cf:09:39:2d:c6:1f:33:3f:
0c:fa:4d:1c:0d:85:3a:43:11:19:8c:0b:ee:d6:3a:
1d:b4:b2:f6:60:3c:df:5c:75:40:ce:72:ac:73:80:
d0:0a:fb:e8:03:bd:3f:98:d9:eb:48:cf:74:93:e5:
f6:a0:98:ba:96:74:b1:58:22:0b:7e:a9:0d:46:8b:
c2:b9:1b:01:42:14:3c:81:c1:5f:67:99:dc:f3:1f:
b7:12:44:26:0b:a6:e0:4a:ee:4d:38:01:3c:11:b8:
ca:1d:85:36:b3:54:5d:70:7f:70:13:94:dc:2f:b7:
0d:98:25:b0:13:8e:10:12:cf:b9:bc:36:4b:b9:8b:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:88:61:99:A1:2D:F6:43:75:A5:4D:4A:AA:33:55:AB:A7:08:2D:2A
X509v3 Authority Key Identifier:
keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.102.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:eb:fd:e4:de:d0:be:2a:f9:c8:b7:cd:b9:9d:48:3d:fd:68:
fc:33:b1:46:b9:60:3a:98:90:73:29:42:10:3c:95:79:34:39:
a5:17:05:9e:ae:1d:5c:cc:63:9d:57:91:ad:33:ec:a4:0a:e1:
33:23:e1:03:67:15:84:0b:5d:09:7f:22:fe:39:fe:13:e4:c9:
47:ca:d3:0a:48:be:68:12:a8:fc:86:0a:46:ab:74:2c:ab:85:
be:14:58:c1:89:00:ce:ee:ec:6a:e9:d7:ff:25:0c:37:0d:61:
15:ac:5e:02:90:0f:a6:f6:91:2f:97:66:b7:90:f5:98:6e:bf:
cd:ad:59:41:d1:cf:d0:da:50:c3:32:66:fd:0f:a8:b1:aa:82:
75:39:8f:79:84:3d:bf:cf:d7:88:73:9e:13:2a:10:fc:54:9e:
02:cc:8a:8b:ca:86:5e:42:9d:df:03:c7:34:2a:4d:1f:a3:fb:
c3:dc:97:f5:8a:5c:77:98:1b:ff:48:a2:be:10:79:8b:95:74:
0f:30:d4:e8:1f:50:d1:46:7b:55:10:ac:b1:c3:96:51:1b:7a:
02:03:1b:fb:d4:4f:28:c9:1a:0d:05:f5:8b:65:48:17:2e:bf:
ef:d9:6a:0f:f4:b4:a9:7b:6e:14:61:c2:71:5c:2f:2d:47:a5:
03:3b:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:36:15 2025 by rpki-client