Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e352e302f32342d3234203d3e203436303439.roa
File: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier: gYdBbEHqi/8GEIbwa19GzLrLlojYDwF4Guaq4yqtU1w=
Subject key identifier: 83:61:CF:0F:C6:B1:D7:BB:38:90:11:54:6C:B9:1C:E0:A3:9D:80:31
Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial: 44258E028A7DCB9790C8AD300154ABD0D832AE59
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e352e302f32342d3234203d3e203436303439.roa
Signing time: Thu 18 Jul 2024 08:00:41 +0000
ROA not before: Thu 18 Jul 2024 07:55:41 +0000
ROA not after: Thu 17 Jul 2025 08:00:41 +0000
asID: 46049
IP address blocks: 182.255.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:25:8e:02:8a:7d:cb:97:90:c8:ad:30:01:54:ab:d0:d8:32:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Validity
Not Before: Jul 18 07:55:41 2024 GMT
Not After : Jul 17 08:00:41 2025 GMT
Subject: CN=8361CF0FC6B1D7BB389011546CB91CE0A39D8031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:3a:c1:69:4c:c5:ad:36:b6:28:19:d6:19:
d3:38:6a:dc:a1:81:43:2f:09:d6:44:fd:50:28:57:
bb:9b:0e:49:e5:ed:a6:18:59:2b:0c:02:ad:78:00:
86:26:f5:e9:5e:bc:55:4d:7d:71:e5:ba:3a:f0:b7:
88:de:fd:c5:40:fb:7d:ee:c5:ac:b3:94:de:c4:a6:
62:1d:6c:99:42:e7:e5:01:68:9e:ee:bd:ff:db:9f:
e1:de:d5:a6:66:6d:2b:b5:b1:89:4a:46:11:18:03:
2e:de:72:14:8c:8b:02:29:d9:ef:c6:da:8b:74:57:
af:9b:5c:e3:f9:47:b3:4f:e4:e7:4c:d8:ce:1a:94:
11:86:b7:6b:ea:a6:04:e9:1a:cd:66:5c:c5:47:2d:
77:ae:52:65:b1:1c:f1:f5:5d:a8:b0:8b:39:a4:2d:
f4:f5:41:bd:4d:dc:f7:65:a6:30:f5:df:37:97:9a:
02:c9:1d:2e:9d:88:98:2d:50:19:fc:a4:3b:06:63:
1a:c7:43:ab:9b:71:83:3f:e2:a4:37:31:86:fa:f1:
a8:33:13:be:b3:f7:44:5b:eb:aa:a2:70:0d:61:63:
34:f7:53:bc:77:c7:83:3b:47:84:f0:db:59:b4:5a:
52:1a:66:fb:e4:73:9f:c9:e7:db:b1:b4:7d:90:65:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:61:CF:0F:C6:B1:D7:BB:38:90:11:54:6C:B9:1C:E0:A3:9D:80:31
X509v3 Authority Key Identifier:
keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e352e302f32342d3234203d3e203436303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.255.5.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ab:8c:57:9e:1b:69:de:ac:8d:39:e5:e9:a3:be:11:0e:f4:
09:80:45:7b:93:af:d5:13:91:18:47:8f:8c:98:5b:6a:c4:13:
70:ce:a5:30:0d:b4:c7:e8:64:d1:d0:e0:83:89:13:0d:8d:9c:
71:a9:67:a8:bc:02:f3:a3:73:2a:f8:9f:60:7e:f1:85:ba:86:
7c:56:7b:d4:b3:cd:ac:d9:00:a0:a5:45:ff:b4:8e:3e:c1:98:
cb:da:38:cb:63:d3:02:9a:fa:28:83:27:92:18:11:2d:e9:8b:
fa:36:a1:e0:f5:b7:8f:5f:7f:b7:91:be:c9:0e:24:72:9f:9f:
a6:2c:8a:91:dd:9e:01:a8:98:44:e2:09:99:7d:8d:5b:b8:27:
01:2d:79:19:df:a6:1d:9f:d5:f2:96:ec:56:2e:61:83:37:77:
99:cf:98:52:b1:89:6b:7a:25:56:0b:9b:5a:47:1b:ea:cf:73:
16:fe:26:2c:61:d3:11:9e:32:c2:2e:94:23:5f:0e:b2:d2:f8:
5b:f9:7c:22:e6:9f:2c:8f:71:1a:98:a5:ca:9c:a6:47:07:0e:
4a:3f:9f:3b:62:82:4c:15:ad:e8:0b:71:ce:6c:df:9c:b6:01:
7a:49:e9:c2:8b:cb:c4:f8:71:00:01:c0:16:bc:d4:4b:de:fb:
14:28:3a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:38 2025 by rpki-client