Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38312e302f32342d3234203d3e203535363532.roa
File: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier: OPw2qIoiwwy7ASYHOGCX10NAN40v1tPJ0GZbmeP5o0Y=
Subject key identifier: 84:90:9A:72:86:21:A3:05:16:A3:48:0C:5B:E1:5F:0F:38:4D:34:1F
Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial: 6E027CAE0241202EC294E16157EB182ED81FA243
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38312e302f32342d3234203d3e203535363532.roa
Signing time: Sat 31 Aug 2024 04:00:00 +0000
ROA not before: Sat 31 Aug 2024 03:55:00 +0000
ROA not after: Sat 30 Aug 2025 04:00:00 +0000
asID: 55652
IP address blocks: 27.121.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:02:7c:ae:02:41:20:2e:c2:94:e1:61:57:eb:18:2e:d8:1f:a2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Validity
Not Before: Aug 31 03:55:00 2024 GMT
Not After : Aug 30 04:00:00 2025 GMT
Subject: CN=84909A728621A30516A3480C5BE15F0F384D341F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:bc:d8:9c:ae:d3:af:c9:b6:48:60:62:80:
e7:64:a5:e1:d2:b5:8f:6b:08:a0:56:83:4e:88:67:
18:35:83:09:dd:c1:0f:a5:9d:a6:07:80:7f:19:e8:
8c:8e:5f:9c:38:0d:24:d3:e5:82:3b:40:78:f5:8f:
37:5b:da:66:aa:53:a8:d6:b5:ad:bc:89:f0:90:06:
91:e9:47:c0:70:3d:0e:4b:39:04:50:48:61:ce:82:
cf:de:96:43:9d:34:42:ef:b9:ae:47:66:e5:7c:09:
5c:9a:b7:b7:33:a2:5a:1a:2e:aa:4b:93:b5:2f:8b:
f9:54:a7:d2:0f:6f:01:61:8d:a3:1f:88:b3:eb:2f:
be:32:fa:19:6f:b0:87:c3:59:7c:cf:d4:b9:23:65:
db:67:bf:cd:56:a5:2e:de:e2:f9:f3:c9:95:22:86:
ad:5d:a7:05:30:e9:4a:ac:32:23:8a:1f:66:b7:3c:
c3:4e:e1:c0:82:b6:e9:4a:3f:7f:fe:c3:19:af:51:
12:21:8b:76:1d:93:5a:fe:8b:a6:00:91:52:c0:94:
52:6c:64:d6:d9:e1:5e:d5:bb:5b:02:c8:f6:6d:df:
42:b3:f4:7f:31:6e:93:ba:de:76:04:aa:fe:64:c9:
fa:5c:9b:0e:27:c6:c4:68:31:ca:f7:34:3a:8b:c5:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:90:9A:72:86:21:A3:05:16:A3:48:0C:5B:E1:5F:0F:38:4D:34:1F
X509v3 Authority Key Identifier:
keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38312e302f32342d3234203d3e203535363532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.121.81.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1d:0f:4f:14:9c:6f:88:6c:31:e0:cf:7d:05:38:d2:2d:d0:
80:2e:6c:2b:a8:05:de:bc:d0:87:c1:59:4c:1e:da:34:d1:f2:
ce:b5:53:50:4a:b0:aa:16:0c:d7:6d:67:fc:9c:08:ea:17:a7:
97:fd:5e:8a:46:eb:ec:97:48:d7:22:80:31:82:9b:1d:af:a7:
05:df:bd:92:31:21:9d:a1:8a:6f:b9:fe:1d:e4:a4:58:ab:e9:
e6:79:04:1b:30:10:07:8c:87:ce:97:e2:12:5e:5e:d5:15:66:
b2:a7:aa:a9:ac:e8:1b:07:7b:66:71:8d:f5:6f:ad:3e:7b:9e:
07:03:40:27:c0:ad:84:2d:a6:d5:49:b0:a9:5b:a9:5d:b5:c9:
d0:cd:a9:10:78:0e:63:52:61:b7:7a:ff:d4:b0:f7:1f:cf:57:
34:59:86:bb:f0:af:e2:b4:5f:92:4d:28:e1:08:3e:b8:ad:0d:
e8:66:59:18:4e:a4:b6:59:95:f8:f6:b2:59:61:be:4f:bb:13:
37:57:e6:a5:d5:0a:e6:54:99:6c:07:fe:27:33:6d:3c:58:7b:
1e:3b:9d:b5:a4:e2:ce:4f:d1:f1:e0:f2:f0:80:f0:a3:26:2f:
ef:3b:dd:aa:a0:73:48:57:c4:4d:d7:ab:c7:45:f2:fb:56:2d:
90:b5:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:56 2025 by rpki-client