Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa
File: 3131362e36382e3235342e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier: sqXKysj0fZFVuk+mIqTT6h3SqroUnTVlNsOViQQ3BHg=
Subject key identifier: 66:F0:FC:2A:63:82:7D:98:3A:4C:B4:3E:F7:8E:7F:5D:11:59:EE:63
Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial: 66E2F3592A69E79675D5FC07A205533A2F7D227D
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa
Signing time: Mon 01 Jul 2024 01:04:42 +0000
ROA not before: Mon 01 Jul 2024 00:59:42 +0000
ROA not after: Mon 30 Jun 2025 01:04:42 +0000
asID: 38500
IP address blocks: 116.68.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e2:f3:59:2a:69:e7:96:75:d5:fc:07:a2:05:53:3a:2f:7d:22:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Validity
Not Before: Jul 1 00:59:42 2024 GMT
Not After : Jun 30 01:04:42 2025 GMT
Subject: CN=66F0FC2A63827D983A4CB43EF78E7F5D1159EE63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:e7:0b:c9:39:75:fb:fc:27:97:31:19:9c:
8c:4d:8f:79:23:ba:fd:d0:47:6d:d8:6f:69:f0:94:
5c:cd:9a:42:92:30:dd:eb:8a:e0:6c:31:46:5c:21:
39:25:dd:7b:2f:47:5a:b6:6b:0e:69:23:4a:bb:d4:
a2:f9:69:ba:f2:5b:aa:a8:f7:de:f0:54:b5:79:d0:
79:fc:24:93:24:44:d4:27:7a:cf:1e:f7:8f:79:71:
f6:13:e1:3c:f3:32:5c:ab:fb:f8:78:13:d4:6b:34:
7a:8f:16:2f:22:ba:06:79:34:31:e2:cd:bf:bc:23:
8b:ca:37:8d:43:8a:ac:48:85:62:01:fb:fe:f0:88:
09:5a:db:55:18:70:95:4b:b1:fa:91:a7:53:9c:84:
00:5a:d8:3d:69:1e:a6:db:a4:de:40:8b:79:58:c7:
97:c9:b2:a3:bd:74:bc:22:3d:1b:12:55:2a:1a:04:
29:a2:df:3f:e3:67:34:17:a2:6a:61:37:f4:2d:bc:
5b:e0:6e:96:e3:50:11:f2:99:b4:6e:ee:a8:49:eb:
7c:6b:89:e3:07:5a:a0:97:a8:e4:47:b1:16:3d:59:
cb:3e:2e:5c:b1:dd:06:f3:24:c9:03:72:16:17:ac:
7a:70:51:fa:a0:26:15:3a:32:2b:38:84:00:0f:2c:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F0:FC:2A:63:82:7D:98:3A:4C:B4:3E:F7:8E:7F:5D:11:59:EE:63
X509v3 Authority Key Identifier:
keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.68.254.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8e:18:75:f5:e3:6e:7c:cc:f7:d8:33:31:c4:64:bd:1a:b1:
04:e9:4a:b9:e4:b1:eb:10:aa:89:1c:0e:f0:12:d2:25:90:05:
9f:5d:60:7b:eb:6c:22:7f:c0:84:8b:3b:54:82:d2:e3:48:b0:
6f:4b:c3:1f:9d:a4:06:3a:c9:87:e2:09:11:fc:c7:94:d8:38:
2b:9c:c8:fa:52:f3:85:86:6e:94:a2:bd:6f:12:f1:f8:96:8f:
b0:06:08:fb:1b:98:de:6f:51:41:8f:6b:ca:2e:99:cd:a4:9c:
31:18:af:63:c9:0b:e6:51:ca:a0:09:43:e4:33:5e:4e:e7:92:
e8:48:4e:2c:ea:03:b4:fe:98:8e:a0:30:48:a5:3c:4e:bd:1a:
44:c8:31:52:2e:51:ca:00:51:7c:ea:69:2a:91:fb:e4:96:5f:
b8:20:bb:21:44:d1:65:41:8b:ca:1d:1b:76:4e:1e:ab:19:f8:
83:60:1e:9b:b1:d6:c0:9c:8e:39:e5:31:a7:50:1b:ce:91:42:
35:e6:d0:ca:35:fe:22:ba:9c:9c:75:7b:37:19:a6:1d:ef:2b:
5d:89:64:45:b6:9c:f9:1f:a2:7e:75:85:e3:4f:39:20:58:7d:
b7:88:5a:6c:65:d4:9f:dd:80:3d:ba:89:e2:68:d2:83:06:2d:
2b:99:8d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:02:50 2025 by rpki-client