Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
File: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier: s2Z9bMWQLiKwFbH9doRdyOIOSB0aQByVuaUp9ml9odE=
Subject key identifier: 0C:EA:FE:50:21:80:90:FA:B2:2D:04:30:0F:13:40:EC:89:9B:7D:BF
Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial: 1BFB6FFB762C6F2AACF6671D0B549865A0A9CBD4
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
Signing time: Mon 01 Jul 2024 01:04:38 +0000
ROA not before: Mon 01 Jul 2024 00:59:38 +0000
ROA not after: Mon 30 Jun 2025 01:04:38 +0000
asID: 38783
IP address blocks: 115.178.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fb:6f:fb:76:2c:6f:2a:ac:f6:67:1d:0b:54:98:65:a0:a9:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Validity
Not Before: Jul 1 00:59:38 2024 GMT
Not After : Jun 30 01:04:38 2025 GMT
Subject: CN=0CEAFE50218090FAB22D04300F1340EC899B7DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:21:b4:ee:ca:d0:0b:96:42:50:7b:07:de:
68:9e:7c:90:73:d6:13:66:b3:9f:1f:10:9c:8f:96:
2c:ce:2c:cd:a7:6f:4b:63:da:e2:32:ec:01:c0:a0:
d9:72:9f:cd:d6:42:50:41:55:d6:eb:b3:e9:28:cd:
d1:6c:d7:17:12:b3:0a:96:42:22:9b:a2:8c:d1:88:
3d:a6:95:92:5c:f5:33:ba:fa:29:b4:3f:99:94:ff:
8e:34:ff:a1:ab:03:96:11:4e:cf:c2:0e:e1:56:73:
45:c3:4d:75:e9:07:06:c9:89:0c:d4:80:b8:a1:56:
1c:0d:de:a6:00:10:df:7c:e9:9e:6b:36:c1:5f:5f:
56:e9:8e:17:98:83:f3:70:7f:1c:b9:91:da:ce:c8:
41:93:64:cf:00:9d:90:a3:01:50:b2:96:c3:f9:c1:
1a:67:c8:a9:ad:4b:36:f7:d1:da:ee:04:ed:5c:29:
10:7b:e3:39:ba:3e:8d:2d:97:f5:c2:fe:da:de:06:
43:90:eb:5d:a0:78:df:da:d6:46:3c:b4:6c:73:92:
e5:1b:50:9e:d8:5d:70:51:a9:af:c3:f1:b1:41:80:
05:83:75:4a:73:03:22:1c:01:fb:ad:4e:cb:48:ed:
4d:3c:6a:2c:b5:16:68:20:71:ee:ee:c8:02:48:84:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EA:FE:50:21:80:90:FA:B2:2D:04:30:0F:13:40:EC:89:9B:7D:BF
X509v3 Authority Key Identifier:
keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e34392e302f32342d3234203d3e203338373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.49.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:d1:14:a4:f3:a4:77:22:eb:f5:cd:65:fa:fd:63:9d:24:6a:
bf:d8:0f:70:64:38:9f:33:4f:4d:25:0e:da:a6:06:b0:17:90:
ac:73:7d:fa:47:f0:a1:30:19:38:ab:b8:c5:46:71:2b:57:d2:
20:01:78:5b:c0:05:0b:93:58:ad:f9:5a:54:30:1b:b3:38:84:
45:da:50:18:92:d8:aa:43:05:2a:84:ef:95:20:6d:86:7f:36:
07:ec:9a:22:01:92:9b:3e:5e:0d:9c:94:ff:6d:90:43:ec:03:
97:8c:8a:be:9c:da:47:76:1e:12:83:8c:0a:1e:a9:e6:15:9f:
6a:7c:9e:b3:9f:b2:45:0a:56:fe:bf:5e:97:f4:29:d7:72:cb:
bb:a2:0c:89:f2:b2:e1:f0:06:7b:1d:9e:8e:ad:12:aa:12:d0:
91:4a:57:df:7a:12:ef:07:4b:35:f4:51:f3:fd:f2:6d:d7:27:
41:bc:c6:b0:74:20:4f:58:89:03:43:ce:93:2f:46:58:b4:5b:
33:51:83:f4:95:bc:c8:38:5a:fa:88:57:7d:16:2f:e6:72:88:
ed:be:36:ac:98:53:56:b8:10:3b:d1:2c:83:83:d7:08:c2:f2:
84:f0:6c:26:ae:68:cd:73:81:c7:0a:c2:98:12:f3:54:c3:7c:
86:b2:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:01 2025 by rpki-client