Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33322e302f32342d3234203d3e203435333235.roa
File: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier: UQXVoZKGz5JhkoTTlnHcb+EQxg2+/5hollJFLUnx0yQ=
Subject key identifier: 50:0E:67:1A:ED:06:BA:69:29:7B:F8:4E:E2:53:D8:87:44:8D:DD:D8
Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial: 18835A90AC829FB2CB5D79FDA2D455B8C10B2EFA
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33322e302f32342d3234203d3e203435333235.roa
Signing time: Tue 05 Nov 2024 08:00:02 +0000
ROA not before: Tue 05 Nov 2024 07:55:02 +0000
ROA not after: Tue 04 Nov 2025 08:00:02 +0000
asID: 45325
IP address blocks: 122.248.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:83:5a:90:ac:82:9f:b2:cb:5d:79:fd:a2:d4:55:b8:c1:0b:2e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Validity
Not Before: Nov 5 07:55:02 2024 GMT
Not After : Nov 4 08:00:02 2025 GMT
Subject: CN=500E671AED06BA69297BF84EE253D887448DDDD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:86:c9:d2:8e:e0:91:5c:07:5b:8c:b7:41:
5e:bd:2a:21:de:9a:87:42:ba:3e:3f:a2:9b:53:67:
0a:2a:c4:60:fb:84:63:97:6d:49:65:2f:fb:8d:89:
77:db:fa:8e:4e:34:dd:c8:7a:d4:9c:8d:84:f3:3a:
61:c8:56:be:80:43:50:df:0a:98:64:ab:0d:f6:81:
89:63:53:07:d9:55:c3:25:34:a5:42:0a:5e:a9:1a:
5b:8b:76:f9:75:81:ff:6b:8c:b7:65:8f:68:8d:a1:
05:27:9d:f8:53:6d:23:40:ab:e0:5f:03:9b:9d:2e:
88:86:3f:42:6f:bc:e2:37:4d:05:9a:43:d1:57:95:
14:ad:82:51:5b:78:2a:49:41:26:3b:38:ef:a9:a4:
b5:bf:c1:44:26:59:c6:a7:b2:da:89:aa:60:f7:eb:
24:db:78:65:a3:c1:a7:0e:71:71:0e:f4:86:86:09:
8a:89:80:4e:bc:e9:aa:b8:34:f1:59:55:1d:de:da:
7a:18:dd:71:53:fe:3f:90:12:13:44:ee:9f:de:68:
21:71:c6:3c:5e:ed:dd:49:3d:c8:bf:f5:d9:53:18:
b7:be:f2:ed:27:49:20:54:40:c8:6c:ea:c8:6e:bb:
e7:8c:9a:e6:52:06:39:88:ce:03:30:3f:48:48:8b:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0E:67:1A:ED:06:BA:69:29:7B:F8:4E:E2:53:D8:87:44:8D:DD:D8
X509v3 Authority Key Identifier:
keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33322e302f32342d3234203d3e203435333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.248.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1e:e0:eb:5a:6c:4d:32:01:cc:58:98:41:72:2d:3b:04:6b:
61:69:41:6d:69:e8:50:33:89:57:19:d7:d3:80:5f:e4:46:e9:
b7:89:47:e6:9b:a1:a9:28:c3:72:be:5a:e2:d0:e7:34:d0:77:
9f:79:79:f9:70:a3:b3:5b:cd:de:d9:31:fa:cf:d5:0f:89:8a:
7a:ac:76:d9:a4:8e:4a:1d:df:3c:61:1e:f9:27:d0:78:cd:93:
69:df:a2:73:e2:0d:79:9e:e8:da:26:9b:cd:3a:32:27:15:38:
9a:3d:2c:2d:89:f7:69:e4:6f:83:3f:f7:de:23:f4:96:e0:ff:
08:f0:ed:06:e7:03:71:3f:cf:a7:90:2d:2a:98:2d:b3:e9:0d:
da:68:70:70:d4:69:2b:01:da:4b:af:f0:04:e9:4b:2a:88:46:
3f:7c:5d:d2:bb:2f:e9:99:e6:67:fa:5f:20:2e:9c:c3:ce:9d:
0c:3f:a6:3c:57:ee:12:5b:6b:60:fd:17:55:fb:83:47:a9:fd:
92:34:36:99:5e:a4:a5:20:2e:e0:05:ad:0e:5c:64:65:f5:d4:
26:4a:69:da:24:0f:02:b5:3b:0d:d3:9d:57:18:72:cc:30:68:
7c:87:a7:5c:d0:03:ec:dd:53:d1:d0:cc:8a:33:3a:e7:d5:3d:
10:0f:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:20 2025 by rpki-client