Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32302e302f32342d3234203d3e20313336313038.roa
File: 3130312e35302e32302e302f32342d3234203d3e20313336313038.roa (raw, json)
Hash identifier: Z/vhqzRK2E34P6LIN8S8nqYVKvvu1P8GgSzY5FNndB4=
Subject key identifier: 86:6F:87:FE:E5:70:66:4B:48:DC:04:11:FD:21:CC:0E:A3:90:37:E9
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 22DDD617E9DE6178AF4BAC71C1F20C43FDB40B4F
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32302e302f32342d3234203d3e20313336313038.roa
Signing time: Tue 30 Jul 2024 02:59:46 +0000
ROA not before: Tue 30 Jul 2024 02:54:46 +0000
ROA not after: Tue 29 Jul 2025 02:59:46 +0000
asID: 136108
IP address blocks: 101.50.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:dd:d6:17:e9:de:61:78:af:4b:ac:71:c1:f2:0c:43:fd:b4:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 30 02:54:46 2024 GMT
Not After : Jul 29 02:59:46 2025 GMT
Subject: CN=866F87FEE570664B48DC0411FD21CC0EA39037E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:6e:bb:a9:68:02:7e:71:62:82:64:89:df:
04:fc:15:8b:26:31:8f:8d:4a:eb:2b:af:0b:e5:1c:
5b:32:cb:d5:68:7e:a9:48:a6:62:e6:d2:1b:4f:5e:
75:3c:9a:84:a2:ca:37:c7:26:59:d0:09:12:70:d5:
48:e7:24:c4:82:93:8f:59:e5:c4:04:2f:21:25:6f:
48:4e:5a:d7:e4:d1:b2:cd:a0:54:b9:97:69:f8:6a:
49:4f:f5:b6:79:74:bc:ce:8b:f4:6e:a2:80:38:f2:
24:23:80:6a:7f:42:04:7b:be:5b:23:03:73:17:3f:
aa:2a:86:33:e0:5a:50:b2:e7:c2:7d:f5:e2:2a:e8:
56:87:70:a7:18:07:e5:df:bb:78:f4:d3:ca:7c:f9:
c9:a4:9e:18:8b:e5:f9:cc:24:be:7a:a0:6e:90:a5:
42:d4:c3:ab:a5:20:32:1c:87:96:6b:cf:fb:53:b9:
e6:ab:f9:a2:d2:23:bc:fc:6e:ab:d5:4d:8e:6e:ee:
73:88:57:b8:8e:19:10:ea:66:fb:10:cc:84:45:1f:
60:da:d2:5f:2b:61:ca:ca:2d:d9:b5:40:cd:02:1a:
12:0a:0c:13:68:d4:7f:68:d8:97:47:3f:f5:53:60:
10:65:e0:5f:f0:7d:0b:f3:0a:bd:bb:60:85:87:d9:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6F:87:FE:E5:70:66:4B:48:DC:04:11:FD:21:CC:0E:A3:90:37:E9
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32302e302f32342d3234203d3e20313336313038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.50.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f9:81:be:57:2e:b4:06:dd:3f:22:bb:28:21:3a:1e:8d:3a:
81:44:aa:81:c7:72:a4:f6:af:1f:78:81:7f:b8:fd:08:c8:89:
7a:02:10:c0:06:38:e7:fb:4f:82:b1:b6:e2:fc:00:f5:30:3d:
f3:7a:cf:83:e2:4f:e0:11:f2:e7:4a:47:d8:df:ce:ae:73:f4:
92:58:dd:e0:12:a0:36:5f:1e:78:5b:25:55:a0:d1:8c:8a:b8:
af:91:d1:ec:e9:7c:f1:1b:70:04:5a:f5:eb:5f:03:53:73:b1:
31:3f:cf:2a:07:29:4d:e8:37:24:91:0f:18:48:7f:7b:21:a1:
d3:6e:6a:cd:c5:50:99:bf:fd:fc:ad:1c:fa:91:f3:03:dc:b1:
f7:ba:3a:b6:cf:9b:50:04:f9:d0:fd:d9:4b:4e:3d:7e:82:a1:
0d:77:42:94:4c:3c:6f:fb:b8:99:25:59:3a:1f:35:18:42:95:
5c:2a:06:b0:bc:fa:53:86:95:ca:ed:a9:92:08:cc:ff:e2:7f:
48:91:17:45:c4:2c:2f:07:2d:96:cf:37:af:cd:8a:e3:72:23:
9b:25:b9:07:46:c4:11:52:16:bb:e7:6c:cb:ac:f0:a4:0c:26:
ff:5c:e6:a7:ad:7d:b1:d7:78:b1:e8:87:2e:c3:1d:3b:a2:18:
63:c9:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:34 2025 by rpki-client