Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37312e302f32342d3234203d3e203436303633.roa
File: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier: yO9dnKFN9zlpHOZzkZ8VS+2FhIP3vvVtlP91AUvmN9o=
Subject key identifier: C7:90:79:C3:8C:56:21:53:D0:6D:B4:37:AD:32:E0:C7:CA:5C:40:FD
Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Certificate serial: 6DCF4A490A6A7191D8A1643FF5ACF0BAB2438EDB
Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37312e302f32342d3234203d3e203436303633.roa
Signing time: Fri 04 Oct 2024 12:02:25 +0000
ROA not before: Fri 04 Oct 2024 11:57:25 +0000
ROA not after: Fri 03 Oct 2025 12:02:25 +0000
asID: 46063
IP address blocks: 27.112.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:cf:4a:49:0a:6a:71:91:d8:a1:64:3f:f5:ac:f0:ba:b2:43:8e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Validity
Not Before: Oct 4 11:57:25 2024 GMT
Not After : Oct 3 12:02:25 2025 GMT
Subject: CN=C79079C38C562153D06DB437AD32E0C7CA5C40FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:66:a9:48:9a:81:13:a9:af:f9:b8:fa:2f:
7f:85:4d:bb:0d:92:5e:47:39:5b:9b:62:c9:84:79:
6c:76:dc:46:45:b6:0a:cf:8f:59:38:07:5b:e4:47:
cf:72:0e:35:f3:d9:0a:1b:62:4d:a8:90:02:da:a5:
6f:44:08:8c:ff:8a:b0:96:ef:aa:2f:2f:b4:ff:fe:
87:2f:bf:08:06:cf:c1:87:3c:51:f1:da:91:91:2e:
dd:25:a7:9d:fd:d2:1e:92:f3:a8:38:4b:97:4b:6e:
f3:95:d0:40:70:3c:4b:2f:74:63:4f:84:f6:97:75:
48:8a:4b:24:46:11:57:40:e3:ff:7d:fd:f9:63:30:
ad:cc:c2:4d:4d:c9:c6:64:f8:81:03:3b:b4:2d:46:
1e:80:28:c2:d1:80:0a:8f:e5:6c:18:9b:24:ab:b5:
dc:34:1f:c1:95:a8:13:8a:9a:0d:f4:b5:c6:b3:ba:
69:bd:83:c8:80:3f:78:03:7b:28:45:ce:06:0c:2c:
89:71:6b:2a:94:c7:6a:08:a3:49:f7:8a:4b:56:08:
0e:63:39:b6:3d:50:12:17:43:84:e0:d4:f1:97:6a:
92:c0:18:c3:7c:7b:72:c3:9a:9d:2f:e8:6c:7e:55:
26:71:f5:c1:6b:16:97:be:63:f8:67:a5:f0:0a:df:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:79:C3:8C:56:21:53:D0:6D:B4:37:AD:32:E0:C7:CA:5C:40:FD
X509v3 Authority Key Identifier:
keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37312e302f32342d3234203d3e203436303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:92:4e:2e:f8:a0:a9:4d:13:51:5b:c5:7f:89:ea:c8:6e:29:
3b:e6:91:8e:ab:b1:05:1f:24:5c:1c:2c:53:49:2a:96:86:c6:
91:81:18:62:ab:08:3f:5f:ed:bb:e0:98:8f:6a:0c:34:2f:09:
7c:7a:41:56:f6:64:5b:c5:82:2b:47:ca:c1:6f:9a:5c:54:1a:
7d:3b:4c:6a:4a:38:d8:96:55:a6:dc:51:b0:38:b1:4f:21:1a:
55:02:59:74:43:1d:31:8c:9a:57:58:50:9c:16:03:24:22:17:
a4:6b:55:08:43:c8:6c:19:e3:f2:e3:86:00:cc:a0:85:79:de:
11:52:91:f6:5e:2f:b7:a2:da:39:d0:4e:26:8b:89:f4:e2:9f:
9b:df:07:17:56:ce:1c:70:03:91:e0:b1:31:99:f1:11:e2:07:
34:fb:db:a2:6f:97:b9:1b:87:7e:47:81:b3:37:37:d0:88:1d:
ab:3f:dc:07:4d:8e:4b:37:37:79:05:ad:29:6e:c2:f4:67:42:
83:6e:5f:3c:06:17:c5:5e:50:33:e0:e6:bc:01:ac:40:3c:ea:
43:b6:46:fd:7d:6b:21:df:5a:f2:c3:b7:1a:cc:3c:36:ab:ea:
6e:ee:f5:1f:a8:fb:52:16:57:10:45:f6:54:ea:cb:5a:1d:f5:
de:db:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:48 2025 by rpki-client