Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa
File: 3131362e31322e34312e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier: doEACUjApiRg3nFKKy22AlT5sIPWu7pQ8KoXoOKnGPY=
Subject key identifier: A1:F5:83:F0:EA:60:20:01:97:8D:25:CE:7E:73:B7:01:A3:C4:06:24
Certificate issuer: /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial: 4B65C6CC05E4C5EFD7CB0812D984C60340828090
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa
Signing time: Mon 27 Jan 2025 02:00:03 +0000
ROA not before: Mon 27 Jan 2025 01:55:03 +0000
ROA not after: Mon 26 Jan 2026 02:00:03 +0000
asID: 38165
IP address blocks: 116.12.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:65:c6:cc:05:e4:c5:ef:d7:cb:08:12:d9:84:c6:03:40:82:80:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Validity
Not Before: Jan 27 01:55:03 2025 GMT
Not After : Jan 26 02:00:03 2026 GMT
Subject: CN=A1F583F0EA602001978D25CE7E73B701A3C40624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:2b:a8:d4:a7:6c:10:7b:b8:6f:19:4f:64:
35:69:5f:74:6a:03:6c:05:22:e1:1c:38:4c:17:b9:
be:47:1c:eb:0f:f3:3f:ed:26:01:3e:ee:3b:44:0b:
e6:3b:e1:d8:2b:01:2d:fa:26:e5:2f:0c:97:6e:ad:
53:1b:6d:12:52:13:70:1b:6e:6d:cc:3b:ab:db:ef:
47:f5:b3:7d:73:03:34:de:f4:c9:20:36:9c:a4:30:
89:ef:8d:fd:54:bc:02:fe:e7:eb:92:cd:bf:7f:1e:
54:bb:7b:2c:76:07:cc:ee:46:8f:84:c6:e3:1a:5f:
07:ef:8a:cb:88:1c:a5:79:4e:20:3a:73:ce:71:6a:
93:f9:77:55:df:d6:f3:57:70:dc:47:bf:ad:19:77:
9c:8f:e0:43:b5:24:ce:dc:51:24:86:53:bf:e6:1e:
5e:a6:5d:58:7a:0a:7c:e6:94:c0:07:64:e2:a1:b0:
3d:a9:e5:d9:0e:6b:4a:4a:d4:07:d7:4a:c3:e9:e0:
06:85:b0:78:98:a3:00:54:e7:10:4b:10:b1:03:e3:
3b:80:fa:59:70:79:c2:1c:59:b8:f2:98:44:cd:aa:
01:74:ea:a0:04:36:97:69:59:9d:aa:c4:91:98:50:
2d:ed:dd:8c:d4:08:50:02:e0:44:d6:a5:c0:3b:07:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F5:83:F0:EA:60:20:01:97:8D:25:CE:7E:73:B7:01:A3:C4:06:24
X509v3 Authority Key Identifier:
keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.12.41.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6f:73:25:91:d2:48:39:91:89:5f:63:3e:08:65:f0:14:ef:
39:ca:fe:eb:a0:91:43:22:34:d1:94:e0:1b:84:7c:db:48:a9:
d6:a3:20:c8:ce:45:36:76:78:0a:11:6c:3f:8d:64:07:4f:d5:
ea:66:e0:20:50:40:2f:10:5c:39:73:9c:d3:b2:72:19:ef:8e:
d0:3e:c5:c2:cc:88:f3:0c:13:01:b9:13:db:b9:f7:1b:d2:39:
48:a7:98:d9:9e:05:10:31:0a:5d:81:09:c5:b3:95:b4:f5:d4:
eb:69:8e:e1:2e:2b:ca:30:b4:40:a7:82:89:e3:44:e7:4a:11:
0d:49:24:f0:a0:b9:ad:57:a7:33:c5:05:66:7f:1c:9e:24:9d:
8c:0c:99:20:11:d6:bb:2c:46:5b:fa:ef:1c:53:cc:a7:84:06:
59:7e:47:e0:2a:ed:db:42:0f:f1:2e:ed:7a:2c:74:1c:a2:b5:
c9:bd:1f:b9:b9:e2:9e:75:db:30:10:57:46:aa:27:05:12:a3:
d3:57:6f:4f:17:7d:7a:c8:76:57:05:d5:e7:96:36:36:42:a3:
a1:63:7c:96:39:fe:b3:01:e6:3c:68:51:89:a0:d2:44:cb:7f:
ba:df:c6:3d:52:e9:08:6a:17:ee:4d:d8:d2:cc:f1:56:c8:6d:
a6:ac:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:49 2025 by rpki-client