Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa
File: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (raw, json)
Hash identifier: jq0e805LfMnkdfWLKacSRG7Ij32XtfUPAgDbV/aAs+8=
Subject key identifier: 25:20:8B:81:23:28:EE:48:CF:C1:00:65:87:C6:32:A9:2B:6D:40:52
Certificate issuer: /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial: 5940C2736A66E9B658E64F74F10D1A5F7FB61993
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa
Signing time: Sun 02 Jun 2024 04:00:01 +0000
ROA not before: Sun 02 Jun 2024 03:55:01 +0000
ROA not after: Sun 01 Jun 2025 04:00:01 +0000
asID: 18004
IP address blocks: 115.178.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:40:c2:73:6a:66:e9:b6:58:e6:4f:74:f1:0d:1a:5f:7f:b6:19:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
Validity
Not Before: Jun 2 03:55:01 2024 GMT
Not After : Jun 1 04:00:01 2025 GMT
Subject: CN=25208B812328EE48CFC1006587C632A92B6D4052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:bf:85:33:f5:8f:56:c3:0d:39:e2:44:31:
2c:65:54:ba:c8:0c:25:33:12:d4:54:2b:b1:a6:04:
2b:68:7d:2f:6f:f3:50:cc:c5:0e:c8:84:04:ec:04:
88:fe:85:05:72:85:ac:dd:17:d3:5c:32:47:7d:ed:
81:5e:20:0e:04:2f:27:b2:b1:6d:e3:94:87:24:80:
a7:99:29:87:ae:f9:c9:9f:fe:b9:66:e3:59:9a:b5:
bf:82:ec:c6:51:77:14:21:27:aa:c6:42:41:27:1a:
8e:bd:13:79:99:e0:ee:9e:65:60:c7:dc:ec:66:44:
fd:ee:5b:47:db:71:e4:89:76:17:e6:e4:8e:6a:ae:
80:a9:a2:10:ec:46:ab:41:e6:f3:3c:e5:7e:51:5c:
ba:2f:dd:be:0f:fb:39:83:e2:dc:90:ba:8d:72:a7:
f5:ed:5e:a0:15:af:97:72:b9:9e:86:c0:c1:fc:1b:
39:b2:a1:8d:47:a0:a3:cc:5d:95:92:62:08:91:97:
a5:40:1c:8d:e5:79:7e:d4:8e:0b:c4:4d:37:5b:55:
a4:a6:8a:21:80:10:09:e3:bd:d6:45:10:3e:35:98:
1f:e3:75:42:55:f5:30:72:54:43:60:67:b6:4c:94:
55:62:1e:6f:d8:51:cf:6e:3a:5d:0b:90:41:8a:12:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:20:8B:81:23:28:EE:48:CF:C1:00:65:87:C6:32:A9:2B:6D:40:52
X509v3 Authority Key Identifier:
keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.224.0/19
Signature Algorithm: sha256WithRSAEncryption
42:cc:91:e0:73:24:e4:fa:bc:b2:cf:e7:71:41:36:b2:97:a0:
7c:84:a8:f5:8c:01:f7:85:da:fd:0e:0b:9e:0b:e3:a6:51:3e:
95:cb:1f:44:66:a5:6b:1a:0d:90:f1:c6:d0:8f:58:d4:8e:16:
23:f8:0a:f4:08:a3:b7:66:1f:03:a7:c1:f2:a7:5e:e8:c7:56:
a9:36:bd:72:78:d8:c3:bf:ca:bc:16:0c:1f:ca:df:93:73:4e:
44:4e:2f:9b:47:ae:18:75:6f:5f:f1:29:3b:b3:b6:64:f3:89:
07:ab:ee:4d:4b:82:97:d2:a9:8f:57:aa:36:c3:b4:50:ea:29:
d4:86:9f:80:e5:c1:b5:dc:da:cb:a8:db:2d:d9:dc:71:56:a5:
af:90:9b:f7:67:ef:41:5c:ec:fa:2b:ef:9b:bf:11:fa:a3:9f:
b6:fd:6f:08:83:2c:cf:76:a0:b6:a7:0c:3b:ef:2f:70:d9:ee:
24:a1:0f:ba:3e:6e:7e:fa:56:bd:07:36:9f:46:2f:66:3f:74:
d2:92:6a:4e:2d:58:5d:4e:f8:18:07:02:66:d0:d8:65:b2:99:
ef:02:22:dd:8d:67:85:c8:f1:c1:d1:4b:67:b1:c7:73:f4:72:
d7:34:95:38:d1:a5:5c:4d:5c:2e:b3:1e:3e:48:82:4f:45:bb:
16:78:70:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:16:54 2025 by rpki-client