Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
File: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (raw, json)
Hash identifier: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=
Subject key identifier: 3D:44:21:46:48:7B:CB:5F:42:C1:7C:47:EB:52:2C:7B:F6:5C:AC:D1
Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Certificate serial: 561C8C01EADD922EAE64997AB903564447CC7EBC
Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
Signing time: Wed 05 Mar 2025 05:00:02 +0000
ROA not before: Wed 05 Mar 2025 04:55:02 +0000
ROA not after: Wed 04 Mar 2026 05:00:02 +0000
asID: 452023
IP address blocks: 45.123.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1c:8c:01:ea:dd:92:2e:ae:64:99:7a:b9:03:56:44:47:cc:7e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Validity
Not Before: Mar 5 04:55:02 2025 GMT
Not After : Mar 4 05:00:02 2026 GMT
Subject: CN=3D442146487BCB5F42C17C47EB522C7BF65CACD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:cc:69:66:4c:0d:5a:2a:82:3c:a9:42:fa:
67:bc:47:1f:ee:a1:5f:42:50:0b:fa:5c:c9:cb:07:
8f:1e:18:da:09:ba:9f:98:41:2f:b1:c4:f4:0b:98:
21:bd:ac:d8:18:36:de:44:f9:6a:e9:24:d0:75:dd:
f3:e3:64:f0:e2:da:d5:4a:36:e9:96:12:7b:4e:f3:
9b:88:33:43:31:9c:da:57:89:1f:08:e2:7c:85:b3:
8d:d0:f8:d0:08:c3:f5:3d:fe:d3:16:95:da:5c:98:
7b:c5:6c:1b:7f:ec:4d:05:40:68:4b:10:c2:27:06:
6c:e3:52:49:f2:23:96:df:96:79:4f:71:77:6b:92:
28:b0:dd:fb:93:1d:ba:aa:7f:7f:b5:de:81:47:fa:
25:4e:80:33:a5:c5:b9:47:d9:03:d0:5e:7d:b2:fd:
30:72:a5:0b:c8:87:ca:5a:05:8e:e1:b7:36:b7:c8:
c0:82:c6:db:5c:ee:37:b3:64:92:cd:c3:87:ad:46:
04:96:43:b3:f4:10:1e:ef:d7:fc:b1:e1:c4:3b:ba:
4f:5d:07:f7:f3:d0:aa:ef:b8:7b:12:8b:dd:ef:27:
16:6b:d5:74:5f:01:5f:d6:62:d0:9e:d5:55:07:51:
18:91:0c:51:33:3b:dd:5a:d2:e0:7e:a5:24:f1:0e:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:44:21:46:48:7B:CB:5F:42:C1:7C:47:EB:52:2C:7B:F6:5C:AC:D1
X509v3 Authority Key Identifier:
keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.143.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ba:e2:35:6e:93:72:49:c2:17:ec:9e:85:5f:dd:9a:2d:c0:
06:28:36:f3:2f:30:24:81:6b:89:fe:57:20:86:07:8e:fe:e4:
93:0a:29:85:6b:84:f5:28:ea:64:fa:5c:1f:95:d3:cc:e3:92:
7b:1f:e3:d5:ac:b3:b7:81:72:21:c0:51:2c:03:7b:54:31:e5:
b5:0e:04:79:82:4e:0e:ba:b3:e7:60:03:c6:e0:fe:f1:d7:68:
a7:2c:ca:9d:36:0a:88:37:b3:62:32:1d:90:09:8b:2d:c7:cd:
72:c2:ac:38:44:8b:82:75:ef:70:32:d8:4a:41:83:27:61:50:
db:0b:2f:14:6e:10:4f:57:83:0d:68:08:24:d6:7f:c9:1f:f2:
4d:e0:54:8a:05:f5:4f:af:a5:bf:7e:25:a8:c9:a8:ff:0f:56:
cc:3b:23:f5:bc:d2:51:b1:36:26:b9:22:65:91:09:d7:79:4f:
73:81:4f:20:d5:30:2d:44:18:29:b3:ae:cd:52:df:79:ba:6d:
11:13:90:74:e5:6e:50:45:3e:19:15:f0:f5:82:35:a8:d6:01:
24:71:1d:32:a3:7b:42:2d:73:7a:f3:fe:b0:8d:f0:0e:c3:2c:
79:26:10:f8:74:99:a6:57:96:14:3b:2c:e7:d1:a0:66:d4:45:
c3:36:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:46:48 2025 by rpki-client