Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa
File: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (raw, json)
Hash identifier: PIB1m7UZc9kcov7LjZoIh/Ol3lgnFrAZfbEkkmZBCd0=
Subject key identifier: 88:D9:D1:2E:C1:60:8F:62:E3:F2:F6:C3:A6:35:60:D4:1A:46:17:8B
Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605
Certificate serial: 612906DC932312BD977A33AF8FA0B546086814E2
Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa
Signing time: Sun 24 Nov 2024 19:49:05 +0000
ROA not before: Sun 24 Nov 2024 19:44:05 +0000
ROA not after: Sun 23 Nov 2025 19:49:05 +0000
asID: 152039
IP address blocks: 27.124.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:29:06:dc:93:23:12:bd:97:7a:33:af:8f:a0:b5:46:08:68:14:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605
Validity
Not Before: Nov 24 19:44:05 2024 GMT
Not After : Nov 23 19:49:05 2025 GMT
Subject: CN=88D9D12EC1608F62E3F2F6C3A63560D41A46178B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:38:d7:e0:7d:36:15:31:0a:86:e5:f8:c7:
c2:fc:9c:5e:27:d5:5e:a5:cf:38:15:be:ee:45:fd:
2f:f5:91:2a:80:28:02:fc:05:85:48:fc:36:00:d3:
ba:4a:9d:c5:68:8a:49:2e:bf:13:6e:9c:81:c8:47:
8f:10:83:9f:1a:83:20:28:fd:07:6d:2f:f9:76:e0:
60:b4:32:3a:fc:ed:13:ef:38:23:ea:08:2a:bf:a7:
be:1d:bf:c2:b1:5c:65:de:a5:02:7b:29:4d:0f:64:
5e:72:2b:77:62:2a:27:24:ab:bb:94:df:50:74:55:
b8:3e:fa:65:8a:ff:1b:ca:65:19:a1:b6:48:af:36:
13:25:10:f3:b9:3f:a2:2a:dd:84:54:e9:ac:c4:b8:
7a:54:06:cf:fc:69:7a:92:dc:e7:1e:2d:72:b0:41:
60:ef:4a:9f:79:eb:8e:60:c6:26:11:ff:46:36:d8:
bc:6f:bb:02:e2:a0:c7:1e:91:79:63:e7:3c:8c:8b:
b2:45:43:9f:3e:cc:2a:11:9c:08:a3:01:53:15:8a:
de:1b:73:b8:6e:3a:94:87:bc:55:4c:95:9f:66:44:
07:93:cd:cf:cd:09:66:61:38:aa:0d:5e:8d:62:22:
f6:5a:78:13:8c:93:7d:59:c1:96:22:7d:7f:cb:c3:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:D1:2E:C1:60:8F:62:E3:F2:F6:C3:A6:35:60:D4:1A:46:17:8B
X509v3 Authority Key Identifier:
keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.67.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7c:95:d9:e0:5e:1b:ab:c7:31:97:82:99:0e:b9:85:0b:12:
0c:75:e3:54:71:89:57:1f:4a:24:8c:85:d2:6a:89:4d:3f:bb:
7d:b1:de:cf:e8:53:b9:80:f6:ac:65:23:e7:c0:a3:c2:e3:19:
40:c6:2f:a9:3a:b0:ea:e6:94:26:61:9c:10:0c:0c:43:fc:b5:
b3:3e:c0:46:22:d9:49:67:7c:f1:42:cf:30:5b:c8:d3:3b:23:
38:5b:07:9d:b1:1a:ab:4a:b4:fb:30:f1:bc:f6:3d:00:ee:8f:
db:18:e5:1a:09:1e:77:52:ab:22:cf:d6:b4:c7:cc:63:b2:b3:
9f:d9:2f:30:d5:cf:78:04:73:8e:4e:1a:2a:a1:4d:9a:f7:de:
c3:8f:32:f2:64:f5:e1:21:b8:91:62:d2:07:b8:4c:d1:81:c3:
cb:7d:1e:eb:2a:98:32:4f:98:30:14:50:da:5c:73:21:03:d4:
f0:ca:e6:de:02:25:2a:80:cb:e4:25:4c:fb:de:63:71:ce:a9:
b5:5f:40:1b:4d:ad:68:1b:bc:c1:af:4e:78:15:2f:2a:f7:67:
54:97:4c:62:e5:ff:76:c7:47:ad:98:6c:23:2e:32:96:28:22:
b4:1e:80:cc:ef:f9:ee:62:4b:e9:53:65:14:6d:93:e3:c8:22:
b4:4f:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:01 2025 by rpki-client