Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa
File: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier: qw0lOUkhaAxZB0W6Uovf+8Fl+4ITR1IdmbPGHHrVmrg=
Subject key identifier: 7A:8A:0D:0E:2E:5B:36:9F:AD:67:16:33:D2:03:35:31:11:46:32:A5
Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial: 65152FD1C15D17C2F2B794C54B84D23548B850C1
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa
Signing time: Mon 01 Jul 2024 01:02:27 +0000
ROA not before: Mon 01 Jul 2024 00:57:27 +0000
ROA not after: Mon 30 Jun 2025 01:02:27 +0000
asID: 46026
IP address blocks: 175.111.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:15:2f:d1:c1:5d:17:c2:f2:b7:94:c5:4b:84:d2:35:48:b8:50:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Validity
Not Before: Jul 1 00:57:27 2024 GMT
Not After : Jun 30 01:02:27 2025 GMT
Subject: CN=7A8A0D0E2E5B369FAD671633D2033531114632A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:11:6e:23:02:32:66:eb:e1:a6:d8:10:e6:
7e:af:0c:4e:05:a3:a2:21:cf:a7:65:80:e1:b1:6d:
61:9a:6a:e2:36:c3:2d:62:b0:5f:6e:32:b2:25:e1:
84:3f:07:df:e9:bb:4a:8d:75:d0:c0:13:bb:d1:91:
10:81:e3:51:61:2d:44:66:1f:49:2f:4b:a9:76:ea:
c3:54:3f:f1:d1:81:aa:1c:cb:a7:79:94:03:f6:35:
77:62:8e:83:6f:81:d4:12:ac:47:4d:cc:ac:1a:53:
4e:5e:37:07:39:86:9b:49:25:f7:5f:6e:73:1b:a0:
84:5d:91:3e:2a:66:5b:48:9b:d7:c3:ef:a3:4c:cd:
b3:3b:59:6d:95:13:c7:77:79:90:fe:b7:18:53:40:
a9:ff:02:58:31:5e:01:6f:1a:1a:99:08:02:56:4c:
80:7b:44:b6:38:37:7e:96:e8:38:f5:21:c1:bb:0f:
9c:4a:14:78:ea:2e:6e:6b:97:6c:5d:04:e1:13:24:
db:dd:0d:dc:cc:32:ad:a9:ec:0a:09:44:79:11:1e:
65:8e:cd:67:ea:06:3a:25:8f:7a:52:8f:1d:bf:56:
a8:bd:4b:fa:68:e1:d3:8e:30:d1:a7:36:9c:22:34:
ed:53:24:8a:a3:67:09:87:72:f0:72:c2:d5:1a:ae:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8A:0D:0E:2E:5B:36:9F:AD:67:16:33:D2:03:35:31:11:46:32:A5
X509v3 Authority Key Identifier:
keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.111.113.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:40:bb:59:e5:56:60:e5:98:60:4f:ad:33:ea:d8:ba:e2:1b:
82:d2:d8:7b:73:e1:1b:29:a1:f6:db:c1:4b:42:ad:58:2a:66:
fb:da:25:2b:66:1e:2c:8b:af:3f:d9:b1:0c:86:58:75:12:9c:
c2:08:6e:97:f2:41:06:5b:87:fd:6e:c2:f8:00:23:54:7e:6c:
cb:a5:8c:84:86:f9:de:fe:c2:e8:31:c0:96:cf:9a:68:bb:8f:
26:7c:35:a8:10:17:7d:46:78:5b:19:75:4e:9d:59:2e:64:e2:
a4:16:d2:36:35:f9:41:5d:18:95:f4:2a:a4:f1:0b:ec:01:0b:
d5:52:0c:63:4c:69:75:a4:01:28:7b:21:e1:4f:5c:d7:b5:b5:
a3:02:12:20:64:7d:61:84:d9:da:2b:27:f2:d5:09:0c:59:37:
e4:da:f2:fb:d9:66:6d:2b:2d:c0:a6:5f:c1:3d:b0:4c:ce:3a:
9d:d0:0f:74:00:52:fd:5d:e5:85:5c:c9:b7:67:5c:f0:b4:6d:
d6:25:d7:14:a8:6a:da:f3:ed:4c:8c:72:d7:e8:a7:04:95:c0:
cc:04:44:02:1f:48:de:39:5d:fc:4d:7e:81:fa:aa:2e:09:dd:
0d:73:8e:79:61:20:5b:a1:95:47:92:c8:2a:23:1f:1d:b0:a3:
6d:4c:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:17 2025 by rpki-client