Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/34332e3235322e3130342e302f32322d3234203d3e203435333035.roa
File: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (raw, json)
Hash identifier: cAMxueznS/nh3h73C9cG6Tq/nGQZqb7kaIFcHdsdkqw=
Subject key identifier: DE:DD:21:66:3A:CB:BD:7A:C9:07:B2:39:0C:D7:8B:40:63:C8:47:4A
Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Certificate serial: 269660D8BB6534271E4DDABD00036CA402276742
Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/34332e3235322e3130342e302f32322d3234203d3e203435333035.roa
Signing time: Mon 01 Jul 2024 01:04:07 +0000
ROA not before: Mon 01 Jul 2024 00:59:07 +0000
ROA not after: Mon 30 Jun 2025 01:04:07 +0000
asID: 45305
IP address blocks: 43.252.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:96:60:d8:bb:65:34:27:1e:4d:da:bd:00:03:6c:a4:02:27:67:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Validity
Not Before: Jul 1 00:59:07 2024 GMT
Not After : Jun 30 01:04:07 2025 GMT
Subject: CN=DEDD21663ACBBD7AC907B2390CD78B4063C8474A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:16:db:9a:92:ba:2b:09:14:aa:5b:2a:d8:
8a:55:ab:6f:f7:3e:72:4c:fc:99:a0:90:a9:39:4b:
b9:8f:da:19:fb:c2:af:3e:d9:dd:1f:3f:e2:fa:7f:
12:34:d2:83:7d:2b:c8:60:fc:4b:db:69:12:ed:75:
8a:b3:44:d0:9c:22:6b:ad:83:18:fd:53:4a:1c:ce:
b4:47:e2:5a:0e:89:c0:70:2f:d9:4e:40:e6:c2:f1:
4f:68:b2:b9:dc:7f:c3:0f:25:bf:2f:d7:40:d2:5f:
2a:75:94:4d:4b:1b:d6:5c:aa:cf:6f:d8:d1:7a:91:
79:ee:d0:c1:d6:de:1d:26:b8:d1:1d:3a:35:3a:19:
da:c4:a8:31:9f:cf:1b:5a:d9:ff:b9:ee:f8:cc:18:
88:34:5e:85:1c:44:33:71:ff:b7:41:cd:e3:ba:e5:
10:b3:bd:b1:c9:2a:48:6f:6e:25:99:bd:b2:7a:f2:
ae:3b:a5:fc:52:f8:d1:17:ac:20:66:67:1f:b8:13:
24:77:03:b4:7d:16:ec:fb:c3:fc:88:7c:76:1b:f5:
35:ac:be:06:b1:e0:64:49:4e:19:fe:a6:31:df:f7:
02:f5:39:96:9f:31:bf:ab:27:2b:64:c4:c1:eb:9e:
4a:33:b6:46:eb:99:1e:cf:e1:d0:7d:16:59:5e:d4:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DD:21:66:3A:CB:BD:7A:C9:07:B2:39:0C:D7:8B:40:63:C8:47:4A
X509v3 Authority Key Identifier:
keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/34332e3235322e3130342e302f32322d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.252.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:fe:e8:f4:7e:49:9e:20:f4:65:90:b1:2c:61:24:4f:d9:89:
cd:2c:1c:f4:ed:85:55:47:c1:da:92:5d:12:ff:61:06:17:9d:
3a:1d:24:e9:e9:ff:de:92:50:fb:68:2e:15:a1:01:26:59:08:
1f:0d:c0:ff:32:bd:c4:48:13:21:b2:bd:2c:86:3e:58:93:bb:
3e:a8:00:e9:eb:86:e7:b1:0a:9a:aa:58:9d:24:c4:79:7f:c9:
ea:67:56:32:f0:7a:b3:1c:65:ef:b8:17:59:f9:25:a3:e6:09:
ba:b3:c5:e7:f9:9b:de:0d:0e:dc:b9:25:11:71:d3:89:83:91:
46:d2:a7:10:c6:dd:9c:2c:9c:0a:78:31:77:f9:f0:96:ca:4a:
09:63:89:0d:a3:da:53:36:44:74:bc:fa:f0:08:9a:1d:b0:be:
18:0b:4e:a1:40:b1:bd:95:f2:9f:79:bd:f6:f7:e5:c8:ee:d9:
5c:d3:3f:cc:3b:59:8f:47:ad:a0:8e:3e:cc:3e:80:c6:85:23:
7b:a6:bc:d3:3d:12:6b:24:ea:fc:f4:a9:ba:d1:b9:17:98:ff:
3e:77:89:54:15:12:26:83:0a:96:a4:c3:68:8f:d4:2a:7d:96:
d9:d5:e0:6c:93:35:cf:3a:4c:c5:22:45:59:5f:29:6d:3a:e5:
33:4b:e1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:15:12 2025 by rpki-client