Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233322e302f32342d3234203d3e203633383539.roa
File: 36362e39362e3233322e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier: QH+NQFcf1I7nFAgvHoT2Z9Lyf6JfZ9BnPmKdRPKjNyM=
Subject key identifier: 7C:E1:6B:52:66:EE:AC:C0:7D:E0:71:1A:5E:CE:01:27:0C:4E:35:D8
Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF
Certificate serial: 53EE7B4937A875C23936CD43253612925A6279F5
Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233322e302f32342d3234203d3e203633383539.roa
Signing time: Sun 11 Aug 2024 11:00:02 +0000
ROA not before: Sun 11 Aug 2024 10:55:02 +0000
ROA not after: Sun 10 Aug 2025 11:00:02 +0000
asID: 63859
IP address blocks: 66.96.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ee:7b:49:37:a8:75:c2:39:36:cd:43:25:36:12:92:5a:62:79:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF
Validity
Not Before: Aug 11 10:55:02 2024 GMT
Not After : Aug 10 11:00:02 2025 GMT
Subject: CN=7CE16B5266EEACC07DE0711A5ECE01270C4E35D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f6:70:2a:0c:da:b8:e6:6b:a9:5d:27:af:4e:
bf:4b:e6:d6:f4:bc:7d:c4:f8:3a:64:54:8b:37:c7:
4a:ed:a2:32:93:60:d5:75:e9:ee:40:7b:ca:2a:f4:
86:f1:e8:1c:8c:d9:8b:a4:e5:48:3b:c5:1f:30:77:
f8:b6:aa:29:53:65:55:d3:27:ef:d8:70:a9:20:fa:
d4:a3:df:c6:38:43:78:ff:2a:b2:bb:d2:34:0d:ee:
44:29:5d:d8:4f:9c:5b:4e:f4:6c:5d:66:78:6b:13:
ff:3d:1b:f8:0e:24:cb:ee:73:e0:7f:c0:67:df:79:
71:fc:d1:a0:f1:18:27:65:9e:1b:92:76:29:4b:68:
c2:62:11:fa:25:17:d2:a0:84:41:ac:38:9e:ed:bf:
84:2a:be:43:ce:34:7a:8a:ef:a1:6f:ea:bd:83:1b:
ff:b8:22:7d:c4:5a:0e:f8:7d:25:b4:be:bb:c0:34:
ff:8e:bc:fb:35:dc:c5:8e:6c:aa:c9:0a:aa:6d:4a:
0d:7f:55:1b:0b:e7:6b:78:f3:31:db:fe:25:5e:ed:
4b:82:b3:a6:52:5c:4a:fc:7e:28:c6:8d:b5:63:5c:
67:17:b3:37:f1:ae:87:3e:ac:d7:7b:91:0a:2d:72:
b0:e1:9e:c0:b1:94:06:6d:94:f1:7c:e0:1b:01:63:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:6B:52:66:EE:AC:C0:7D:E0:71:1A:5E:CE:01:27:0C:4E:35:D8
X509v3 Authority Key Identifier:
keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/36362e39362e3233322e302f32342d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.96.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d6:6a:7e:c0:fa:a0:5f:4c:83:ec:4e:9e:07:d3:df:e4:34:
6c:9c:3f:a9:cb:46:7a:69:e7:1b:8f:73:5b:27:3e:a3:51:1f:
40:5c:46:bd:28:c3:08:a2:75:a3:86:1a:ea:c7:08:19:a7:7d:
2d:a3:e5:79:52:85:4c:c6:0e:52:68:cc:10:94:50:41:2d:92:
c7:87:eb:41:75:f9:0b:e9:f5:1e:cb:22:03:ec:43:17:dc:59:
2b:80:aa:c9:fc:bf:52:54:0d:df:e3:ec:65:1b:4c:8d:0f:4e:
43:ca:88:7e:ce:76:4d:e0:e9:96:08:69:73:e3:9c:94:59:8f:
c9:bf:88:81:5b:fb:e8:d4:2a:e6:24:9a:a8:8e:d1:6e:9a:58:
1e:8e:9a:93:b8:75:4c:0b:3f:28:3b:1f:07:80:ad:ab:9b:7e:
59:8b:50:15:33:f5:85:7f:29:13:de:7d:31:64:7c:22:e2:89:
30:e9:5e:e0:21:5e:d7:51:79:5b:3f:4a:e3:14:ae:4a:d6:e7:
f6:f4:26:eb:b4:11:33:ee:e7:da:94:a9:95:e0:2c:b2:50:b8:
bf:35:1d:1f:b4:11:9a:cb:6c:cc:42:e9:63:05:02:d0:27:6d:
22:04:e7:31:01:ff:56:ce:86:42:5c:2a:bf:02:32:9d:0c:46:
dc:bd:da:3a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUU+57STeodcI5Ns1DJTYSklpiefUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0
NzBFOEZDRjAeFw0yNDA4MTExMDU1MDJaFw0yNTA4MTAxMTAwMDJaMDMxMTAvBgNV
BAMTKDdDRTE2QjUyNjZFRUFDQzA3REUwNzExQTVFQ0UwMTI3MEM0RTM1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy9nAqDNq45mupXSevTr9L5tb0
vH3E+DpkVIs3x0rtojKTYNV16e5Ae8oq9Ibx6ByM2Yuk5Ug7xR8wd/i2qilTZVXT
J+/YcKkg+tSj38Y4Q3j/KrK70jQN7kQpXdhPnFtO9GxdZnhrE/89G/gOJMvuc+B/
wGffeXH80aDxGCdlnhuSdilLaMJiEfolF9KghEGsOJ7tv4QqvkPONHqK76Fv6r2D
G/+4In3EWg74fSW0vrvANP+OvPs13MWObKrJCqptSg1/VRsL52t48zHb/iVe7UuC
s6ZSXEr8fijGjbVjXGcXszfxroc+rNd7kQotcrDhnsCxlAZtlPF84BsBY+yDAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUfOFrUmburMB94HEaXs4BJwxONdgwHwYDVR0j
BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC
QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF
OEZDRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8xLzM2MzYyZTM5MzYyZTMyMzMzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCYOgwDQYJKoZIhvcN
AQELBQADggEBAHrWan7A+qBfTIPsTp4H09/kNGycP6nLRnpp5xuPc1snPqNRH0Bc
Rr0owwiidaOGGurHCBmnfS2j5XlShUzGDlJozBCUUEEtkseH60F1+Qvp9R7LIgPs
QxfcWSuAqsn8v1JUDd/j7GUbTI0PTkPKiH7Odk3g6ZYIaXPjnJRZj8m/iIFb++jU
KuYkmqiO0W6aWB6OmpO4dUwLPyg7HweAraubflmLUBUz9YV/KRPefTFkfCLiiTDp
XuAhXtdReVs/SuMUrkrW5/b0Juu0ETPu59qUqZXgLLJQuL81HR+0EZrLbMxC6WMF
AtAnbSIE5zEB/1bOhkJcKr8CMp0MRty92jo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:42 2025 by rpki-client