Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa
File: 3132312e3130302e302e302f32312d3234203d3e203338313538.roa (raw, json)
Hash identifier: 4OEVR4t4JntmWKdQ2xyPFDAR1Dn2UjqhKWyVo8OVQ9Y=
Subject key identifier: A7:82:F1:6E:7F:71:89:7F:1B:B8:88:54:BD:E8:FC:C7:E3:74:4D:C8
Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial: 4AFBE637661C4CFB63C7B22F6DE26D2C0D7995A5
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa
Signing time: Mon 01 Jul 2024 01:05:41 +0000
ROA not before: Mon 01 Jul 2024 01:00:41 +0000
ROA not after: Mon 30 Jun 2025 01:05:41 +0000
asID: 38158
IP address blocks: 121.100.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:fb:e6:37:66:1c:4c:fb:63:c7:b2:2f:6d:e2:6d:2c:0d:79:95:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Validity
Not Before: Jul 1 01:00:41 2024 GMT
Not After : Jun 30 01:05:41 2025 GMT
Subject: CN=A782F16E7F71897F1BB88854BDE8FCC7E3744DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:ac:d0:95:4e:14:6f:48:c9:37:72:fa:6f:
82:b4:6e:e3:89:31:ea:24:32:f2:ff:30:44:8e:8d:
f3:50:fb:1e:67:a3:aa:d0:13:55:2d:f9:56:34:86:
83:43:07:73:b4:45:6d:2f:8e:a0:d6:f8:29:d0:72:
98:b0:42:2b:48:39:55:a0:1d:38:e3:ae:e1:b4:e8:
58:18:66:81:fa:aa:57:20:07:43:41:5a:3a:ec:a6:
be:fe:e7:90:30:f6:82:c4:ef:26:25:e7:5e:fe:b0:
18:9c:d6:40:0e:1d:d1:e5:10:94:a6:3d:77:f1:c8:
ca:3a:78:8c:ec:32:92:75:f5:4e:07:42:03:24:a9:
ff:d7:34:75:88:38:75:87:26:c3:91:9f:fe:a6:7e:
89:50:90:40:bb:ca:be:77:1e:ea:10:2e:9b:a9:ed:
86:19:d7:37:c1:c2:0b:91:22:10:b6:b9:11:90:16:
36:91:b0:e6:e3:b3:fa:23:73:3b:d9:ba:d4:64:3b:
df:d2:ba:de:7b:f4:32:21:56:a7:81:8c:53:11:a8:
d6:b5:42:81:10:9e:dc:4a:4d:68:cb:44:de:cb:2a:
d2:aa:fd:a6:ab:75:14:89:8f:e7:5b:68:67:1f:2f:
8d:6b:b0:2e:42:1c:ee:e4:9b:7f:75:d8:26:d7:34:
e7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:82:F1:6E:7F:71:89:7F:1B:B8:88:54:BD:E8:FC:C7:E3:74:4D:C8
X509v3 Authority Key Identifier:
keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3132312e3130302e302e302f32312d3234203d3e203338313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.100.0.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:38:76:b1:a2:43:e2:de:0c:dc:c9:92:95:da:be:db:95:52:
c5:94:90:24:35:95:93:fa:a9:cc:f8:76:27:71:01:46:7e:0b:
a4:94:82:5f:6c:78:b5:0b:9b:fb:44:52:28:3c:82:ff:9b:93:
b5:2e:14:6f:7b:8f:e4:ac:b9:52:2e:7a:6a:41:9c:01:57:c4:
5d:79:e0:dc:07:07:ee:42:20:80:f1:85:2c:1f:65:e5:a1:a0:
bb:f0:91:de:6e:6b:49:d7:a2:20:b2:78:13:53:57:b7:bf:5f:
31:1b:e2:a5:13:69:02:37:63:ed:82:85:f7:92:e4:de:2b:8f:
62:b2:e1:3a:00:6c:4d:8a:5f:01:af:4f:ee:9a:10:13:58:ae:
57:1a:f0:92:96:2a:b7:e5:09:2f:17:86:55:e8:0c:be:6a:38:
c4:31:58:9b:b5:98:6b:70:ad:b1:e4:ab:72:55:f4:46:b7:b1:
5f:82:03:fa:35:f1:e6:4f:26:29:37:ef:27:57:ca:8d:cc:48:
57:a2:7b:e1:4e:bf:9f:94:da:5a:b8:9a:f7:71:83:72:e1:5d:
5f:65:7f:e3:2b:1b:76:af:d7:a8:ce:ae:72:48:ac:ac:1a:be:
3c:19:18:79:84:40:88:32:69:91:52:5b:7d:0d:c4:94:d3:f6:
7a:98:2e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:19 2025 by rpki-client