Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa
File: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier: H7qdxG0CJs/yYiQYilPVBOjCY0BNB2JobVkWTO7DC7g=
Subject key identifier: FE:29:78:3C:9E:A8:08:4C:81:79:F1:FC:8B:B3:95:84:2E:DB:C3:7D
Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial: 101C85850D062090C06C607E1C707C8CCA87A26A
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa
Signing time: Mon 01 Jul 2024 01:05:28 +0000
ROA not before: Mon 01 Jul 2024 01:00:28 +0000
ROA not after: Mon 30 Jun 2025 01:05:28 +0000
asID: 58477
IP address blocks: 45.64.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1c:85:85:0d:06:20:90:c0:6c:60:7e:1c:70:7c:8c:ca:87:a2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Validity
Not Before: Jul 1 01:00:28 2024 GMT
Not After : Jun 30 01:05:28 2025 GMT
Subject: CN=FE29783C9EA8084C8179F1FC8BB395842EDBC37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:12:c6:d9:ec:12:41:17:47:a4:78:0c:f2:26:
5d:b7:db:0a:b6:8c:1b:c2:ec:a4:0d:78:c1:61:41:
99:f6:4a:a7:8e:d8:66:b3:85:d6:c5:89:1a:f4:ce:
2e:bd:92:12:ee:b7:ae:b6:a8:4f:e6:40:b6:b9:33:
02:7e:76:d9:c6:13:1c:6b:64:7c:64:ec:9d:0b:1e:
a6:dd:81:42:7a:38:3c:41:e8:48:24:bc:08:08:f3:
b5:ca:1e:2d:30:66:33:0c:ee:fb:83:4b:80:0d:30:
18:4b:4d:f9:fb:68:3e:d5:1b:ff:d7:7a:98:7e:86:
e6:d9:bd:fd:8b:5f:0b:7c:c8:9d:06:e4:68:4a:d0:
6a:05:dc:ec:5d:1c:60:7a:40:69:e9:b9:fb:81:96:
75:fe:76:6c:44:05:02:5e:45:98:72:5b:03:d6:f5:
9d:5d:1b:57:0d:c2:d9:ec:c1:6c:7d:2a:fa:70:1b:
81:9a:e5:fb:5e:e9:5f:f4:21:6e:d5:c9:a1:1e:e5:
7e:07:e2:cf:22:86:51:68:ac:12:bd:d7:fb:32:61:
ed:22:ae:a3:8b:b9:1f:e6:89:34:65:49:d3:2b:08:
f8:7e:f8:20:23:4f:9a:74:51:70:34:5f:29:bf:2e:
2d:49:94:dc:71:bb:47:1b:56:71:ec:e1:a9:7d:74:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:29:78:3C:9E:A8:08:4C:81:79:F1:FC:8B:B3:95:84:2E:DB:C3:7D
X509v3 Authority Key Identifier:
keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.64.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a7:b5:2f:b2:7b:17:8b:93:b7:72:02:37:f0:23:47:7c:31:
43:96:5b:24:c7:b2:62:12:3c:95:09:7c:80:42:fa:34:50:3b:
fd:cd:d5:7f:11:35:39:75:08:da:c6:7b:f4:63:13:fe:84:5b:
57:a7:f7:78:a7:4c:31:46:48:eb:15:98:81:69:58:c6:2b:a2:
56:23:7c:66:1b:9e:1a:13:f8:8b:d7:a5:c1:1f:a7:8f:17:dc:
e1:f7:5a:af:3a:59:94:92:93:68:ed:95:37:07:d8:67:eb:a5:
c8:b0:24:c0:af:f0:3c:7a:02:61:0a:f3:d6:66:fc:85:6a:19:
60:4c:b6:25:99:28:ca:b6:52:24:2b:e8:ac:9b:44:62:76:36:
ef:a9:1a:2e:fd:a7:9f:75:dd:0c:0a:4e:fd:ea:fe:87:eb:ea:
22:60:f5:eb:50:d6:0d:45:7f:5b:1f:bc:cd:f8:c4:b4:38:50:
2a:71:4e:bf:26:34:0c:60:ef:ad:d6:fb:45:1b:24:32:26:74:
d7:ad:53:29:d1:48:4e:1d:a6:f1:dc:31:48:eb:ef:f4:5d:e2:
fa:54:e3:2c:26:bd:35:30:cb:aa:84:71:aa:95:70:e9:58:c5:
48:b3:7a:64:5d:f9:ba:b0:f8:55:aa:6d:33:cf:d2:dc:04:88:
c8:bb:21:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:49 2025 by rpki-client