Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137352e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3137352e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 2Tg9bDK5KqsoSaan3bTnLoQmTqmrJ3j35OXX1tnQMes=
Subject key identifier: 6C:8A:15:A8:1D:05:2F:BE:A3:7D:37:80:48:CC:BD:57:E1:92:24:FA
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 4CDF1B13A45F40315E699ED39C17DE903572B40B
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137352e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:01 +0000
ROA not before: Wed 20 Apr 2022 04:55:01 +0000
ROA not after: Wed 19 Apr 2023 05:00:01 +0000
asID: 24203
IP address blocks: 140.213.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:df:1b:13:a4:5f:40:31:5e:69:9e:d3:9c:17:de:90:35:72:b4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:01 2022 GMT
Not After : Apr 19 05:00:01 2023 GMT
Subject: CN=6C8A15A81D052FBEA37D378048CCBD57E19224FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:ee:3e:16:b2:3f:6d:82:52:13:40:74:cc:
0c:6b:96:da:18:ae:5f:d3:d1:66:10:12:16:a0:e1:
9b:c7:94:94:3e:a8:1d:ea:ed:1b:0c:34:23:d4:e8:
cb:de:5e:65:0e:07:f2:d5:e7:bc:34:25:1b:76:c6:
80:df:77:6c:43:82:d0:54:a8:ed:6f:8f:fe:9b:5e:
cd:e6:3a:90:f7:8f:db:52:55:c0:b5:76:c4:f5:75:
f7:92:0f:98:13:83:a3:f1:3b:a8:63:ae:79:aa:16:
4f:09:42:ef:21:df:38:f9:2c:52:f3:3c:3f:60:00:
1a:3c:24:00:9c:f3:5b:e0:bb:c5:84:67:5c:9e:b0:
3c:da:d0:49:6b:85:22:91:b6:77:4d:ef:9a:93:0c:
7c:07:a8:1d:db:c4:19:7d:d5:a9:09:03:7e:3c:cf:
50:57:98:a8:68:13:c3:e4:2f:00:42:ce:7f:12:c2:
88:a4:0f:20:48:97:3f:5d:7a:c0:a7:ba:cf:eb:48:
32:f9:8e:f5:7a:ba:2f:ad:33:03:eb:85:23:ab:c8:
42:c8:82:0d:73:78:4f:23:4b:6a:ac:0b:3a:ac:bb:
74:55:c6:00:46:b7:7d:b5:86:0b:fc:c6:31:b3:da:
3d:b9:a4:5b:38:42:d4:c8:10:eb:48:25:bc:a7:2a:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8A:15:A8:1D:05:2F:BE:A3:7D:37:80:48:CC:BD:57:E1:92:24:FA
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137352e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.175.0/24
Signature Algorithm: sha256WithRSAEncryption
44:34:83:f8:45:7c:2e:90:12:11:01:10:15:6b:48:24:99:65:
48:df:1d:80:54:df:6b:51:84:28:0b:5c:16:81:de:5a:94:c2:
95:31:74:9c:f6:07:9e:25:92:5f:66:97:e2:1b:3e:22:d8:15:
fd:b8:58:2c:26:89:e4:62:1c:ff:b5:fe:c3:6c:aa:70:eb:c7:
58:8a:0e:e2:d1:0f:7b:38:25:7c:a6:f3:5b:f7:58:98:16:05:
33:4e:60:1b:5c:58:90:4d:f6:7b:a6:ab:fd:ea:b5:eb:f5:cf:
91:17:0e:bd:76:aa:75:ae:06:9f:8f:0e:ae:17:01:42:ac:0e:
4e:44:1d:7b:61:63:4d:c7:28:a9:18:a3:bd:78:1c:70:9e:67:
67:13:cc:4c:52:bf:4a:93:73:39:e3:15:c8:23:96:11:3e:05:
27:20:08:eb:f6:3e:a0:52:af:23:1a:c0:2f:e0:59:0c:c8:b4:
b9:f6:74:d6:26:a5:76:2b:e3:81:ef:23:2f:a4:24:e0:35:47:
ef:52:c8:b3:62:25:31:c4:eb:f5:85:2c:12:a5:a5:7f:88:1c:
79:cc:20:31:e7:d0:7e:ad:8d:3a:d1:28:07:8a:7d:29:9d:d2:
d7:bc:4d:42:67:ef:43:e8:da:82:59:b7:ae:44:4f:cf:0a:90:
b2:1e:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:31 2025 by rpki-client