Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232322e302f32342d3234203d3e203338313432.roa
File: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier: pskMfYPfJQyJpqkNm3oh9E3JvBHhwECedewtWAR2iFU=
Subject key identifier: 88:59:66:E0:60:61:90:5A:82:74:9C:11:91:39:13:43:F5:CF:CB:7D
Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial: 72A7DF9446FEA4D0A86335948DEFB6F2DDBE827E
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232322e302f32342d3234203d3e203338313432.roa
Signing time: Mon 21 Oct 2024 13:00:02 +0000
ROA not before: Mon 21 Oct 2024 12:55:02 +0000
ROA not after: Mon 20 Oct 2025 13:00:02 +0000
asID: 38142
IP address blocks: 210.57.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a7:df:94:46:fe:a4:d0:a8:63:35:94:8d:ef:b6:f2:dd:be:82:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
Validity
Not Before: Oct 21 12:55:02 2024 GMT
Not After : Oct 20 13:00:02 2025 GMT
Subject: CN=885966E06061905A82749C1191391343F5CFCB7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cf:3d:52:f6:09:6c:25:56:b0:97:1a:07:bd:
d3:d7:d7:5f:cb:d3:5a:0e:70:46:98:ef:6b:cd:45:
b3:4c:8b:97:ed:c1:a1:66:a9:0c:d2:0a:3b:00:1c:
bc:76:34:23:18:a6:df:ac:91:d9:cf:73:f9:98:4e:
2b:2d:ad:07:83:d7:76:3d:c6:75:e7:29:be:ef:75:
7c:f3:e6:07:17:cb:0a:77:8e:40:e1:db:ee:26:42:
2c:4b:ef:7c:b0:df:8f:cd:37:70:1e:f0:3f:ca:06:
62:3c:e4:ba:46:e9:a1:1f:20:50:99:70:d0:5d:40:
dc:50:fa:c9:0f:fe:b0:01:f4:fb:f2:89:e5:4b:e1:
46:d4:40:1c:b3:5d:a1:c4:ef:12:68:1f:4c:93:49:
ee:61:22:3f:6f:d4:98:a4:97:ed:63:1c:67:14:a3:
76:7a:d5:aa:3b:1d:9a:fb:25:ad:83:b9:f2:59:87:
ac:8e:1c:e1:95:d7:fd:11:be:79:78:74:bc:af:df:
e6:0e:88:cf:01:14:b7:46:1b:7b:06:79:d0:c5:39:
ea:66:10:60:15:fd:2b:4d:7b:69:9c:8a:3d:0b:79:
ea:f9:da:a3:d1:ca:16:5c:3e:df:39:e7:3d:9f:3d:
81:5f:7d:d1:ef:47:28:dc:30:ac:bf:ab:c3:c7:09:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:59:66:E0:60:61:90:5A:82:74:9C:11:91:39:13:43:F5:CF:CB:7D
X509v3 Authority Key Identifier:
keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232322e302f32342d3234203d3e203338313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.57.222.0/24
Signature Algorithm: sha256WithRSAEncryption
93:31:8a:fa:2c:cf:be:df:8f:b2:f3:f4:f6:31:44:fa:99:71:
5d:f4:2e:6d:55:ce:e7:9b:cd:a8:6c:d0:7e:2a:a3:df:ae:fb:
4e:dd:5d:38:91:37:ed:18:8f:b6:25:77:b2:7e:73:7c:73:5f:
88:39:75:c2:bf:c8:b2:42:67:2c:d6:ef:a7:a2:70:4c:a6:b0:
db:f4:7f:09:be:cf:f3:fd:dc:c0:bb:ba:ce:56:9b:ae:cb:47:
4c:0d:f5:31:4f:ae:f0:33:b2:b0:a2:4e:6c:92:30:21:50:56:
a2:40:0d:49:3d:c9:39:31:38:5d:64:05:e4:a9:14:13:e1:d1:
51:bf:06:87:ac:37:52:7f:25:07:bd:d7:82:f0:80:7d:50:d5:
62:f7:f7:18:7f:a8:9b:e8:ad:95:2b:36:7f:07:ee:86:29:35:
ce:43:ef:d9:30:13:71:79:76:0f:da:a0:d9:75:d6:19:3f:cb:
ff:da:3f:3f:63:75:91:8a:1e:11:03:18:5b:f4:e8:2e:b6:cb:
23:f7:60:04:fb:d8:66:ce:12:3b:cd:47:15:a0:ef:e6:99:20:
fc:f0:9d:ea:af:6e:86:8a:84:c7:f0:8e:14:56:ce:ce:18:f0:
a3:f8:69:ee:db:24:29:ca:c8:a1:29:3d:40:e6:ee:1f:af:b0:
59:ec:4f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:03:03 2025 by rpki-client