Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3231312e302f32342d3234203d3e203435323938.roa
File: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier: 1w/9LRyUE06eBEdRnx71e6cTE3cd85bkpMBBImnruAE=
Subject key identifier: E0:05:B0:21:C1:3A:D9:48:48:4A:DF:D3:70:2D:0E:09:E9:34:B0:E9
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 61D0E6DCDD13337BFE4C87D1C456ACE22DAAB332
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3231312e302f32342d3234203d3e203435323938.roa
Signing time: Wed 26 Feb 2025 01:00:02 +0000
ROA not before: Wed 26 Feb 2025 00:55:02 +0000
ROA not after: Wed 25 Feb 2026 01:00:02 +0000
asID: 45298
IP address blocks: 43.249.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d0:e6:dc:dd:13:33:7b:fe:4c:87:d1:c4:56:ac:e2:2d:aa:b3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Feb 26 00:55:02 2025 GMT
Not After : Feb 25 01:00:02 2026 GMT
Subject: CN=E005B021C13AD948484ADFD3702D0E09E934B0E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:c5:9a:d8:6b:ad:1a:c3:a8:31:4f:9d:1e:
b0:14:ca:2e:24:fc:19:01:9a:d8:b9:86:b8:2c:d9:
8f:2b:7f:1d:6d:4f:77:48:58:2e:54:89:5d:a7:1d:
0a:d5:d9:ec:2a:91:a8:f2:73:0d:11:65:26:8f:dd:
b6:a0:e2:28:be:fd:8f:e0:f6:44:c9:49:61:4a:2a:
df:1e:c7:ac:45:33:6a:3f:e3:ce:c1:d3:61:44:77:
17:eb:84:b5:3b:cc:83:1b:67:5b:0d:63:53:69:c9:
11:e8:d6:a7:bb:b0:48:ef:c4:11:5c:58:70:61:60:
63:22:d8:44:77:d7:b4:a2:8b:ee:f0:7f:b0:05:a5:
07:db:6e:aa:45:6d:54:dd:9e:72:04:86:a3:b1:8a:
0a:84:b2:1d:29:35:70:d7:f5:75:21:7e:d7:f6:9b:
cf:ff:83:53:16:d9:6d:73:f4:06:db:45:74:1f:f2:
d4:1e:d4:ec:e7:72:e8:f8:6c:94:97:f2:1d:bd:59:
e3:11:37:f7:3d:59:91:4b:9c:77:8b:16:bb:b7:8f:
59:db:0f:42:76:75:b3:38:58:a2:37:ee:7f:2e:2b:
0a:0f:09:70:a5:29:e3:47:91:48:08:c5:ee:79:8f:
2a:e9:b6:cc:c4:b5:fc:e6:7c:0e:29:08:02:86:a1:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:05:B0:21:C1:3A:D9:48:48:4A:DF:D3:70:2D:0E:09:E9:34:B0:E9
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3231312e302f32342d3234203d3e203435323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.249.211.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:84:b2:e9:2e:2c:8b:93:c3:48:4f:c7:a6:58:24:79:b0:4a:
56:9a:f8:38:58:22:a0:8d:c5:fa:05:fa:e8:68:80:72:9a:24:
bf:39:98:cc:63:67:c1:db:09:4f:cd:0a:03:b3:66:74:71:8f:
76:73:69:74:b4:1b:f6:5d:5f:74:ef:3b:f4:05:88:27:28:6a:
59:1c:e8:4a:d7:b2:64:cb:60:67:4a:64:40:7a:8e:28:24:e4:
ee:03:5b:e6:ed:f6:1c:18:85:8f:14:f2:2f:0a:46:04:61:53:
95:07:ad:6e:eb:32:2f:7d:ce:2c:f3:cd:6e:eb:74:1d:c8:a4:
8c:6e:c5:8c:3b:eb:6c:9e:b4:c7:05:d1:d8:79:be:74:bb:1c:
8e:24:ba:22:9c:c3:20:a3:5c:b7:1a:e4:f2:49:37:59:3d:e2:
03:7e:66:65:12:68:e2:e4:b7:08:fd:29:1b:0d:78:73:ae:f4:
bb:1a:2a:c2:78:94:12:34:9b:cd:18:39:1f:ae:b6:43:76:b9:
2e:12:86:f0:14:0d:ea:14:76:a4:98:fc:9a:91:7f:05:e5:04:
49:ed:66:a5:03:88:59:de:0d:4c:79:69:ec:3b:a9:f3:39:b7:
cd:2c:bc:7e:74:24:a6:55:98:4e:7a:e0:7f:c9:b6:18:45:23:
8c:96:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:28 2025 by rpki-client