Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32332d3233203d3e203435333233.roa
File: 34392e35302e342e302f32332d3233203d3e203435333233.roa (raw, json)
Hash identifier: O7FCEcVo44ryb78kY/6Pz95r/Y/N660hP9oF0xWME+U=
Subject key identifier: F0:61:1F:6A:9D:A1:22:17:C4:D5:7B:4B:C6:AC:5A:C4:BF:12:0C:7C
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 051BE31498D5C61C0C3632AFA489FC31DBA89455
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32332d3233203d3e203435333233.roa
Signing time: Wed 04 Dec 2024 14:00:01 +0000
ROA not before: Wed 04 Dec 2024 13:55:01 +0000
ROA not after: Wed 03 Dec 2025 14:00:01 +0000
asID: 45323
IP address blocks: 49.50.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1b:e3:14:98:d5:c6:1c:0c:36:32:af:a4:89:fc:31:db:a8:94:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Dec 4 13:55:01 2024 GMT
Not After : Dec 3 14:00:01 2025 GMT
Subject: CN=F0611F6A9DA12217C4D57B4BC6AC5AC4BF120C7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:58:a9:53:61:71:9c:97:fb:77:2f:a2:53:
85:73:ed:8f:04:bc:cb:34:53:c2:d7:06:44:9e:5f:
82:72:f2:33:8f:d5:7e:d0:eb:55:1f:c1:12:25:30:
3d:2a:1c:f6:2a:40:2b:74:74:c0:71:d5:41:b0:8f:
6a:a5:b6:8d:f5:f7:a7:3d:3f:bc:a4:bd:ff:c9:23:
4b:f4:d1:c9:ed:63:fe:ef:ae:ab:32:b7:0a:1c:5e:
9f:13:77:ae:d2:5a:1f:5d:3a:21:d5:18:40:82:93:
5e:db:b2:a4:fb:91:8d:db:e4:5f:c3:e8:48:d2:72:
a8:2f:ed:32:b9:1a:54:86:1d:3c:c4:d6:07:98:a9:
f1:a1:8e:53:38:77:d9:46:43:a1:3c:ba:3e:a6:7f:
9e:54:5d:b2:0d:47:fc:9b:a6:62:a1:db:36:38:0e:
25:74:94:f1:5b:ee:26:4a:4b:8b:d5:5d:2f:e4:6e:
1d:cd:44:51:7f:60:21:fc:84:dc:d0:cb:56:c9:19:
9c:97:32:5a:36:3a:82:f5:3e:cb:36:46:d1:38:79:
41:8b:67:4a:0a:bf:4b:dc:9e:d0:3d:98:ec:f3:1b:
47:51:ce:6c:4e:0f:74:75:58:78:28:ab:9c:bb:e0:
76:df:f7:da:07:fb:22:52:55:c1:52:c5:05:05:2c:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:61:1F:6A:9D:A1:22:17:C4:D5:7B:4B:C6:AC:5A:C4:BF:12:0C:7C
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e342e302f32332d3233203d3e203435333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.50.4.0/23
Signature Algorithm: sha256WithRSAEncryption
77:f3:5a:2d:a8:f7:e5:22:f4:c1:b6:c7:18:f0:25:5c:a2:88:
73:66:0f:b6:36:be:b0:c1:ca:ff:ba:18:b1:e4:18:45:f2:9b:
6f:7e:e9:41:c3:df:18:13:d4:f0:6c:39:c7:f2:95:b6:03:72:
65:06:27:e2:d5:6d:fe:7f:62:81:85:b5:4a:7a:29:1c:62:00:
ba:40:c3:b7:9e:c8:1f:0a:b4:d2:63:bb:c4:c8:b8:f4:d2:d7:
b1:1e:da:d5:57:49:e4:16:69:c7:62:05:0a:8b:eb:e1:47:ab:
da:cf:da:23:d8:80:e2:ae:ba:c9:18:92:b9:b9:e5:f3:15:14:
ae:e9:5b:89:1a:b3:2e:e9:09:b8:0c:16:b7:ac:90:81:ca:ad:
a8:c9:ce:38:d5:02:c4:62:6c:b5:4f:d3:08:23:07:c3:cc:7e:
22:da:79:b4:9f:29:c6:95:3c:7f:19:01:5f:17:86:01:dd:4f:
b9:17:bd:01:fb:8c:6d:3c:5e:c4:f7:2e:f4:e6:dd:19:0d:2c:
8a:7f:7d:6d:eb:02:da:d6:9b:ed:2f:5e:d0:5e:26:08:45:9a:
fb:01:44:09:ec:ae:d6:7f:a6:30:49:73:0b:07:e3:6d:b3:06:
ec:2c:69:f0:30:d7:9e:32:21:c7:d8:40:37:9a:ab:74:8c:ec:
f8:6d:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:44:35 2025 by rpki-client