Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3138332e38312e3135322e302f32312d3234203d3e203234353237.roa
File: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (raw, json)
Hash identifier: QV0OMSv5p4Bp6GHcowx6nYWRELs5eo5fWVyu/lnK22I=
Subject key identifier: B2:21:69:85:F2:9C:36:60:49:D2:53:BE:1E:B0:05:E1:D4:A8:DC:F5
Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61
Certificate serial: 5FDCC81328324B71DCA46972669BD082F9EFD543
Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3138332e38312e3135322e302f32312d3234203d3e203234353237.roa
Signing time: Mon 01 Jul 2024 00:02:14 +0000
ROA not before: Sun 30 Jun 2024 23:57:14 +0000
ROA not after: Mon 30 Jun 2025 00:02:14 +0000
asID: 24527
IP address blocks: 183.81.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:dc:c8:13:28:32:4b:71:dc:a4:69:72:66:9b:d0:82:f9:ef:d5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61
Validity
Not Before: Jun 30 23:57:14 2024 GMT
Not After : Jun 30 00:02:14 2025 GMT
Subject: CN=B2216985F29C366049D253BE1EB005E1D4A8DCF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:08:dc:73:3c:c6:2d:d2:a6:c5:52:32:5d:
1d:a3:4d:e7:8f:e5:c3:6e:8e:84:70:c6:0d:e2:b7:
ca:f4:f3:2d:e1:b3:53:e6:00:09:6a:b4:09:3b:89:
30:64:a7:91:0b:e3:46:66:65:70:9f:01:2b:f0:92:
da:48:41:6b:34:41:56:b7:ac:5a:b8:07:df:29:f8:
f9:bb:3a:3f:8a:13:2a:b2:32:31:67:af:eb:4e:b9:
12:71:4b:fd:c2:f3:25:41:24:eb:af:5f:67:8c:3d:
44:77:79:b4:7b:81:cc:ab:31:2c:e8:b4:56:40:c2:
a1:50:6d:c3:2f:80:12:6f:63:2e:04:0c:d7:33:99:
02:24:f1:52:ff:bb:59:78:1c:2c:0e:8e:59:55:95:
22:0e:64:86:0d:95:0d:5c:a1:5b:4a:61:86:5e:81:
f9:4b:35:a5:24:be:c1:45:f7:7b:75:0d:73:28:d8:
72:bf:33:27:b6:f3:b1:d9:84:a6:44:4d:2c:04:9a:
a6:fb:7d:fb:f9:1f:fd:f6:e7:90:6e:1f:d9:2b:d2:
b9:48:bb:8f:55:65:02:c5:66:62:f3:96:f5:9f:f6:
1f:a0:d9:6f:60:22:a0:a5:8f:3c:50:d2:11:8b:4f:
89:e1:0a:94:72:d8:b8:bf:f0:c3:58:cd:c2:d0:ca:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:69:85:F2:9C:36:60:49:D2:53:BE:1E:B0:05:E1:D4:A8:DC:F5
X509v3 Authority Key Identifier:
keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/3138332e38312e3135322e302f32312d3234203d3e203234353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
183.81.152.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:cb:b6:b3:5b:6e:19:61:c2:d3:a0:4e:d0:b3:9b:50:14:3b:
aa:12:bd:51:b7:65:1e:18:ad:3b:2c:4f:d0:60:4d:5a:29:b7:
52:14:b1:82:e2:ad:98:6f:86:02:b0:09:80:f1:61:01:34:ed:
b7:58:e3:67:f1:01:fe:76:8f:1d:71:cd:84:a6:65:78:a4:74:
54:3f:ba:be:cb:3f:36:4a:f4:38:f1:5a:f5:fb:11:3e:a2:b3:
95:3b:8b:a0:f8:9a:71:c8:3b:fa:bb:2e:4f:69:6e:2e:6b:a7:
8f:6f:49:4a:20:8a:cb:d9:6c:fc:7a:a8:ab:d4:12:28:70:c3:
bc:bb:c6:fb:4c:e1:c1:04:b6:20:00:78:1f:ed:a7:0e:07:24:
cc:d7:34:10:b5:a1:6a:6a:23:15:89:e9:5e:fa:60:75:eb:12:
e8:2b:79:4c:eb:01:d9:5e:f3:fe:9f:9a:c8:2c:ad:4b:ea:21:
24:67:8c:b5:35:47:b0:ce:0b:42:cf:78:47:0e:e1:6c:8d:5a:
8d:38:e0:f9:9b:e1:fa:a8:7d:07:6f:ae:58:f0:6e:02:f4:1f:
db:5d:55:72:89:bf:32:0d:a2:d7:fc:5c:f4:3d:6a:0e:8d:29:
0c:22:9f:e2:93:3a:be:17:f6:78:c2:e9:59:dc:4a:bd:f1:49:
13:cc:25:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:33 2025 by rpki-client