Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32322d3233203d3e203538343034.roa
File: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (raw, json)
Hash identifier: g0FFTgDxa4Hez+HwVNQ7bFyBpeqsTBamtra1C6gMee0=
Subject key identifier: 63:AC:29:B0:1C:9D:F5:FB:47:CC:F7:05:4A:1D:64:65:01:F1:B9:46
Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
Certificate serial: 4C55E850DADF5F8D4805B46CD34212379D66CBA8
Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32322d3233203d3e203538343034.roa
Signing time: Mon 05 Aug 2024 07:53:34 +0000
ROA not before: Mon 05 Aug 2024 07:48:34 +0000
ROA not after: Mon 04 Aug 2025 07:53:34 +0000
asID: 58404
IP address blocks: 43.252.136.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:55:e8:50:da:df:5f:8d:48:05:b4:6c:d3:42:12:37:9d:66:cb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
Validity
Not Before: Aug 5 07:48:34 2024 GMT
Not After : Aug 4 07:53:34 2025 GMT
Subject: CN=63AC29B01C9DF5FB47CCF7054A1D646501F1B946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:54:42:6b:16:f5:93:71:6d:44:11:64:32:
52:07:0b:bf:77:d4:37:46:44:45:17:aa:9c:83:7c:
9e:df:34:e7:ee:e4:9e:be:99:9a:a7:c2:e4:28:1d:
9b:31:8d:31:44:30:cf:92:66:19:91:1c:b1:59:cb:
9e:a0:f5:c1:5e:59:eb:cc:18:a5:9e:d7:25:82:34:
6c:14:2d:9c:ab:f7:ee:04:77:33:5b:b6:ac:bf:72:
4f:16:3b:b4:de:5e:dc:8b:90:8b:ae:ad:35:b0:7c:
18:c0:b0:f7:2a:2e:9a:2d:2d:50:80:c2:58:82:f2:
f6:b8:4d:b8:7d:c8:79:20:a7:a2:fd:76:4f:69:ca:
fe:58:8f:f6:9a:de:4b:3c:65:81:c8:4e:dc:47:9c:
54:d1:28:a1:10:fb:f5:ac:ae:d9:44:6f:1c:aa:85:
e7:a9:93:3f:2b:f8:83:42:f0:db:be:33:18:e4:0f:
3b:2f:9f:ce:3f:da:c3:47:ec:63:20:64:67:cd:fa:
73:d4:3f:18:f2:d9:9f:73:04:8b:99:61:f0:0e:81:
db:34:85:fd:c5:fd:03:75:18:45:c6:ca:27:b0:d9:
b9:ba:88:e0:44:4d:94:f9:67:3b:39:82:c6:72:04:
3f:2b:bc:36:7a:fc:c9:3e:cd:89:fd:6a:03:22:fe:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AC:29:B0:1C:9D:F5:FB:47:CC:F7:05:4A:1D:64:65:01:F1:B9:46
X509v3 Authority Key Identifier:
keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/34332e3235322e3133362e302f32322d3233203d3e203538343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.252.136.0/22
Signature Algorithm: sha256WithRSAEncryption
99:5b:56:75:9d:97:3a:0f:47:54:87:34:8d:0a:5e:4c:9c:9d:
5d:6a:70:7a:01:e1:8c:9d:84:e5:22:03:f1:a4:de:76:5b:89:
e3:a1:38:55:3f:00:9f:d3:d3:67:b2:74:a0:ff:39:94:03:70:
a5:4b:c4:b2:fe:61:01:f7:5d:62:16:7c:de:32:8d:14:df:a7:
e8:6d:a2:be:f4:38:ec:70:76:f1:7f:55:1b:0c:b4:34:1c:9d:
28:94:d9:aa:0c:df:ca:c3:f7:60:7d:6f:8e:94:45:75:ef:5c:
f2:03:af:8b:72:c0:eb:a6:1e:af:de:28:ba:0c:fa:eb:4e:09:
67:3a:6e:60:40:96:d4:43:6f:4f:19:2e:d2:53:26:c4:2f:a0:
9e:d2:99:67:26:f0:b1:83:bb:0f:ee:79:11:06:c0:09:8c:ef:
ed:0a:7e:85:e9:0c:d2:6e:e6:58:0f:f3:b3:f2:54:dc:15:63:
27:e5:4e:d5:e4:08:8e:b5:46:01:02:4b:9f:fe:6d:de:8f:09:
12:59:99:9a:25:57:99:2f:89:11:47:92:31:37:71:0f:51:bb:
f7:69:a3:48:df:d9:69:be:f4:eb:99:4e:12:b1:4f:d1:d5:fc:
cf:3b:fc:8d:e9:1b:cd:b3:bf:56:5f:3d:33:c6:d7:2a:b0:a6:
5c:d9:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:17:24 2025 by rpki-client