Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e302e302f32332d3233203d3e20313532303630.roa
File: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (raw, json)
Hash identifier: 4RpzWO2+21rLjO+oWBeOo/H9H+KppI82T9nIyJDFZDI=
Subject key identifier: E2:8A:49:3C:4C:EA:EB:C9:5E:BD:AD:6C:F8:97:92:B5:7A:3E:8B:DE
Certificate issuer: /CN=8762A545785B5A6352FB7DA20689CECA8A47432E
Certificate serial: 65079DB168032CD15D5F494292D18BAABCD5DC73
Authority key identifier: 87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e302e302f32332d3233203d3e20313532303630.roa
Signing time: Tue 10 Dec 2024 10:00:01 +0000
ROA not before: Tue 10 Dec 2024 09:55:01 +0000
ROA not after: Tue 09 Dec 2025 10:00:01 +0000
asID: 152060
IP address blocks: 113.192.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:07:9d:b1:68:03:2c:d1:5d:5f:49:42:92:d1:8b:aa:bc:d5:dc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8762A545785B5A6352FB7DA20689CECA8A47432E
Validity
Not Before: Dec 10 09:55:01 2024 GMT
Not After : Dec 9 10:00:01 2025 GMT
Subject: CN=E28A493C4CEAEBC95EBDAD6CF89792B57A3E8BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:67:0f:14:3a:1b:a8:1d:32:c4:26:06:e6:
f7:46:7d:31:8d:5c:2c:ed:78:62:48:62:5b:68:ab:
ab:82:b7:38:e0:23:39:b8:97:4b:17:63:fb:95:d3:
15:da:0e:c6:a3:6f:c0:44:85:53:ba:64:02:40:2a:
81:3f:d2:94:1e:da:fc:0a:44:e3:ff:8f:ff:74:ef:
e8:eb:c0:6a:a0:9b:7b:63:f6:f2:98:5c:42:f0:fc:
8c:a0:46:db:5d:9b:1b:3c:36:f6:c6:d0:4c:d2:94:
e9:3f:01:03:ec:5f:d6:78:3a:1f:e5:87:76:fb:e1:
0e:14:0c:78:47:5f:d8:b0:b8:b3:0a:1a:d4:17:f8:
07:eb:bb:36:3e:f0:3c:eb:98:95:05:53:3f:80:2b:
a0:3c:e5:21:77:6a:5d:6c:05:0d:53:4d:3d:f3:d4:
8e:2b:7a:15:17:c1:f4:fc:04:8e:8e:45:a9:5d:ab:
dd:64:f9:4b:b1:20:39:9b:8f:ea:30:3f:f9:34:76:
db:c6:45:be:20:3d:6d:df:91:3c:5e:3b:31:48:16:
68:58:1b:7d:a7:0b:85:03:7e:2c:35:e6:00:bc:d1:
86:11:f4:59:0b:83:ff:37:b9:b6:40:87:cb:f5:f5:
67:b5:34:04:7a:77:26:09:8b:2b:e9:7a:06:f3:6e:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8A:49:3C:4C:EA:EB:C9:5E:BD:AD:6C:F8:97:92:B5:7A:3E:8B:DE
X509v3 Authority Key Identifier:
keyid:87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e302e302f32332d3233203d3e20313532303630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.192.0.0/23
Signature Algorithm: sha256WithRSAEncryption
29:78:b6:94:b2:5f:17:36:de:75:8e:e2:66:37:1e:17:c0:00:
4b:2c:e6:55:b2:c5:5f:95:f5:60:43:8c:9b:59:98:b4:5c:1c:
e1:e7:22:48:cc:48:99:fc:4d:30:5e:46:74:09:80:b7:d2:b7:
ce:e6:ca:6d:f2:c6:36:50:dd:e5:7f:8c:30:d2:ba:55:b8:a8:
da:71:45:8e:ab:c3:e5:6c:3a:e5:41:7c:d5:7a:9b:9e:25:c9:
a6:24:82:7a:f2:a6:d8:d3:3e:ea:89:3a:68:ac:a8:a6:43:c4:
2d:8b:31:94:32:dc:9e:c5:03:2c:c7:ac:19:a9:4c:0f:a2:17:
50:d4:e0:89:35:8a:22:37:82:e7:3f:1c:e7:5e:f8:13:18:4d:
c9:5b:78:21:22:57:4b:66:ea:3e:fd:af:f7:85:1d:3f:a6:97:
a5:be:b0:cf:d3:d5:fe:bf:43:74:41:e0:9f:99:ea:ec:63:46:
9b:3e:04:2b:4f:31:16:e3:8b:97:da:15:88:a1:e4:72:b7:bb:
c6:de:a3:16:03:00:59:32:a8:a7:d3:3b:0e:56:7e:ed:4f:fb:
27:dd:ef:5b:13:6e:42:8c:a7:6b:f8:19:35:10:33:5d:da:cb:
5c:75:bd:bc:e5:56:2a:1b:18:de:a0:26:15:e3:f6:55:f7:2d:
36:f3:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:52:11 2025 by rpki-client