Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/34332e3234372e32322e302f32342d3234203d3e20313331373830.roa
File: 34332e3234372e32322e302f32342d3234203d3e20313331373830.roa (raw, json)
Hash identifier: HBRVL6ab1EXX/4v+TicYMdAP2m56HzSbazq4BRWuQH4=
Subject key identifier: 11:8C:C2:95:D0:9D:52:BB:71:48:0F:EA:76:B8:7A:6F:AE:19:74:14
Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial: 641FD8A01A78F4036A41E5D8F34301E79C6F8E07
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/34332e3234372e32322e302f32342d3234203d3e20313331373830.roa
Signing time: Fri 23 Aug 2024 12:00:01 +0000
ROA not before: Fri 23 Aug 2024 11:55:01 +0000
ROA not after: Fri 22 Aug 2025 12:00:01 +0000
asID: 131780
IP address blocks: 43.247.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:1f:d8:a0:1a:78:f4:03:6a:41:e5:d8:f3:43:01:e7:9c:6f:8e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Validity
Not Before: Aug 23 11:55:01 2024 GMT
Not After : Aug 22 12:00:01 2025 GMT
Subject: CN=118CC295D09D52BB71480FEA76B87A6FAE197414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:41:b1:88:6c:28:02:17:96:a1:7e:dc:0e:
90:c2:ec:66:54:46:ea:75:05:e2:7b:99:8f:21:bf:
fa:b1:bf:ef:93:09:ad:0f:33:bd:26:a1:be:e9:84:
59:90:ba:ff:71:65:80:e3:10:4d:19:34:28:89:f3:
5a:d4:28:3f:ec:af:d0:9c:93:1d:f6:10:00:fd:89:
9e:4c:c3:a4:99:5e:4b:e8:e6:06:58:7d:c2:7b:1c:
bf:46:05:79:b2:ac:6d:48:9a:73:fb:91:6a:fc:8d:
b1:ea:3d:24:f2:33:d3:e8:2d:e6:3c:6b:f8:e1:75:
12:54:06:91:72:be:af:28:fe:05:35:ac:9d:5b:2a:
2e:16:92:ba:80:ff:03:cc:11:ee:51:92:89:ba:4d:
5b:39:a0:e3:23:16:74:00:53:41:23:fa:f7:be:c3:
0e:e4:2c:5d:b1:ea:9a:c2:9e:d7:c2:bd:03:9a:5b:
7c:6a:37:4b:8c:3d:07:87:22:3b:b5:c1:ca:3b:17:
cd:d4:7e:e1:7f:d4:fe:e2:dd:82:2b:cd:61:3a:36:
ae:99:3b:24:99:aa:45:f5:11:60:ff:8b:36:46:08:
1e:d5:8a:f2:1a:a6:fa:2f:4e:13:b0:8e:a1:e5:6f:
f6:be:c0:c4:88:10:90:30:0e:87:45:6c:7f:bf:0f:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:C2:95:D0:9D:52:BB:71:48:0F:EA:76:B8:7A:6F:AE:19:74:14
X509v3 Authority Key Identifier:
keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/34332e3234372e32322e302f32342d3234203d3e20313331373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7c:c2:6a:a1:52:a4:01:55:2d:f5:19:d4:a0:02:44:41:c1:
24:45:66:2f:d0:47:61:43:14:2f:1a:63:62:14:42:4d:62:55:
2b:03:17:37:90:11:23:27:43:e8:3c:a6:a1:75:c6:1e:a5:4e:
29:64:38:d1:45:b5:ab:18:93:24:9a:ef:66:a3:b6:5f:91:d2:
c8:97:98:04:4c:58:5d:02:fc:66:54:88:29:ab:c6:5f:13:84:
36:8e:06:50:be:1c:fc:8d:0f:2a:be:d2:e2:69:b2:69:61:fb:
0d:85:8a:60:d6:36:f5:d6:b2:ef:29:79:ab:47:2e:ae:54:b0:
3f:07:2b:e9:f7:97:ca:41:97:1c:3d:6a:a2:a9:44:de:ec:23:
eb:99:cc:b2:14:d7:bb:e8:d4:ff:96:85:43:41:96:ea:80:60:
b0:85:30:c6:ef:a9:36:b9:a6:f7:b0:2f:52:40:71:85:de:40:
fa:2a:fb:b7:a0:42:9a:16:e3:a8:3e:0a:15:df:f9:4c:04:cc:
82:10:90:f2:cc:60:29:27:15:de:a5:84:f5:50:15:3d:a1:58:
27:fe:22:7f:44:d1:fb:9b:00:49:8e:44:7a:e0:1f:2a:3e:c1:
14:bb:47:92:d9:df:b8:1a:2f:75:b7:ea:54:cc:a6:87:24:38:
71:bc:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:44 2025 by rpki-client