Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa
File: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier: SbxBJwcyRNjmcJAEw7SuNTFi3HhmkmBhtQkXMEm7WeI=
Subject key identifier: A9:5F:AF:BA:EC:5B:56:F6:F7:FF:7B:7B:83:FB:67:32:C5:B6:61:31
Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial: 1BCB0E083144FF6E8A8412E689F403350D79C040
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa
Signing time: Mon 01 Jul 2024 01:03:36 +0000
ROA not before: Mon 01 Jul 2024 00:58:36 +0000
ROA not after: Mon 30 Jun 2025 01:03:36 +0000
asID: 131745
IP address blocks: 210.247.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:cb:0e:08:31:44:ff:6e:8a:84:12:e6:89:f4:03:35:0d:79:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Validity
Not Before: Jul 1 00:58:36 2024 GMT
Not After : Jun 30 01:03:36 2025 GMT
Subject: CN=A95FAFBAEC5B56F6F7FF7B7B83FB6732C5B66131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:29:b6:a8:d3:55:72:03:fe:a2:52:3f:0d:
2d:e6:a6:7b:f5:04:9a:b0:e0:cb:af:32:1a:d8:49:
55:06:96:c4:26:82:3f:35:cd:0d:7c:a9:0e:73:42:
f7:2c:32:59:d1:45:e0:c1:4e:ec:b4:79:80:99:af:
9a:0c:6d:ca:c8:c5:67:ec:9c:b9:bb:20:af:67:2e:
42:a3:d2:65:ac:f8:5d:ee:44:c8:e4:80:33:06:fa:
15:42:2c:25:da:5c:8d:1e:f8:46:d3:ab:7a:a9:8c:
68:f5:9d:fa:93:dc:61:f8:ea:2b:df:40:5b:42:82:
b1:7c:55:e8:5b:d0:73:ef:d6:3f:53:a4:90:4a:ae:
ab:84:ea:03:22:e3:14:9f:1d:cc:af:88:c1:ce:aa:
7e:de:a6:dd:dc:0f:d1:8a:f0:c5:ef:a1:f4:37:72:
e9:9d:88:7d:e9:50:ac:66:26:84:9b:4c:05:55:d8:
b6:4b:55:ab:ec:aa:23:d3:fc:fb:31:bf:14:fc:27:
15:97:e3:b0:53:62:04:8b:2e:66:7b:41:8f:58:5c:
4b:dd:f5:f6:89:59:0a:fa:56:84:9c:73:83:6a:ab:
2a:83:3f:f9:8e:8e:30:58:b6:c4:d8:4f:b3:ae:d0:
81:26:e9:c9:b9:44:b7:30:35:94:89:5c:ac:51:f1:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5F:AF:BA:EC:5B:56:F6:F7:FF:7B:7B:83:FB:67:32:C5:B6:61:31
X509v3 Authority Key Identifier:
keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.247.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5f:2c:88:85:c9:d4:48:29:6e:ba:4b:69:e3:61:12:28:2e:
af:3f:df:68:cd:5b:a2:5a:9c:11:8a:f3:26:79:9a:41:af:03:
68:19:1c:1d:34:bf:df:8b:24:54:66:93:09:42:e0:b7:bb:27:
9a:be:9c:c8:81:9a:c6:58:44:0c:8a:6e:bd:d3:e3:b0:8e:e5:
9d:60:ea:9e:43:bc:d8:ba:d0:33:25:a2:e0:46:c3:46:0d:a0:
1f:0e:29:96:58:eb:7d:df:67:8c:a2:f6:92:d5:dc:69:f4:a6:
af:26:da:3d:b5:a4:e7:b8:7b:53:e1:83:d7:b5:0d:d8:49:6a:
d1:3e:36:e0:23:19:0a:22:be:c4:71:a6:03:4e:47:b9:1a:c3:
87:9f:f5:f5:65:81:51:8d:69:0f:ba:1e:43:5d:27:6f:4f:03:
9b:bf:26:d4:81:ef:1e:f0:e3:2a:84:42:64:3d:70:09:c6:df:
ba:63:93:5a:4b:af:e9:81:09:8d:3c:62:1f:bf:f2:5c:86:de:
66:df:bc:6c:75:06:43:5d:cd:18:b4:83:47:92:68:fb:1f:ec:
91:4f:8a:bb:a4:68:ab:9f:93:44:0a:84:3b:a3:5e:e9:d8:78:
7b:d5:7f:e3:3f:f2:f4:0c:4e:53:a9:2e:45:82:07:74:e4:e2:
28:f5:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:18 2025 by rpki-client