Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa
File: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier: YdgVrIhwigf5vVjBfE6W9Ix4PmwssBDwnjxMo0ci8Oo=
Subject key identifier: 8B:8E:5C:32:28:D7:01:8E:D2:4C:E7:BB:04:A1:26:2F:E3:B8:F6:F4
Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial: 0F2B69F9427E3FA4CD0E85A135559A2D416174A6
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa
Signing time: Mon 01 Jul 2024 01:03:35 +0000
ROA not before: Mon 01 Jul 2024 00:58:35 +0000
ROA not after: Mon 30 Jun 2025 01:03:35 +0000
asID: 131745
IP address blocks: 210.247.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2b:69:f9:42:7e:3f:a4:cd:0e:85:a1:35:55:9a:2d:41:61:74:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Validity
Not Before: Jul 1 00:58:35 2024 GMT
Not After : Jun 30 01:03:35 2025 GMT
Subject: CN=8B8E5C3228D7018ED24CE7BB04A1262FE3B8F6F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:3c:39:1d:ff:b1:c2:1f:b7:f5:d4:8a:05:
6d:af:6f:34:03:0b:60:33:f2:2e:f7:d4:a2:ed:5f:
a9:a3:19:f9:49:4d:2c:fd:8b:69:1a:d5:38:cb:05:
b6:8c:50:83:6b:12:47:a2:18:3a:59:30:7d:d9:2e:
7a:44:08:a3:65:25:3a:73:1b:46:a8:81:1a:15:4c:
a1:ae:dd:25:52:9b:ae:c2:10:e4:17:51:51:cc:ab:
f8:50:5f:b4:60:19:4d:5c:cb:6e:f7:a5:fb:0a:c6:
ad:94:cb:29:c4:4d:8d:9b:7f:9b:d2:4e:b2:5e:d9:
7c:d5:81:e8:f2:3e:92:d5:b7:b2:a0:ed:7f:e0:64:
d6:9b:54:01:9e:0a:9c:2c:e5:4f:50:cb:c1:fb:c4:
f9:3f:f1:ee:d0:58:18:e6:55:a8:82:2b:e8:37:90:
76:fa:52:c8:79:1b:93:c2:e7:4c:33:a5:27:36:d6:
a1:db:81:cd:fd:a9:10:1e:ae:d1:03:41:3e:e5:db:
3d:6c:01:35:3f:7f:4b:f6:b0:78:ba:5e:b6:36:8a:
a6:f7:f3:61:cd:be:af:22:32:bd:82:00:4f:d7:72:
14:11:70:1b:63:81:88:85:19:38:c1:e1:7e:f0:4b:
22:65:ad:50:42:41:46:c9:cb:9a:58:d0:8f:38:62:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:5C:32:28:D7:01:8E:D2:4C:E7:BB:04:A1:26:2F:E3:B8:F6:F4
X509v3 Authority Key Identifier:
keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4b:43:fe:7e:6f:15:6f:96:b7:76:5c:50:a1:d4:20:d1:c8:
ce:4f:b8:46:8e:f3:67:46:43:8f:d8:82:8f:c6:cf:10:0e:65:
42:04:fd:a7:2c:4c:1b:31:87:43:a2:00:2e:b3:f6:86:79:4b:
a6:8a:89:72:b0:b9:2a:86:f2:75:f4:3d:0b:35:19:6e:a9:67:
0a:6d:d9:bf:32:2b:8d:59:c8:a8:c9:be:a9:3d:b1:38:b6:56:
6a:4e:fd:d8:99:22:4b:e7:c2:46:47:6f:9b:79:43:51:ed:f0:
84:b6:89:92:63:1a:a7:85:42:4e:cb:62:8b:96:ae:b7:f9:58:
10:c9:f2:06:52:8e:fb:44:5b:6b:35:ee:03:12:1d:a8:c8:34:
89:bc:3f:07:0f:39:3c:a3:83:59:0e:ad:99:e2:c6:27:6e:b6:
31:11:be:c8:e1:d4:d3:78:d4:42:cc:9a:17:ef:b0:5d:8e:11:
e3:13:c2:65:86:15:4c:a6:e9:f8:8b:91:17:b6:20:b5:d9:8d:
23:62:9a:de:b0:64:01:77:82:63:b5:92:98:54:e3:7e:fc:2f:
f5:48:56:df:de:86:fd:5a:8b:79:3c:7d:5c:68:c1:6a:81:c1:
16:29:27:51:bb:26:4d:e3:0a:fc:7c:89:8f:06:c8:14:2c:69:
15:f3:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:09 2025 by rpki-client