Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa
File: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (raw, json)
Hash identifier: i3Vw84Ep8wSgPwzTzjBdWpWCt0j7DNGxOg0DoWzkkCo=
Subject key identifier: FB:80:B7:F3:3C:D2:16:22:1F:8B:DA:3A:F3:2A:72:4A:9A:E6:02:5F
Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A
Certificate serial: 4F5CFF417F2752FAD0B82FEF600159CEC42490A5
Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa
Signing time: Thu 05 Dec 2024 07:02:34 +0000
ROA not before: Thu 05 Dec 2024 06:57:34 +0000
ROA not after: Thu 04 Dec 2025 07:02:34 +0000
asID: 152029
IP address blocks: 36.50.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:5c:ff:41:7f:27:52:fa:d0:b8:2f:ef:60:01:59:ce:c4:24:90:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A
Validity
Not Before: Dec 5 06:57:34 2024 GMT
Not After : Dec 4 07:02:34 2025 GMT
Subject: CN=FB80B7F33CD216221F8BDA3AF32A724A9AE6025F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:78:ed:a6:bb:13:6f:24:6e:b5:22:24:23:
5b:23:6b:02:4d:12:63:8b:e8:eb:e5:fc:b0:77:1a:
17:03:60:5c:a0:81:7c:47:3b:0f:19:ac:40:89:21:
55:4a:24:79:05:0c:aa:2d:9f:ac:d3:7a:aa:2c:8a:
0d:b8:99:ec:fc:26:df:35:b4:fc:95:55:e6:3f:3f:
84:62:84:3d:df:33:77:4a:38:13:68:5d:b2:e3:d1:
be:22:df:ab:36:1d:ed:26:7c:f6:8d:81:ee:a9:98:
e8:2e:c0:ef:d7:2e:1d:a6:28:3c:01:fe:67:7e:76:
5b:e9:56:1b:4f:1c:05:e6:4d:41:d2:8f:69:f8:e9:
37:be:f6:e8:7d:77:71:67:cb:22:84:85:dd:a3:5e:
1e:72:c9:24:c8:8d:e4:ca:1b:c4:03:aa:fd:e1:ad:
cd:f3:51:17:7a:bc:b5:c6:c4:d3:03:a1:ca:66:7a:
91:6b:b7:48:ab:4b:09:dd:05:05:76:53:41:98:dc:
57:33:82:55:43:fd:41:2e:e4:0b:02:00:df:5c:55:
14:27:23:64:cf:17:3b:88:41:28:ad:f9:3c:db:4a:
1f:ac:35:47:22:2f:4f:36:20:a2:c8:5d:94:3a:f0:
46:3d:cd:9c:99:7f:fc:9a:17:0e:81:eb:ef:70:aa:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:80:B7:F3:3C:D2:16:22:1F:8B:DA:3A:F3:2A:72:4A:9A:E6:02:5F
X509v3 Authority Key Identifier:
keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e9:e2:90:42:b3:aa:35:c8:a9:81:95:ed:56:37:3f:e2:07:
c4:7f:06:02:00:5c:66:d6:df:56:72:03:3a:31:77:d8:2d:30:
d6:09:d3:17:62:51:85:e0:fa:99:d6:51:ae:74:b2:44:ca:70:
e1:71:e1:39:58:b6:39:8a:49:e9:9c:82:c1:b1:7c:eb:b7:a0:
c2:95:c2:a9:8a:1a:5f:5e:9d:c3:c5:b4:f1:b8:bf:be:94:15:
30:0d:cf:1e:07:f7:55:38:55:9e:dd:ab:19:ab:3c:24:51:a5:
88:61:e7:d2:f4:e3:40:66:08:c2:06:8b:69:ed:be:88:85:43:
93:81:a7:33:18:95:7f:c1:c4:96:9a:78:81:d1:21:dc:a8:fc:
ec:3e:d1:de:6f:1c:bc:4d:65:3d:7e:a2:e9:ef:85:25:d6:71:
4e:f4:73:c8:5d:c5:ba:89:6a:70:74:f2:b8:5d:22:37:bc:e2:
bf:85:d4:d2:14:4a:0a:2c:e2:84:31:eb:24:de:fa:15:dd:5f:
1d:6c:3f:97:0a:13:f1:a1:57:8a:63:44:85:f4:54:9c:a6:2a:
32:1c:af:90:75:63:ce:e1:c9:7f:04:f5:8d:66:2e:fe:5f:0a:
d4:aa:f1:49:15:5a:f8:61:8d:e2:24:21:13:84:65:7e:5b:ec:
98:e7:99:68
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUT1z/QX8nUvrQuC/vYAFZzsQkkKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE
RTc2RjgzQTAeFw0yNDEyMDUwNjU3MzRaFw0yNTEyMDQwNzAyMzRaMDMxMTAvBgNV
BAMTKEZCODBCN0YzM0NEMjE2MjIxRjhCREEzQUYzMkE3MjRBOUFFNjAyNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9njtprsTbyRutSIkI1sjawJN
EmOL6Ovl/LB3GhcDYFyggXxHOw8ZrECJIVVKJHkFDKotn6zTeqosig24mez8Jt81
tPyVVeY/P4RihD3fM3dKOBNoXbLj0b4i36s2He0mfPaNge6pmOguwO/XLh2mKDwB
/md+dlvpVhtPHAXmTUHSj2n46Te+9uh9d3FnyyKEhd2jXh5yySTIjeTKG8QDqv3h
rc3zURd6vLXGxNMDocpmepFrt0irSwndBQV2U0GY3FczglVD/UEu5AsCAN9cVRQn
I2TPFzuIQSit+TzbSh+sNUciL082IKLIXZQ68EY9zZyZf/yaFw6B6+9wqiefAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU+4C38zzSFiIfi9o68ypySprmAl8wHwYDVR0j
BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE
NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2
RjgzQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliOGE3ZmE1LWZkYTMtNGEzZS05
MmY3LWZhYmZlZDA1YTk1Yy8wLzMzMzYyZTM1MzAyZTM1MzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkMjkwDQYJKoZIhvcN
AQELBQADggEBAEjp4pBCs6o1yKmBle1WNz/iB8R/BgIAXGbW31ZyAzoxd9gtMNYJ
0xdiUYXg+pnWUa50skTKcOFx4TlYtjmKSemcgsGxfOu3oMKVwqmKGl9encPFtPG4
v76UFTANzx4H91U4VZ7dqxmrPCRRpYhh59L040BmCMIGi2ntvoiFQ5OBpzMYlX/B
xJaaeIHRIdyo/Ow+0d5vHLxNZT1+ounvhSXWcU70c8hdxbqJanB08rhdIje84r+F
1NIUSgos4oQx6yTe+hXdXx1sP5cKE/GhV4pjRIX0VJymKjIcr5B1Y87hyX8E9Y1m
Lv5fCtSq8UkVWvhhjeIkIROEZX5b7JjnmWg=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:35 2025 by rpki-client