Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa
File: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (raw, json)
Hash identifier: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=
Subject key identifier: 8B:B6:B9:43:06:98:36:8F:05:1E:8F:D5:CA:9C:CD:0E:B1:68:30:B2
Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE
Certificate serial: 53022F393B3785403A68F6D2E16703C2DD953A8C
Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa
Signing time: Fri 07 Feb 2025 10:00:02 +0000
ROA not before: Fri 07 Feb 2025 09:55:02 +0000
ROA not after: Fri 06 Feb 2026 10:00:02 +0000
asID: 152053
IP address blocks: 210.87.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:02:2f:39:3b:37:85:40:3a:68:f6:d2:e1:67:03:c2:dd:95:3a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE
Validity
Not Before: Feb 7 09:55:02 2025 GMT
Not After : Feb 6 10:00:02 2026 GMT
Subject: CN=8BB6B9430698368F051E8FD5CA9CCD0EB16830B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:f8:50:2f:5c:e4:f4:3c:b6:1a:c2:c1:d2:
98:99:e3:97:4d:f4:71:2e:9b:a6:97:27:c0:ad:ab:
8b:1d:3b:54:83:47:7b:92:b4:7f:fb:57:ba:1e:6d:
67:20:86:64:4b:f2:e8:46:17:b1:56:76:07:6a:98:
6f:e2:41:b3:ff:fb:ca:0f:f4:15:ed:f2:48:c6:8b:
d5:ae:3d:53:fc:c8:2f:a4:bf:f7:6c:b3:1d:19:78:
00:e4:d4:8f:c5:4e:4c:49:dd:95:16:90:64:f0:bc:
eb:7f:7f:23:d7:7e:85:bb:2f:38:ca:7d:70:64:3e:
9f:53:2d:fb:db:fd:b9:4b:82:f4:64:df:d9:9a:15:
1c:16:1d:a2:fc:67:ef:c2:a6:0d:ce:08:87:c0:b1:
b7:34:a5:d8:71:85:ea:91:42:52:be:51:5e:c1:3f:
52:d2:6f:ab:05:d5:62:df:c1:08:7a:aa:6b:6e:47:
cd:5c:b1:f0:e3:05:c4:79:ee:30:6e:dd:5e:df:bb:
65:3f:4f:59:06:ff:bc:e0:60:20:8b:50:26:53:0b:
d4:f5:4a:c5:18:18:a5:8c:87:7b:f7:3c:f2:34:c1:
cb:ca:44:55:8a:1c:2b:f5:bb:2c:65:c1:14:cb:4c:
a5:f6:6c:8a:4c:ed:5a:64:6c:50:da:84:35:4a:29:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B6:B9:43:06:98:36:8F:05:1E:8F:D5:CA:9C:CD:0E:B1:68:30:B2
X509v3 Authority Key Identifier:
keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.87.112.0/24
Signature Algorithm: sha256WithRSAEncryption
88:fc:f5:9e:b6:f4:58:16:4d:d0:bf:87:df:84:a8:e1:45:80:
e8:14:c3:66:85:03:c4:9b:7c:94:09:14:5a:c3:18:19:29:72:
73:8e:57:d2:f7:5c:0a:00:9d:c2:34:df:8d:2e:25:c6:6d:1f:
c2:fc:a8:6e:1d:f6:cf:c1:07:8e:1b:3b:29:7a:d9:27:bb:5d:
fa:71:7c:8c:d0:f3:39:7d:ef:e3:81:77:b4:55:59:f6:87:39:
f7:c0:5a:ff:f3:5b:15:47:a6:71:64:2f:3c:85:c0:d8:a5:60:
d9:cb:af:25:7b:45:a6:3c:58:5c:01:96:f6:95:ec:f6:62:fa:
36:41:86:c5:3f:4c:7d:07:ff:b3:7e:ac:7e:17:b0:fa:81:47:
a5:38:c9:d5:23:47:8b:3a:90:6b:66:55:ae:a2:31:52:75:21:
c7:e3:11:59:d5:f3:e8:ac:9d:b2:ee:7e:52:00:42:f3:9f:62:
49:e2:f4:b6:70:8e:47:d3:ab:63:d1:bd:08:82:17:b3:26:4a:
be:87:6e:e0:ab:69:cd:02:e5:c6:68:0b:ae:b6:b6:2f:c4:c6:
dd:1a:57:69:c3:a5:5d:a5:fc:02:2b:77:bf:10:46:1f:da:bf:
cd:90:88:5a:90:ad:79:72:8d:16:91:2c:0c:04:2a:c0:ae:69:
83:0a:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:58 2025 by rpki-client