Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa
File: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (raw, json)
Hash identifier: 5QmBgtR4oxoWyv+pDSaUBxvCGSef+sF2loWrmoll8N4=
Subject key identifier: 98:04:80:53:0C:01:44:D9:0D:10:96:CB:84:74:23:B5:41:3E:9D:7E
Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial: 7AB5155F32693C33F3E97281B956B87678B30A84
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa
Signing time: Sat 04 May 2024 16:15:14 +0000
ROA not before: Sat 04 May 2024 16:10:14 +0000
ROA not after: Sat 03 May 2025 16:15:14 +0000
asID: 133799
IP address blocks: 123.108.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b5:15:5f:32:69:3c:33:f3:e9:72:81:b9:56:b8:76:78:b3:0a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Validity
Not Before: May 4 16:10:14 2024 GMT
Not After : May 3 16:15:14 2025 GMT
Subject: CN=980480530C0144D90D1096CB847423B5413E9D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:fe:e1:21:76:52:2b:84:83:3d:e0:17:db:
bf:9a:79:28:b0:d9:70:a2:0a:2c:ae:a9:88:96:a1:
3b:30:f2:22:59:1a:0f:54:25:8d:aa:a4:f4:fd:94:
56:2b:8c:23:58:33:e1:d1:b6:c2:73:3c:ac:56:2b:
99:b7:a6:c3:55:5c:26:b2:06:b8:fa:03:38:68:92:
23:12:9a:22:62:a5:10:0f:f0:2e:29:8f:be:41:19:
2e:d0:55:6d:85:f5:e9:98:85:f6:13:9c:71:65:6c:
68:55:bf:48:bb:4b:e7:2c:d3:38:9d:a8:5f:ba:4e:
68:63:01:6f:61:9b:88:b1:73:24:d4:5c:fc:a4:fa:
16:92:65:bd:89:a1:43:99:ed:3a:6a:b5:1f:1f:5a:
db:f2:ff:5b:1b:f0:e7:f4:8f:0b:5d:55:53:68:09:
40:dd:8d:af:0a:6b:ce:4a:85:96:3b:a4:04:72:83:
0e:cb:5b:9c:fe:39:5c:58:aa:a3:1d:1e:8d:53:6b:
38:a8:28:9f:56:38:74:0a:31:23:db:dd:7c:bb:48:
d7:06:50:ec:59:08:5e:ed:dc:54:4c:f1:4f:77:08:
93:c4:f9:83:c5:02:43:e4:42:b1:4e:e1:92:92:7a:
21:88:f2:45:19:1d:53:5b:36:0c:ba:c5:eb:a4:84:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:80:53:0C:01:44:D9:0D:10:96:CB:84:74:23:B5:41:3E:9D:7E
X509v3 Authority Key Identifier:
keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.108.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:51:93:01:ad:88:c5:27:67:11:d3:8c:3c:4e:d3:61:3c:c5:
df:ae:3a:cf:4b:5a:d9:c2:b3:44:51:f0:02:b9:2f:db:55:0e:
ec:4b:26:2e:b9:35:94:4f:73:92:23:b7:d5:af:06:40:69:75:
e3:94:5d:4e:05:37:87:5c:1e:60:9f:0e:c0:ed:66:14:45:ba:
22:c1:ec:32:11:6a:cf:86:2b:17:d2:08:e2:95:3e:92:10:c0:
ec:af:a5:af:1e:ec:b6:bf:fe:e4:95:10:f6:2f:61:98:11:ce:
ad:e2:14:08:24:e3:d9:d2:74:37:4e:42:fa:a6:32:2b:1d:45:
31:34:44:1f:df:c8:e4:1f:cc:6d:c9:ec:ef:d6:31:b1:a0:38:
6d:2d:93:76:14:b4:2f:68:c1:5b:4b:1d:71:9d:16:c6:1d:9a:
11:12:b7:de:c2:29:66:ed:e3:de:e9:74:05:93:ea:57:17:98:
42:cb:bb:d8:e4:d1:4e:0b:4a:68:d6:f6:d8:da:a9:cc:d3:23:
e6:bb:c4:3b:20:15:74:91:c6:eb:7f:94:0f:68:cd:f2:65:eb:
9d:3e:b3:7d:83:2b:1a:52:b4:3b:e1:e8:01:06:e8:ee:6b:b9:
5b:10:58:dd:b1:45:84:9f:7b:db:69:64:84:06:d8:43:09:ea:
58:6a:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:14:03 2025 by rpki-client