Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa
File: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (raw, json)
Hash identifier: 8z2b+xp92tURTGvnf0C6XQM1zDU3t1HFgqr8ucYFBOU=
Subject key identifier: 4F:CE:5B:E3:57:6C:BB:08:D3:2A:FD:A4:7B:21:A8:CE:2E:2A:6B:A6
Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E
Certificate serial: 17526F6B8F0FE8E168AC461E4E845D721ABB9E5F
Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa
Signing time: Sat 19 Oct 2024 12:00:01 +0000
ROA not before: Sat 19 Oct 2024 11:55:01 +0000
ROA not after: Sat 18 Oct 2025 12:00:01 +0000
asID: 152026
IP address blocks: 45.123.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:52:6f:6b:8f:0f:e8:e1:68:ac:46:1e:4e:84:5d:72:1a:bb:9e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E
Validity
Not Before: Oct 19 11:55:01 2024 GMT
Not After : Oct 18 12:00:01 2025 GMT
Subject: CN=4FCE5BE3576CBB08D32AFDA47B21A8CE2E2A6BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:e0:99:7a:c2:b0:4a:9c:29:d5:ea:5d:e0:
aa:3f:db:e6:f0:72:d0:84:25:67:91:92:db:ac:3c:
6f:1e:ea:01:17:ce:c7:66:9e:5e:22:ce:07:d2:2d:
56:e1:84:be:2c:44:87:f3:5d:d7:2f:af:82:78:4f:
55:8e:a7:52:2a:4f:ec:29:07:32:df:95:7f:bd:1a:
5c:54:9a:d6:0e:e4:45:cc:d4:c4:d4:6e:cb:c5:47:
89:08:20:cd:f4:20:be:c2:8c:4b:a4:f3:63:ef:cc:
a1:54:9f:f4:9c:20:1d:bf:3d:c4:c5:78:89:a3:17:
cb:cb:b8:f2:45:94:0c:c1:f8:b7:f9:8f:50:97:a3:
f5:25:a5:29:11:a3:e4:ab:97:11:26:a4:e4:58:ba:
98:2e:77:1f:85:1e:d6:25:47:c7:dd:9a:49:e8:58:
03:f2:b8:50:4d:47:9b:eb:c2:78:f6:c2:b0:32:20:
39:32:80:23:3e:e0:32:ee:ce:98:76:72:21:6a:c6:
c5:02:42:93:ee:e8:06:61:6d:54:41:b0:d0:1a:e6:
a6:f4:a4:13:c9:d1:ec:9b:4f:0a:17:64:57:9a:4a:
ab:23:2b:27:f2:03:86:37:f5:ff:c8:7d:af:8b:4c:
c3:e5:50:8c:e5:8b:37:87:5a:f0:25:60:6e:60:8c:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CE:5B:E3:57:6C:BB:08:D3:2A:FD:A4:7B:21:A8:CE:2E:2A:6B:A6
X509v3 Authority Key Identifier:
keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.142.0/24
Signature Algorithm: sha256WithRSAEncryption
91:41:f2:b8:04:7f:56:a7:2e:0d:b6:25:1b:c9:8a:0c:fb:24:
ca:60:d2:ee:87:b6:90:34:99:07:74:21:a1:e3:be:60:8a:be:
77:03:5b:d7:09:33:da:52:4e:53:ad:bc:e0:b5:7f:5d:a7:1b:
2e:cf:14:31:a5:8b:aa:e4:a6:63:10:c7:91:ab:08:f0:46:c5:
5e:cb:cb:9c:80:21:01:00:62:ff:a2:89:29:e8:11:e1:79:e3:
e1:96:a0:1d:46:c0:12:8e:dc:37:94:53:92:cd:cb:2e:9e:15:
07:f1:a0:93:24:c4:d3:89:14:4c:ae:39:a8:6c:ba:1a:c0:ee:
01:32:62:aa:16:20:21:73:61:ff:f4:7f:0a:03:3b:f2:92:3c:
90:f4:14:9c:b9:43:00:d4:81:70:27:cc:11:6b:40:c8:60:76:
9d:10:82:be:2e:fb:7e:c6:40:68:7b:d2:c5:68:2c:9e:b4:8c:
04:31:89:5d:80:60:48:83:2a:84:aa:c7:7b:e7:49:d8:71:ec:
24:f5:c5:e6:5d:95:b1:34:2d:c9:a0:a1:98:8b:b7:cc:bc:03:
52:8a:9c:36:4d:89:e8:1d:51:c7:4f:fc:d5:45:a0:a0:05:eb:
29:1f:6c:80:7d:0a:5a:f7:37:5f:fc:ce:1f:b7:ad:69:bc:e5:
0a:70:37:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:29:41 2025 by rpki-client