Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39352e302f32342d3234203d3e203435373232.roa
File: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier: U7QS9bMS2+t1XHExH+JHZSXP/9sTh8XHPZioautpjoI=
Subject key identifier: 8B:52:E4:24:D5:43:C6:98:E6:1C:DB:9E:6A:40:DC:B6:DD:62:DA:75
Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial: 0C70B6E10FA9AC97631B15587EE4A8069B308E54
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39352e302f32342d3234203d3e203435373232.roa
Signing time: Mon 01 Jul 2024 01:03:48 +0000
ROA not before: Mon 01 Jul 2024 00:58:48 +0000
ROA not after: Mon 30 Jun 2025 01:03:48 +0000
asID: 45722
IP address blocks: 180.178.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:70:b6:e1:0f:a9:ac:97:63:1b:15:58:7e:e4:a8:06:9b:30:8e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Validity
Not Before: Jul 1 00:58:48 2024 GMT
Not After : Jun 30 01:03:48 2025 GMT
Subject: CN=8B52E424D543C698E61CDB9E6A40DCB6DD62DA75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:ef:c2:1b:9f:7a:96:5c:67:cf:5d:ce:51:
50:2d:6d:23:93:aa:7f:89:ff:75:52:98:d5:92:37:
ec:77:ed:1f:70:ba:c8:7c:d8:70:50:a2:be:5c:1b:
6a:25:f5:d3:f8:76:53:1a:db:1c:a8:ae:83:45:04:
49:e0:5a:d8:58:cc:29:9e:de:a9:c6:6e:1e:b3:da:
53:7f:1a:0f:b2:51:89:d8:19:cd:10:73:92:66:cf:
74:5e:ff:d3:e6:14:e7:9f:6f:08:bb:ed:92:b6:fb:
cb:57:0e:9c:51:44:94:97:d2:e1:01:af:e2:9c:8f:
86:61:50:ce:ec:33:9a:f3:48:d1:af:5b:09:21:82:
8b:e3:b0:3c:19:7f:c1:cf:b2:e0:76:23:1b:c7:40:
c5:6f:75:ed:b0:a2:00:72:25:c2:e9:6c:94:cb:47:
8f:b3:ca:76:ad:cd:47:81:e4:ee:29:af:ff:d9:c9:
77:b0:39:85:dc:b7:1e:34:db:30:25:de:37:b5:1a:
df:5e:d1:d1:0a:99:0c:03:4a:09:29:76:f4:f8:ae:
a8:56:9b:9a:93:06:47:79:91:4d:13:99:f2:4a:5d:
cd:62:08:4a:c0:6d:0c:03:a9:f2:57:3e:e9:db:08:
a7:70:1e:f7:5a:ce:12:2e:2c:6a:49:d0:7b:e4:5b:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:E4:24:D5:43:C6:98:E6:1C:DB:9E:6A:40:DC:B6:DD:62:DA:75
X509v3 Authority Key Identifier:
keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39352e302f32342d3234203d3e203435373232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.178.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:de:bf:d7:cc:b8:1a:8c:ee:cd:e0:5d:5e:d1:82:5e:e7:5c:
d5:f9:5d:2f:ab:7b:b0:be:bc:25:c4:b3:c4:c6:ec:26:84:a1:
88:dd:c3:67:2f:ff:1b:eb:f9:8e:13:c0:9d:8d:15:a4:06:f0:
44:66:28:2d:fa:4d:19:cd:ae:8c:29:12:8c:8f:09:da:64:92:
3d:7c:35:06:74:34:0c:17:a7:83:13:5a:07:ac:58:d2:5b:2f:
83:75:9a:48:33:9c:59:c7:2b:2e:11:ca:13:49:52:18:89:41:
32:0f:86:61:55:5b:7b:37:a6:4f:30:e9:90:1e:17:ed:eb:32:
c1:7e:bf:03:cb:e4:3f:6e:4a:0b:46:99:c6:c4:60:9b:cf:97:
03:51:a8:8a:1a:10:fa:7c:c2:e0:c3:c6:56:b0:8b:53:45:20:
35:a7:ee:a0:96:81:fe:3a:df:de:97:f5:f9:a2:f1:30:df:33:
54:bc:b6:ea:0e:6c:73:91:4c:95:de:1a:0b:5b:d4:b8:c2:e5:
6a:18:e6:cc:b9:76:e2:35:b2:65:13:08:d5:96:20:7c:f0:82:
14:40:0a:5c:cc:94:f7:20:28:f1:4a:8a:31:1a:fb:27:11:d4:
98:a1:1c:77:4c:d7:75:b9:67:19:e7:3c:6a:86:8d:d1:98:94:
5e:d0:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:45 2025 by rpki-client