Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132302e302f32312d3234203d3e203338343936.roa
File: 3131352e3137382e3132302e302f32312d3234203d3e203338343936.roa (raw, json)
Hash identifier: piZ5B/5C00/0tYgrrcsAwqRk+UIUS2wNJASOBO4Z+IQ=
Subject key identifier: 84:FC:1C:09:8F:69:8B:EC:B5:28:9F:03:77:84:3C:19:A5:57:57:7E
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 6B8875FB7F16A0DC7E2A4C90B1589D6D3C35306E
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132302e302f32312d3234203d3e203338343936.roa
Signing time: Mon 01 Jul 2024 01:05:34 +0000
ROA not before: Mon 01 Jul 2024 01:00:34 +0000
ROA not after: Mon 30 Jun 2025 01:05:34 +0000
asID: 38496
IP address blocks: 115.178.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:88:75:fb:7f:16:a0:dc:7e:2a:4c:90:b1:58:9d:6d:3c:35:30:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Jul 1 01:00:34 2024 GMT
Not After : Jun 30 01:05:34 2025 GMT
Subject: CN=84FC1C098F698BECB5289F0377843C19A557577E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:59:cc:4b:f5:48:fe:a9:50:5b:15:29:7a:
b2:a4:2c:aa:3b:92:f8:c3:5f:ed:7f:a9:50:ee:c9:
3c:dd:ba:2f:04:99:f8:9d:98:e0:dd:90:8c:00:bf:
6c:c0:8a:55:b2:6e:ee:bc:cd:fb:43:48:12:8c:b1:
01:49:a6:c0:50:b9:c9:4e:12:f6:17:5d:98:81:cd:
01:3f:72:06:f5:2e:f0:63:bc:e1:3a:f9:81:bc:59:
01:d6:04:13:f8:58:91:bb:ba:cf:32:08:92:82:c6:
61:d1:2f:f9:5c:40:f6:d2:28:d7:56:58:02:d8:34:
ab:62:62:e0:a5:f7:e9:0e:43:6e:d6:1f:9c:1d:b7:
a5:c3:16:7f:a8:b3:1a:1f:35:b9:a9:54:05:13:66:
1a:6b:1a:e3:ea:8e:e6:1f:a7:65:ef:f7:1b:fd:0c:
5b:f5:82:d3:0d:38:82:1c:16:17:7e:f0:bc:84:27:
a9:31:5f:04:5c:ab:60:d4:5d:91:e1:19:dd:82:53:
97:64:06:c5:72:a1:20:79:b2:d6:4a:e3:56:5a:8e:
f3:bb:1b:bb:6c:19:9e:57:fb:68:17:1d:67:21:f5:
54:f2:fa:19:c3:82:b6:2a:17:52:f6:e1:a9:f8:2a:
e7:11:3c:ce:49:db:80:7b:4e:bb:b4:db:f4:36:0d:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FC:1C:09:8F:69:8B:EC:B5:28:9F:03:77:84:3C:19:A5:57:57:7E
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132302e302f32312d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.120.0/21
Signature Algorithm: sha256WithRSAEncryption
71:7c:69:04:17:ee:b8:20:e0:18:0c:3b:fe:32:43:62:60:ef:
02:b0:4d:dc:7b:f4:d1:2e:0e:2c:20:99:b0:10:5f:d4:b6:ae:
30:40:35:59:1b:13:4b:e8:7e:b0:d7:96:66:6c:28:a1:88:93:
4d:0c:c1:7f:50:54:a0:4f:6d:62:16:17:e9:ad:bc:17:ee:61:
b5:d3:35:42:37:5d:af:ff:f0:97:50:5a:a9:7a:8c:bb:7f:0c:
4b:c9:8f:d3:e2:b0:12:74:17:b5:f1:e0:39:1b:db:d2:6e:25:
12:53:67:f3:35:8c:8a:45:0b:e0:46:2b:4d:44:4a:76:ca:c3:
64:2d:92:de:d8:61:cf:92:f9:84:aa:fc:52:2c:ba:d9:14:c5:
73:b5:f6:1e:e7:e5:32:1a:b5:d2:86:90:1d:5e:98:5a:3b:03:
dd:8e:aa:48:60:44:77:b9:3f:24:4d:0a:50:d5:30:39:62:c5:
23:85:db:d3:2e:02:cf:8c:02:51:3f:7f:6e:f0:c5:ff:9f:34:
9e:e5:6c:2f:78:0a:82:16:86:42:37:df:ad:a8:f1:2d:2d:bb:
3c:39:f8:9a:f2:8d:e4:84:d6:d5:d1:62:6d:3d:8f:1b:d9:da:
7b:19:42:18:55:ac:39:52:75:ae:9a:80:02:8e:2a:63:e7:6b:
05:1f:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:10 2025 by rpki-client