Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132332e302f32342d3234203d3e203338343936.roa
File: 3131352e3137382e3132332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: KS3ZFXvAqhRmav6dUGQugHasuSLaZgD9xT/Zg5nsaCg=
Subject key identifier: 00:AE:F8:B2:F4:C5:DD:9E:C7:3A:4B:3A:2F:E9:D3:92:0F:CD:BD:DA
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 3CC3664A393D72CE1A28794618BDFD9EBD0B49A9
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132332e302f32342d3234203d3e203338343936.roa
Signing time: Fri 18 Oct 2024 08:40:18 +0000
ROA not before: Fri 18 Oct 2024 08:35:18 +0000
ROA not after: Fri 17 Oct 2025 08:40:18 +0000
asID: 38496
IP address blocks: 115.178.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c3:66:4a:39:3d:72:ce:1a:28:79:46:18:bd:fd:9e:bd:0b:49:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Oct 18 08:35:18 2024 GMT
Not After : Oct 17 08:40:18 2025 GMT
Subject: CN=00AEF8B2F4C5DD9EC73A4B3A2FE9D3920FCDBDDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:97:88:39:c1:76:aa:40:fb:3e:b6:28:ce:
13:13:e8:fb:b0:74:a8:de:f0:c3:2d:ba:e2:e3:df:
e1:16:84:a4:ca:f9:82:32:7d:bf:61:20:2d:7d:0d:
d5:09:8a:30:bc:fe:b1:95:55:76:1a:2a:6a:a6:1f:
0c:3b:f2:e0:12:2d:10:e9:96:a5:df:22:7c:fc:ac:
8c:3c:8c:d1:e3:7f:b3:19:13:51:70:62:14:9d:4f:
65:04:c9:f4:d3:72:0b:9b:42:4a:21:e4:9b:c1:31:
10:ce:83:01:a6:dd:b7:ea:90:64:bd:64:fe:2e:3c:
b6:a5:47:c1:0c:1e:5c:3e:31:1d:02:a9:4b:da:be:
8d:a4:96:c1:eb:51:fc:ce:3b:1f:e1:76:58:43:e1:
a7:0e:46:8a:4f:5a:4d:12:17:2b:40:07:14:33:e7:
fe:d0:ba:c4:ec:1b:60:72:e6:d6:6e:f6:f8:7e:cb:
6a:b6:d6:2b:cb:92:30:f3:fa:7d:67:28:a0:b7:62:
56:7d:e4:1e:e8:31:72:bc:6c:1a:9f:69:31:cb:3a:
40:00:a9:f2:9a:7b:a5:16:41:ad:fd:e0:8c:80:87:
bb:95:fc:32:a8:08:97:b1:7a:c4:b4:89:98:9e:c2:
b8:b4:25:e1:16:2e:64:61:2f:d8:e4:82:38:b0:a4:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AE:F8:B2:F4:C5:DD:9E:C7:3A:4B:3A:2F:E9:D3:92:0F:CD:BD:DA
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132332e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.123.0/24
Signature Algorithm: sha256WithRSAEncryption
61:24:89:5a:4d:7e:b0:17:b1:44:d5:49:61:7b:a4:84:22:c4:
c9:54:63:3c:d9:59:e1:c9:9c:33:d9:ea:e4:18:cb:f4:ab:f6:
5d:db:f9:0c:93:64:e4:59:5c:40:86:56:05:c5:ac:31:af:36:
95:22:0d:31:53:e3:81:ef:58:c4:c8:91:b3:af:e2:c6:e8:39:
a3:a1:c9:34:76:c0:57:bc:43:cb:d7:98:51:65:c8:69:b9:ea:
c5:98:c8:17:d2:ca:3b:92:1a:a6:3a:3b:a8:7e:cd:71:61:c3:
05:f6:7b:f0:d4:77:9b:1d:be:1e:b8:e9:b0:25:44:5c:0e:06:
82:46:60:64:b2:43:9b:62:7d:13:bf:0c:d9:fa:60:13:fb:2a:
05:f3:23:fe:ea:0b:30:45:a0:78:9d:74:f0:c0:cf:1b:f8:67:
6d:20:d8:b3:b3:5e:66:2e:c4:f6:fd:23:b7:83:ec:86:bd:90:
7f:85:fc:d2:f0:11:59:44:67:dd:1a:ba:8c:5e:b1:30:65:5c:
3d:f0:e8:09:4e:40:fa:fb:fc:5b:9f:c3:14:6d:e8:75:54:c2:
34:4b:91:9b:ac:f4:58:05:70:5d:28:1d:c4:40:70:a2:83:b0:
c4:0b:64:6f:62:f3:f7:45:94:54:de:6e:2c:4d:49:4c:3f:65:
9b:52:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:00 2025 by rpki-client