Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132372e302f32342d3234203d3e20313337333436.roa
File: 3131352e3137382e3132372e302f32342d3234203d3e20313337333436.roa (raw, json)
Hash identifier: cTeOLTCTDCCbni05buhMSwZmQuwy7fzvVLqUdSTM5gw=
Subject key identifier: 35:23:EC:EB:2F:22:D0:8A:9A:69:82:39:44:6C:08:32:C2:24:06:5A
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 2C685187831A7C7880C98AD42D8BD87737AF9FCD
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132372e302f32342d3234203d3e20313337333436.roa
Signing time: Fri 28 Feb 2025 06:55:59 +0000
ROA not before: Fri 28 Feb 2025 06:50:59 +0000
ROA not after: Fri 27 Feb 2026 06:55:59 +0000
asID: 137346
IP address blocks: 115.178.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:68:51:87:83:1a:7c:78:80:c9:8a:d4:2d:8b:d8:77:37:af:9f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Feb 28 06:50:59 2025 GMT
Not After : Feb 27 06:55:59 2026 GMT
Subject: CN=3523ECEB2F22D08A9A698239446C0832C224065A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:80:e5:f7:e6:5a:81:cf:e3:fa:87:0f:79:f9:
af:3f:39:a9:ac:a7:5c:d7:e5:6b:c7:27:a3:a3:7d:
9e:07:99:79:95:a9:34:56:80:90:34:f2:c4:48:db:
20:19:a7:da:47:b0:a2:83:e7:08:6f:35:c5:91:13:
4e:44:19:b8:b6:18:d5:37:3b:f3:b8:2a:dd:6c:19:
09:b5:db:d9:18:09:bb:99:28:34:13:5e:98:13:1e:
0e:ee:4d:a5:a0:9c:33:e6:ba:5c:97:00:a7:e2:2d:
10:bb:b8:c5:1f:01:d4:0e:f5:2e:c7:b0:74:4e:24:
22:a8:29:0a:53:17:a1:09:63:6a:d5:5f:77:02:a2:
02:c7:18:1d:fe:f4:f8:e9:db:63:b2:02:85:3d:8f:
fd:82:cc:7c:6b:95:f9:75:c8:c9:5c:36:30:ff:9a:
86:e0:2e:20:f5:3d:1b:6f:fb:7a:f1:ee:6e:2c:3f:
8e:da:07:2e:05:5c:11:d4:7d:22:24:9d:b9:01:a0:
ee:58:b6:15:39:cd:32:db:f5:ee:99:35:0a:34:62:
5c:db:1c:7f:76:e1:6f:7c:cf:a5:15:f9:e1:9f:c7:
7f:ba:6a:ad:fd:3d:f5:4f:90:2e:48:10:46:f0:88:
8d:0b:17:73:da:61:12:33:17:3a:dc:ca:b8:3b:07:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:EC:EB:2F:22:D0:8A:9A:69:82:39:44:6C:08:32:C2:24:06:5A
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131352e3137382e3132372e302f32342d3234203d3e20313337333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:36:46:5d:42:02:c4:4f:9c:4d:b0:45:20:e2:43:6e:d5:da:
ca:48:5a:e2:93:fe:2c:4a:57:5b:37:9d:29:df:f0:94:74:13:
82:e1:00:1d:b1:3a:f5:b1:5c:cd:f5:f5:28:ed:f2:03:a5:8a:
67:9c:8d:8c:3b:d5:1a:0e:a0:73:4d:99:8e:1b:95:b3:0d:b9:
d4:27:e8:1e:77:fa:1a:97:1f:f5:de:8d:eb:01:9e:d5:b4:d9:
a5:2d:c3:3d:98:6f:27:42:bb:9c:a0:ca:93:67:2a:53:14:f3:
8c:30:8d:b4:a7:8f:9a:92:de:ee:59:78:96:9d:9c:21:ed:e3:
fa:80:c7:b2:29:59:18:5a:74:c1:48:96:5b:2e:54:fd:07:2b:
f8:46:8a:df:22:e5:64:71:ed:14:b8:5a:8a:96:13:5b:26:1b:
db:88:73:c3:b4:5b:07:ac:3e:cb:b0:7e:70:a9:96:35:c6:08:
19:99:98:24:ec:53:d7:7f:4a:be:68:79:9f:d8:a0:ec:ac:ca:
67:18:9a:73:e7:9b:59:2a:1a:25:69:f1:14:fe:dc:36:62:cc:
c6:b1:a3:47:f6:58:8d:85:59:07:73:6c:2c:3a:b1:bc:05:a5:
d0:ac:6a:f6:32:12:56:c4:64:77:01:dc:64:84:5a:7d:7a:97:
4c:08:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:53 2025 by rpki-client