Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37302e302f32342d3234203d3e203436303633.roa
File: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier: 52rz8OVXlsR9PhF7qpvjq+LgVmTdcv6Xc2HRbxBYnZs=
Subject key identifier: 84:EF:09:6C:CC:84:07:47:D5:06:BA:22:7C:95:0F:F0:2A:6E:08:E0
Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Certificate serial: 790425D99B7F3E42A04201FF46BE758FD7FA2D90
Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37302e302f32342d3234203d3e203436303633.roa
Signing time: Fri 04 Oct 2024 12:02:24 +0000
ROA not before: Fri 04 Oct 2024 11:57:24 +0000
ROA not after: Fri 03 Oct 2025 12:02:24 +0000
asID: 46063
IP address blocks: 27.112.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:04:25:d9:9b:7f:3e:42:a0:42:01:ff:46:be:75:8f:d7:fa:2d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Validity
Not Before: Oct 4 11:57:24 2024 GMT
Not After : Oct 3 12:02:24 2025 GMT
Subject: CN=84EF096CCC840747D506BA227C950FF02A6E08E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:b7:27:3e:87:80:8e:5e:43:59:1c:1c:12:
2b:d6:49:08:2c:f2:b7:bb:3a:82:7e:27:a9:b6:19:
6a:4a:d0:88:74:92:1e:ae:5c:d6:61:bf:05:73:21:
36:66:ba:cf:72:e9:2d:4b:3b:9e:ba:3b:85:98:04:
f9:dd:49:1b:ac:d9:4c:7a:d6:54:c4:8d:30:02:90:
19:f0:e2:21:a7:8b:ff:61:5e:c3:c5:5f:69:c6:f7:
2b:ef:4a:c3:7f:ba:ce:f2:6d:fd:e7:00:82:22:36:
38:63:59:ef:02:78:6c:9d:0a:28:70:ef:8c:77:d8:
fc:aa:93:95:32:ff:94:f1:d5:6a:1d:5a:f4:5f:26:
28:5b:63:02:77:3b:62:0b:f3:38:bc:29:1b:c1:1d:
11:53:93:eb:f7:a4:5f:e4:7c:52:c9:a2:05:82:7c:
40:e3:c9:d0:71:f9:8a:c4:7c:a1:00:75:6b:c8:92:
07:da:7c:d2:b9:df:74:56:8b:98:45:71:2c:65:db:
00:ef:ea:1e:82:4a:c2:48:cc:c0:ac:53:ea:b1:1a:
a4:fe:a1:dd:e6:00:2b:53:44:93:9a:a8:7b:37:98:
e4:bc:cf:45:e1:f7:99:dc:7f:59:97:da:91:9b:38:
e1:54:81:1f:d5:2e:f0:42:2f:9d:6a:7c:f8:ef:f9:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EF:09:6C:CC:84:07:47:D5:06:BA:22:7C:95:0F:F0:2A:6E:08:E0
X509v3 Authority Key Identifier:
keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37302e302f32342d3234203d3e203436303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.70.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ec:0b:cd:fe:76:5f:83:ff:3d:4a:31:95:aa:c0:a7:87:b3:
37:b7:5e:bd:d8:ce:59:de:25:9d:c9:5f:a2:93:a6:11:6e:34:
a4:49:bb:0e:b9:19:b4:d2:3e:7f:d7:d5:14:b8:af:a3:83:0c:
65:25:f9:d0:89:23:27:8f:2a:52:19:0c:c4:3d:d1:62:35:78:
4d:ee:70:70:7e:24:e7:e2:49:7d:16:60:f2:4f:0c:f0:00:1e:
8c:36:b4:fb:13:b2:b3:a7:2d:ec:d7:21:2b:f6:11:16:95:95:
a7:8d:50:98:fd:9c:4b:82:5f:7c:d7:e8:9b:6c:5d:24:10:b6:
15:a8:1d:43:e9:43:5b:cc:fe:1d:b5:85:cf:04:ff:65:12:a7:
2f:2e:c6:8f:53:de:c7:a7:73:fc:c1:b4:d1:ef:4f:e1:e1:4e:
1a:f7:dd:33:c5:1c:d3:ca:12:30:94:be:f2:6d:22:d6:dd:8b:
bd:0f:5f:f0:5d:54:79:b3:bf:f7:f8:da:98:a2:c8:8b:8a:3c:
08:7a:8e:42:a7:75:f5:bb:ce:2b:26:ee:85:16:be:af:a4:65:
17:66:57:38:70:eb:72:b4:c7:7a:0d:ea:c1:0c:be:99:61:a1:
20:26:ef:72:9d:5a:e0:ff:59:5f:c9:29:1a:6f:6e:06:5e:48:
d1:b3:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:13:27 2025 by rpki-client