Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313439373138.roa
File: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (raw, json)
Hash identifier: FdD4yXGMsks45ng3y/QGMQ3cyOtlAzR9+CDLALaQ1/8=
Subject key identifier: 00:DB:8B:C0:D2:4E:6B:A9:0C:B5:44:F1:FA:E9:38:13:61:32:42:2A
Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210
Certificate serial: 7D14CF41555C87D993956A2474040B5252CB00B3
Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313439373138.roa
Signing time: Tue 24 Dec 2024 12:42:10 +0000
ROA not before: Tue 24 Dec 2024 12:37:10 +0000
ROA not after: Tue 23 Dec 2025 12:42:10 +0000
asID: 149718
IP address blocks: 160.22.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:14:cf:41:55:5c:87:d9:93:95:6a:24:74:04:0b:52:52:cb:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210
Validity
Not Before: Dec 24 12:37:10 2024 GMT
Not After : Dec 23 12:42:10 2025 GMT
Subject: CN=00DB8BC0D24E6BA90CB544F1FAE938136132422A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:7c:50:c7:75:fc:d7:6c:3a:6a:89:13:ab:
0d:ce:6a:43:b7:5f:74:a1:22:ef:31:89:6a:9e:71:
29:b1:60:6f:8e:d0:e0:88:02:22:fa:c8:11:55:9c:
6e:30:1e:49:9c:ce:2f:2a:58:92:3c:e4:90:3a:3e:
a5:03:5d:73:aa:57:54:a9:20:ee:f6:58:69:b6:11:
d4:72:b6:c5:19:33:8d:c9:c9:75:ad:af:7b:00:02:
b4:38:b7:44:80:27:c0:66:d2:a9:f3:ea:bf:b3:aa:
4c:79:0b:96:71:96:e9:e3:35:a4:56:d9:05:a5:58:
33:81:da:5d:87:8c:5f:70:a6:6b:a0:52:9d:9f:55:
e8:f7:4a:bb:46:83:ac:ec:c5:3b:18:dc:ae:30:a1:
0e:13:77:29:52:21:a6:0f:17:32:ab:93:c5:3e:93:
cc:ab:80:96:d6:14:1c:da:20:29:f6:a3:dc:57:dc:
99:ff:cc:5f:67:d9:2c:6c:bb:bb:e6:5d:18:ff:76:
14:21:41:37:e1:a3:32:5d:dc:7e:82:41:e1:e7:23:
b3:50:f6:b1:13:26:d0:14:4d:ca:f2:0c:a1:7f:61:
a7:69:fe:9d:e5:ea:3c:0b:b2:db:2a:94:76:50:d6:
9c:25:cf:6f:8c:22:3e:f4:27:8a:82:6d:c1:db:40:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:8B:C0:D2:4E:6B:A9:0C:B5:44:F1:FA:E9:38:13:61:32:42:2A
X509v3 Authority Key Identifier:
keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313439373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.63.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b8:b1:ab:23:e8:d3:73:50:e3:76:3f:47:0e:0e:6a:6e:fd:
5d:a4:bf:ca:df:ba:68:7e:fb:7c:60:63:b9:b4:c1:1a:34:c7:
71:7f:08:49:47:30:b3:03:d3:f1:62:31:5b:22:3f:d1:4e:7f:
6c:8a:a3:08:72:3e:c1:4a:c6:16:ae:0b:7f:7e:c2:3a:b4:e2:
cc:2a:89:ab:65:b0:ff:69:64:c1:08:fa:ab:e5:7e:8d:bd:0f:
69:8d:e1:e3:fb:41:00:dc:21:f9:af:9b:c0:81:70:cc:ec:7e:
85:fc:86:4a:5e:68:9f:43:9d:77:58:3b:3f:89:7b:70:84:91:
d1:83:9e:16:88:4a:ed:e9:88:ec:13:08:11:b6:26:58:eb:a9:
79:f0:65:f8:f5:36:cc:db:5e:be:06:ee:7e:88:aa:0b:ed:57:
30:78:f7:95:21:bf:22:3c:f8:0e:3b:c6:00:ec:e0:1a:bc:a8:
34:84:36:e8:32:67:e4:3d:ec:39:dc:7a:f3:cf:e0:63:c1:61:
df:01:34:a5:6d:8c:1a:da:e5:55:f2:31:15:a8:15:d7:ed:3d:
90:dc:ee:fd:f3:0f:e2:e7:1d:8c:86:34:9e:47:5a:12:b6:53:
6a:67:85:cb:c0:45:e6:fa:90:c1:22:d3:34:a6:fc:b0:23:4b:
5a:88:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:27 2025 by rpki-client