Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa
File: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (raw, json)
Hash identifier: fko1jOuBFtLKmds09e8hEEDpVGQwTcV/tpYHBgYWWus=
Subject key identifier: E9:E7:C9:ED:B1:BB:67:5C:05:19:8C:63:1B:10:B1:38:B5:80:6F:5C
Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236
Certificate serial: 3331A0FB7E2357ED1903A5B3C3469BB601978BD6
Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa
Signing time: Fri 09 Aug 2024 11:31:15 +0000
ROA not before: Fri 09 Aug 2024 11:26:15 +0000
ROA not after: Fri 08 Aug 2025 11:31:15 +0000
asID: 153087
IP address blocks: 160.25.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:31:a0:fb:7e:23:57:ed:19:03:a5:b3:c3:46:9b:b6:01:97:8b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236
Validity
Not Before: Aug 9 11:26:15 2024 GMT
Not After : Aug 8 11:31:15 2025 GMT
Subject: CN=E9E7C9EDB1BB675C05198C631B10B138B5806F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:3d:1b:2e:34:ea:ae:05:a4:9b:08:bd:f6:
75:af:7f:f2:77:1e:2d:60:8e:ef:ad:0f:99:5a:a4:
fb:0b:4e:b9:f4:5d:cc:36:74:93:56:2e:ea:fb:13:
51:42:5a:64:71:09:b3:77:1f:39:6d:18:11:ff:2b:
6a:97:36:b7:4d:0f:2d:23:49:15:a4:0e:4a:ee:90:
32:14:c9:d4:39:9c:b7:e2:ec:99:30:aa:60:cf:f5:
e8:b0:93:e5:6d:85:ee:56:5f:b7:b2:c3:82:b7:ce:
05:8c:5b:1e:71:79:b1:78:8d:d5:f9:3a:d1:69:04:
81:ab:f7:75:2e:9d:50:01:55:0a:20:c7:9f:71:e4:
40:c9:c9:4b:63:20:6c:01:e7:e0:15:99:cb:77:f0:
9a:a0:96:84:60:63:3e:d0:79:76:e9:4b:59:b7:c8:
24:60:ae:47:1d:fc:73:20:5e:b6:5c:57:d8:55:18:
fd:55:9b:0b:c8:30:d9:84:2f:69:c0:05:40:97:83:
72:06:f1:28:46:af:23:85:be:e1:bd:66:fb:f6:e1:
44:9d:41:09:55:6f:a7:81:d4:83:c3:c3:61:eb:37:
d2:a1:3c:23:c5:22:22:5c:53:3b:be:d6:a6:82:01:
c9:18:c7:b6:b0:22:56:58:50:ba:0f:84:b3:56:b1:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E7:C9:ED:B1:BB:67:5C:05:19:8C:63:1B:10:B1:38:B5:80:6F:5C
X509v3 Authority Key Identifier:
keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:34:b0:5d:51:9a:c0:ff:99:40:44:4e:0f:7e:24:d1:e8:ba:
3c:4f:48:34:46:3f:fe:83:ac:7f:cf:10:9c:4c:62:e6:d6:10:
55:5e:4b:e5:3b:6c:ab:2e:8e:7f:92:82:fb:5b:b0:62:90:f6:
90:ce:ef:20:de:e7:e4:fe:0b:22:c8:5d:d2:f9:98:10:f7:d7:
73:68:81:54:1f:ff:fc:3c:88:60:b2:38:90:b9:66:cb:67:d2:
9f:de:59:2c:f8:25:2f:ac:02:50:5f:c0:7e:78:8c:a6:4e:be:
23:88:b4:86:21:7a:28:f9:93:15:71:7a:69:30:8c:7c:82:63:
82:a0:7d:13:39:da:2e:41:df:d1:a3:78:ac:d6:e8:73:ed:01:
c3:63:8d:e4:28:66:a1:9a:0a:31:26:96:f9:b7:53:e2:d5:41:
ff:5e:27:f0:2e:30:03:8a:6a:66:13:4d:c1:1a:df:76:ee:53:
7d:6c:9f:eb:1c:60:8f:c3:a2:2f:9c:c8:9c:18:dd:e2:e0:d6:
a4:ec:49:29:c9:f1:a3:78:e5:9a:c4:66:09:c3:d4:64:7f:cd:
58:8b:a6:10:78:1a:b0:d8:30:57:6e:e6:7c:45:3a:e8:86:11:
51:49:6d:9c:d3:5b:40:b0:d2:92:f5:d2:37:a2:1f:58:4e:58:
ea:1a:d0:0e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMzGg+34jV+0ZA6Wzw0abtgGXi9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD
Nzk2NTIzNjAeFw0yNDA4MDkxMTI2MTVaFw0yNTA4MDgxMTMxMTVaMDMxMTAvBgNV
BAMTKEU5RTdDOUVEQjFCQjY3NUMwNTE5OEM2MzFCMTBCMTM4QjU4MDZGNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bz0bLjTqrgWkmwi99nWvf/J3
Hi1gju+tD5lapPsLTrn0Xcw2dJNWLur7E1FCWmRxCbN3HzltGBH/K2qXNrdNDy0j
SRWkDkrukDIUydQ5nLfi7JkwqmDP9eiwk+Vthe5WX7eyw4K3zgWMWx5xebF4jdX5
OtFpBIGr93UunVABVQogx59x5EDJyUtjIGwB5+AVmct38JqgloRgYz7QeXbpS1m3
yCRgrkcd/HMgXrZcV9hVGP1VmwvIMNmEL2nABUCXg3IG8ShGryOFvuG9Zvv24USd
QQlVb6eB1IPDw2HrN9KhPCPFIiJcUzu+1qaCAckYx7awIlZYULoPhLNWsQONAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6efJ7bG7Z1wFGYxjGxCxOLWAb1wwHwYDVR0j
BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz
RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2
NTIzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05
Zjk2LTYzZDM3MjAzMTFkZS8wLzMxMzYzMDJlMzIzNTJlMzIzMjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBneMA0GCSqG
SIb3DQEBCwUAA4IBAQAaNLBdUZrA/5lARE4PfiTR6Lo8T0g0Rj/+g6x/zxCcTGLm
1hBVXkvlO2yrLo5/koL7W7BikPaQzu8g3ufk/gsiyF3S+ZgQ99dzaIFUH//8PIhg
sjiQuWbLZ9Kf3lks+CUvrAJQX8B+eIymTr4jiLSGIXoo+ZMVcXppMIx8gmOCoH0T
OdouQd/Ro3is1uhz7QHDY43kKGahmgoxJpb5t1Pi1UH/XifwLjADimpmE03BGt92
7lN9bJ/rHGCPw6IvnMicGN3i4Nak7EkpyfGjeOWaxGYJw9Rkf81Yi6YQeBqw2DBX
buZ8RTrohhFRSW2c01tAsNKS9dI3oh9YTljqGtAO
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:32 2025 by rpki-client