Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa
File: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier: ly8n481+Yx6O5KGuaN3HRYfsgFCFF9rGxBWRU5jAipc=
Subject key identifier: 23:E5:7D:77:ED:FF:1E:B9:F6:A9:93:D0:FE:4C:5D:76:82:71:76:BC
Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial: 61EA2D5038CE83E19DE43F6492DB19AD8461A547
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa
Signing time: Wed 01 May 2024 17:00:02 +0000
ROA not before: Wed 01 May 2024 16:55:02 +0000
ROA not after: Wed 30 Apr 2025 17:00:02 +0000
asID: 58381
IP address blocks: 163.53.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ea:2d:50:38:ce:83:e1:9d:e4:3f:64:92:db:19:ad:84:61:a5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Validity
Not Before: May 1 16:55:02 2024 GMT
Not After : Apr 30 17:00:02 2025 GMT
Subject: CN=23E57D77EDFF1EB9F6A993D0FE4C5D76827176BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:61:61:61:11:78:9f:d5:b0:3c:7f:f8:d4:4e:
e4:c1:21:a8:82:8a:18:b9:c6:56:ef:07:54:89:ea:
1e:e9:3f:fb:1a:21:d2:a9:76:c7:f4:64:fd:95:70:
d1:ed:95:bc:89:00:be:4d:92:49:38:3b:49:77:3c:
1c:29:e1:e9:ac:fa:38:66:99:13:5f:60:62:7a:54:
75:16:65:0c:1f:1e:94:57:e0:74:a2:79:5b:b4:95:
38:0d:91:fb:2c:e3:e4:f6:1a:ea:24:0b:48:88:e2:
1a:82:60:80:a3:a9:b2:2c:23:28:56:37:a5:58:4f:
82:6f:d1:be:5a:3f:c6:ce:7e:32:eb:65:c4:56:b1:
e2:13:74:06:79:cf:38:34:03:72:9b:85:70:cf:16:
65:8d:ca:77:a9:83:a8:13:6e:ba:f5:4a:10:57:32:
2b:a9:f6:d1:77:90:88:6e:ab:6c:9b:31:ae:5b:ee:
43:4d:ef:40:a2:48:78:f7:97:52:ce:e4:b5:14:fe:
e8:22:13:78:01:4d:e7:79:30:d1:b4:f4:f3:5a:16:
90:29:d9:fa:43:73:96:e2:ca:5e:fc:f9:3b:da:eb:
af:3c:7f:64:2a:27:ee:f7:d0:07:a6:6d:d4:67:35:
5c:3b:5c:e7:dd:19:ee:1c:56:2f:54:18:f1:df:b4:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E5:7D:77:ED:FF:1E:B9:F6:A9:93:D0:FE:4C:5D:76:82:71:76:BC
X509v3 Authority Key Identifier:
keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.53.193.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:17:f6:55:bb:10:b5:ed:5e:d1:01:99:d7:2e:f2:67:b0:7c:
84:52:a7:80:39:ad:5d:8c:d9:47:43:95:99:62:0b:17:6f:92:
51:4c:50:2b:38:6d:87:43:7f:9a:5e:22:12:85:a8:4d:b7:02:
03:b3:cf:29:da:f5:f5:0d:44:4c:0a:93:3a:68:1d:85:a0:24:
87:01:15:c5:31:5d:e5:5f:5e:ea:7b:b6:46:fb:84:51:b3:d4:
5a:e6:37:ca:01:4d:5f:c1:de:e9:85:d0:fe:5b:c0:9b:ab:a5:
8b:0e:a3:74:7b:04:69:9a:9f:0f:cb:8b:b6:94:2c:f3:b0:a3:
c4:db:bb:49:ba:d1:75:1d:7a:e2:a9:11:92:5d:5d:f3:7b:56:
ab:10:15:e3:f2:48:92:81:9c:31:fa:61:cb:b1:d2:8c:16:22:
ca:ac:59:af:ad:de:64:b3:47:a2:40:75:06:07:59:4a:c1:5d:
d0:05:e3:70:81:12:04:b7:57:2a:f7:4a:40:02:19:78:06:21:
d9:ce:0e:a7:fc:40:1d:8b:9e:a4:02:da:48:54:db:2b:03:a1:
64:21:32:e0:bd:e9:e2:95:72:93:b3:f5:75:a2:c3:5f:5e:8e:
3f:9d:3e:37:6d:0c:f7:04:0a:6b:ed:5e:86:b0:06:92:d6:af:
a3:45:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:23:25 2025 by rpki-client