Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa
File: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (raw, json)
Hash identifier: lnr1eFTyKT3/IcClpnjgEYV6r1LeIKEtWF2eCPYH2u8=
Subject key identifier: 28:D7:11:B1:44:99:FA:F2:F1:74:3D:41:89:59:91:87:02:01:CF:BF
Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5
Certificate serial: 2EAFF250A2B2B9582E48623FD66E00F08DCE8FE3
Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa
Signing time: Thu 04 Jul 2024 18:15:01 +0000
ROA not before: Thu 04 Jul 2024 18:10:01 +0000
ROA not after: Thu 03 Jul 2025 18:15:01 +0000
asID: 152825
IP address blocks: 160.22.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:af:f2:50:a2:b2:b9:58:2e:48:62:3f:d6:6e:00:f0:8d:ce:8f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5
Validity
Not Before: Jul 4 18:10:01 2024 GMT
Not After : Jul 3 18:15:01 2025 GMT
Subject: CN=28D711B14499FAF2F1743D41895991870201CFBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:9e:3f:84:e3:84:35:3c:29:38:b2:1d:67:
e3:ec:de:ba:9a:8b:89:d9:27:c3:b6:eb:b2:6a:1b:
f0:6f:5e:95:b3:41:f5:7d:19:2e:9e:a2:39:0b:99:
0d:d5:ed:a7:a9:44:33:9f:62:05:ed:9b:aa:d5:59:
15:c8:47:c3:b3:94:bc:45:34:b9:03:13:d8:9e:1f:
3c:15:14:c5:61:63:47:24:ea:e4:15:5c:4d:0d:e4:
8a:7b:a0:54:73:d9:b7:11:a8:c1:f4:b2:83:30:73:
e4:1f:3b:71:3d:3f:82:e1:2b:61:df:1d:fd:de:7b:
96:44:38:11:3a:24:4f:c5:0b:d8:42:62:dc:ff:2c:
18:be:2b:fa:ae:55:9c:5a:3f:df:26:c5:99:66:ec:
0d:4a:18:55:d4:03:26:46:ff:77:75:32:2b:4a:26:
c0:95:48:9b:dc:a7:27:8e:ea:cb:c7:6c:1a:da:f6:
05:6e:7d:10:a2:09:11:2a:d4:14:a9:83:9c:16:96:
a1:27:98:86:16:96:20:a3:4d:95:1a:6e:67:19:11:
83:9e:28:b9:97:cf:ca:3a:0f:ed:31:cb:da:18:b1:
45:2b:d9:8d:d2:c5:b0:6e:75:8e:71:dd:0e:c6:5b:
07:c6:26:7f:2e:e4:46:aa:f0:b9:bc:43:60:f0:a0:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D7:11:B1:44:99:FA:F2:F1:74:3D:41:89:59:91:87:02:01:CF:BF
X509v3 Authority Key Identifier:
keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:be:39:8b:86:97:27:67:f7:47:d0:04:74:0e:94:9b:ed:47:
c5:5d:90:c7:c0:37:c6:ba:78:f7:c2:8b:6f:29:e0:db:03:da:
ba:70:08:98:ab:3b:db:ec:e4:33:d3:4e:3e:8e:e6:68:fc:6c:
62:62:c4:7c:df:ee:f5:e4:92:d4:53:67:2f:ef:de:66:ae:c1:
23:d8:c9:0d:da:bc:c3:d1:e4:1c:ec:c5:a0:5f:16:4f:5f:9a:
d8:f8:2b:fe:c5:b5:89:5b:d6:06:36:cd:cb:ef:9d:38:d0:10:
7f:ce:83:ca:13:d3:80:b9:fd:80:94:09:e7:69:f6:ee:38:8c:
9d:de:ae:37:3d:b7:b1:b0:c8:f1:1c:c6:0b:c2:bf:fe:36:d5:
28:66:2e:d1:d3:35:ec:e0:69:0e:55:8e:21:9b:3e:ca:61:1c:
5c:95:c2:d8:f7:d9:f1:1b:01:13:0e:ae:69:ae:17:b9:e9:e2:
46:8e:5e:fa:97:4f:3e:12:2b:3d:57:ee:62:a3:ef:50:67:53:
5d:c7:e0:dc:7d:5b:7d:89:9b:30:2d:65:3e:13:ee:78:61:b4:
ae:a5:cb:c8:ce:3b:97:2d:49:77:db:ee:33:67:d3:d0:e0:2c:
b4:4e:8a:2f:f7:90:53:82:13:af:68:4d:4c:d0:8e:b6:5e:c7:
c8:97:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:29 2025 by rpki-client