Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa
File: AS45493.roa (raw, json)
Hash identifier: mb0AgCXbkScEv7HGYPRCGM6VDPWZb0xWmZOIeGOHRDA=
Subject key identifier: 2E:97:ED:3F:2A:5D:9D:F1:F9:3F:B8:66:D7:E4:E8:E9:BE:AA:8D:58
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 17A821C21A0465577B721AC2627D0FDDFEA8A91E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa
Signing time: Tue 24 Dec 2024 10:00:54 +0000
ROA not before: Tue 24 Dec 2024 09:55:54 +0000
ROA not after: Tue 23 Dec 2025 10:00:54 +0000
asID: 45493
IP address blocks: 182.253.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a8:21:c2:1a:04:65:57:7b:72:1a:c2:62:7d:0f:dd:fe:a8:a9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Dec 24 09:55:54 2024 GMT
Not After : Dec 23 10:00:54 2025 GMT
Subject: CN=2E97ED3F2A5D9DF1F93FB866D7E4E8E9BEAA8D58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:28:4b:8f:f7:c3:dc:9e:af:52:53:a2:f2:
77:53:cd:4e:af:2c:45:5f:7d:0f:d7:2a:40:29:0a:
f3:ac:4d:c5:a7:3f:54:ed:3c:ec:2f:6e:e0:c4:86:
8a:4d:96:73:b9:8c:47:31:39:54:dd:d1:98:47:ef:
76:44:e6:21:c1:81:18:21:60:4e:5e:cc:76:67:9f:
6f:b2:9c:62:ec:47:69:c5:df:7d:8e:73:33:27:10:
51:65:58:bf:5a:5b:1e:4c:a3:28:9a:7b:b5:1c:c1:
8e:f1:f6:a1:e7:ee:cc:d4:91:8b:2d:7d:f7:46:06:
ec:bd:61:7c:71:27:0a:fe:f8:9f:1c:bd:b6:30:69:
5d:b8:a1:de:c4:3a:49:ad:4a:cb:1b:7c:b6:ee:5c:
af:1c:8c:0d:1c:0b:22:4d:7c:81:dd:b2:9d:1d:51:
b1:9c:d8:1e:77:58:40:88:ec:8d:61:e7:e3:55:76:
21:c5:4a:d4:d1:12:a3:a8:c0:25:f2:f0:54:b9:22:
88:20:81:e6:e1:f6:61:24:a2:32:a3:c7:f9:20:9b:
81:fe:33:3e:67:46:54:6b:8e:d1:d5:5d:5b:65:9a:
6d:1a:77:1c:c9:a5:9a:16:f3:fd:41:42:92:46:92:
a9:02:09:3a:a8:6d:7b:4f:b0:ec:4b:d5:d8:2d:80:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:97:ED:3F:2A:5D:9D:F1:F9:3F:B8:66:D7:E4:E8:E9:BE:AA:8D:58
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
98:de:2b:5a:06:7a:86:ae:fb:5b:a5:54:72:23:81:86:dd:50:
23:ad:9a:97:cd:3d:47:01:32:a9:6d:a0:5a:eb:12:01:b4:86:
eb:7c:40:e2:0d:5e:bd:ba:7b:62:88:7a:39:5e:28:3c:de:4b:
89:cf:8a:54:ea:c7:6e:63:93:cf:f8:c0:d0:f1:1d:13:36:1f:
66:a2:65:86:0b:ca:bd:a9:d9:8f:83:a3:fa:77:30:22:89:30:
6a:d1:35:68:99:b4:47:a9:91:ff:e4:f8:8c:1d:dc:7f:3e:39:
fc:62:ec:fb:02:b3:ae:9f:1b:f1:cc:b8:1f:81:6f:69:39:3e:
13:bd:9f:d5:ce:a0:5d:cb:02:03:b9:ab:ea:4b:37:34:2e:c4:
a8:c4:27:b0:9a:96:cb:62:85:aa:d4:9f:2a:d0:d5:fc:2d:32:
a3:3d:bb:18:19:8a:2d:bc:02:82:9b:23:cd:fd:01:25:86:86:
05:a4:51:aa:96:9d:5b:fe:f9:f4:3a:f8:b6:d1:c0:f2:a3:d2:
aa:20:d1:c5:a2:cc:ca:85:3a:19:28:64:6b:d4:70:67:bd:f5:
0a:e4:f1:e7:02:ca:4a:7b:8e:8b:09:f9:f2:f6:49:e6:eb:28:
19:96:fc:dd:82:b6:78:59:b6:f5:65:b1:b3:3d:16:a8:f5:4a:
6f:16:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:22:58 2025 by rpki-client