Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa
File: 3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier: Y3iOu59DjiG6hubjKhwdA+TVsAixNoGIN07A6ZmdHJE=
Subject key identifier: 47:3B:BB:C7:79:CD:8F:30:FC:CA:FA:D1:63:16:4E:B8:CC:DA:AD:06
Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF
Certificate serial: 36F51D87826A6066A35B745DE79F57D431B50D2C
Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa
Signing time: Sun 11 Aug 2024 11:00:05 +0000
ROA not before: Sun 11 Aug 2024 10:55:05 +0000
ROA not after: Sun 10 Aug 2025 11:00:05 +0000
asID: 63859
IP address blocks: 158.140.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f5:1d:87:82:6a:60:66:a3:5b:74:5d:e7:9f:57:d4:31:b5:0d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF
Validity
Not Before: Aug 11 10:55:05 2024 GMT
Not After : Aug 10 11:00:05 2025 GMT
Subject: CN=473BBBC779CD8F30FCCAFAD163164EB8CCDAAD06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:21:34:97:76:a3:b6:4b:db:ab:d1:b5:96:
ef:ab:8e:0f:24:1a:40:f3:8d:50:cc:ca:df:2f:ee:
9f:db:0b:70:5f:c3:ae:b5:4b:5f:19:7e:c7:9b:05:
b1:5a:e0:1a:40:ca:78:8c:49:54:68:bf:21:07:c6:
15:e0:c1:b1:c6:bc:c7:bf:c5:ab:b1:a4:b4:2e:84:
03:32:e8:f1:ca:3b:9d:0e:df:4a:43:56:15:dc:d1:
24:a5:4b:f0:6f:08:3d:de:92:7b:25:08:f6:af:96:
ce:49:07:2e:0b:e2:19:81:07:95:83:b2:59:3f:fa:
3f:ce:0b:65:7b:86:f6:29:bb:b3:aa:ee:78:34:04:
2b:8f:7f:75:2c:9b:92:6b:3d:5a:d1:43:cf:a2:0a:
28:45:f2:31:42:db:25:87:1c:56:eb:63:8f:5b:fd:
66:30:f8:68:06:aa:c9:d2:00:86:39:cb:8e:61:05:
f9:19:73:97:05:cf:c1:e1:c2:cb:87:af:80:06:83:
b7:44:c9:60:da:bd:6c:eb:53:8b:49:cb:30:27:88:
ef:73:d9:a1:b0:21:4a:62:8d:0f:25:d2:dc:24:e6:
0e:ef:1d:5d:13:a6:8c:8e:69:96:d3:df:66:ed:c2:
93:3e:57:f5:c2:f4:8c:e5:c5:44:1d:f3:f4:f1:e5:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3B:BB:C7:79:CD:8F:30:FC:CA:FA:D1:63:16:4E:B8:CC:DA:AD:06
X509v3 Authority Key Identifier:
keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.140.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:12:5c:1b:19:99:8b:c4:9e:ea:3e:05:4a:8a:03:52:d3:23:
af:a4:c3:0d:9a:7d:bb:9e:30:69:b8:ed:47:66:ad:35:82:2f:
c3:6a:0e:de:63:bf:ed:2e:a6:33:f2:c4:8a:39:48:0e:ac:1e:
ee:6a:f1:76:8a:83:d1:2a:95:5e:a8:8c:7d:36:47:01:68:ea:
be:82:95:0e:56:a3:3c:f8:bb:b9:2d:a3:09:86:91:98:34:b1:
74:c2:cf:68:2d:74:5b:d1:8b:99:c9:ed:1d:a5:7e:94:11:b6:
7b:91:2d:6c:a8:8b:9a:a2:c8:be:52:b9:b0:c8:44:95:96:b9:
09:78:42:a4:66:d4:e6:20:95:a8:ca:c5:ac:f1:1a:23:8f:79:
28:11:92:35:83:72:61:f4:e0:32:2b:52:ec:5d:81:19:c2:e7:
47:a9:6e:33:77:65:95:16:02:c8:71:aa:b8:e5:b1:78:9e:5a:
5e:5e:ba:80:cd:56:ff:da:b1:3c:1d:40:6d:5d:65:a0:53:fa:
bf:fc:20:4f:b3:95:6b:8c:58:b7:9a:b6:b0:48:1e:e5:0a:94:
04:da:56:24:81:9d:6c:b1:bb:5f:30:22:53:3b:a9:aa:99:db:
ee:ab:01:dc:ac:fd:d3:6d:54:c4:34:13:86:5d:fd:ef:7c:22:
71:43:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:27:50 2025 by rpki-client