Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa
File: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (raw, json)
Hash identifier: CBQ7BcTAX1WXp7Ylcc4yi/0Cf14WakzZ7YKG6S9yjVU=
Subject key identifier: 6F:4E:CC:F1:9E:29:41:69:9D:86:51:42:AF:76:F0:A9:AB:4B:81:55
Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3
Certificate serial: 1081D326C42B24964ACB7525027E619E671FFD47
Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa
Signing time: Sat 17 Aug 2024 05:16:47 +0000
ROA not before: Sat 17 Aug 2024 05:11:47 +0000
ROA not after: Sat 16 Aug 2025 05:16:47 +0000
asID: 153096
IP address blocks: 160.25.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:81:d3:26:c4:2b:24:96:4a:cb:75:25:02:7e:61:9e:67:1f:fd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3
Validity
Not Before: Aug 17 05:11:47 2024 GMT
Not After : Aug 16 05:16:47 2025 GMT
Subject: CN=6F4ECCF19E2941699D865142AF76F0A9AB4B8155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:a5:4c:9b:ec:b9:c9:da:c9:ce:8f:04:0f:
2d:82:2d:56:f9:a1:a0:90:d2:f6:10:5b:d3:65:b2:
1f:66:8e:64:38:5c:63:d1:3d:b1:21:26:9c:26:11:
39:e0:3c:72:e5:0e:10:1e:21:44:d6:f7:28:00:e8:
b2:e1:dc:16:a2:90:55:0c:08:bc:ec:9f:93:6c:68:
1e:ad:39:e3:d5:4f:8e:85:9d:41:02:85:ad:0f:f6:
cd:cf:9d:a1:a3:9a:2b:50:85:3f:6a:1a:0c:7a:ed:
35:95:da:03:1d:55:34:81:1d:d5:69:16:ba:ed:33:
79:4b:a2:da:d7:33:70:bc:18:4e:d5:8e:f0:8f:63:
83:ee:3f:ef:f4:52:28:8c:ed:00:06:14:27:27:7d:
8f:6d:7a:b7:9f:ae:10:18:de:44:30:76:2f:7b:62:
28:03:39:7f:89:7c:ed:bb:71:e1:60:45:73:13:86:
46:03:8a:d7:20:a3:14:d7:3c:d2:18:d6:4f:c3:7f:
21:62:46:5b:f4:14:b6:71:42:e9:b3:69:37:70:a2:
5b:61:7b:89:19:a0:50:e3:5c:3c:14:12:e4:62:a3:
6c:e7:79:6b:6b:d8:9a:10:9e:c5:f6:f0:cb:c4:9b:
ac:0b:d4:aa:84:23:53:06:99:8b:53:1a:d3:50:64:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4E:CC:F1:9E:29:41:69:9D:86:51:42:AF:76:F0:A9:AB:4B:81:55
X509v3 Authority Key Identifier:
keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.119.0/24
Signature Algorithm: sha256WithRSAEncryption
61:28:ac:5e:65:70:73:68:b6:eb:9f:49:54:98:47:56:b3:c2:
14:f7:d1:aa:dd:84:a9:70:29:2b:70:dd:b9:3f:c2:6f:88:01:
be:03:bf:ff:8b:6f:cb:35:8b:f2:5c:9f:51:e9:a1:a6:b8:73:
68:36:cd:d2:3f:90:e3:59:84:8f:17:c0:07:04:27:8c:38:97:
bb:6c:46:60:dc:79:d9:5b:15:7e:32:75:59:e2:fb:2e:21:e9:
e9:de:e4:49:1f:94:88:18:c5:13:93:bf:27:ea:5d:4f:7d:48:
7c:be:0e:a6:d5:04:fa:a0:16:fc:30:a5:2a:31:c1:55:1f:8b:
72:85:da:58:6e:e0:1e:fb:e0:24:37:3b:d7:b5:03:45:b7:d2:
be:b9:3b:dd:6b:e4:4f:df:d0:1c:33:42:67:7a:78:d9:53:45:
df:19:43:76:c3:43:c1:cd:c9:cb:e0:a0:7e:5d:81:15:fa:36:
d3:c7:c2:71:9e:f3:ab:e2:8b:ea:0d:bb:da:79:3f:1d:99:82:
89:b3:74:99:62:38:f4:f6:be:33:02:8b:a2:00:6f:d9:b2:c9:
42:fc:64:2f:62:99:0f:f5:cd:8a:e3:92:19:16:be:21:aa:de:
77:56:c0:e3:48:fb:9b:2e:ac:04:52:5c:a4:c9:0f:b7:ca:5a:
c0:4f:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:25:07 2025 by rpki-client