Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
File: 3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier: jq1wxk+4SSSZEvUGemWEU13KpFHNZQbbP2s96wFMsA0=
Subject key identifier: A4:E9:70:52:93:82:67:CA:C1:0F:16:45:82:90:F1:D3:9A:BC:5A:45
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 3C50E4B51F6A2FA53A52EF8790F3F479367BF427
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
Signing time: Tue 26 Mar 2024 03:43:15 +0000
ROA not before: Tue 26 Mar 2024 03:38:15 +0000
ROA not after: Tue 25 Mar 2025 03:43:15 +0000
asID: 45298
IP address blocks: 182.16.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:50:e4:b5:1f:6a:2f:a5:3a:52:ef:87:90:f3:f4:79:36:7b:f4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Mar 26 03:38:15 2024 GMT
Not After : Mar 25 03:43:15 2025 GMT
Subject: CN=A4E97052938267CAC10F16458290F1D39ABC5A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:fb:bc:3f:11:c6:9f:1f:b0:58:91:5e:b5:
1f:6d:fc:e5:d1:85:1c:6d:f2:0d:f6:70:56:6a:48:
83:81:61:43:dd:91:bc:e5:56:3d:e6:24:68:91:d3:
dd:24:6c:9a:be:e1:d8:47:2a:c7:55:1f:54:37:da:
94:a5:6f:af:c0:84:eb:f7:a5:57:fe:73:0c:5b:40:
4d:bf:39:be:28:5a:8c:2d:27:1d:c2:a8:fc:1a:01:
e5:bf:7a:ec:4e:cf:84:3a:e9:51:96:be:77:c2:b2:
19:9f:20:d3:f6:fd:f9:5c:9a:47:71:eb:47:d5:37:
77:ea:4f:f4:56:d2:c1:29:64:2c:e1:8c:a8:36:19:
56:7b:d1:a5:22:11:18:b2:1a:86:86:2b:9b:18:d0:
1f:97:14:56:cb:76:f5:26:01:e7:d2:f7:d3:3a:d6:
f2:fc:b8:4a:51:4f:4f:ff:f4:26:10:a5:10:c1:d2:
ee:4b:31:47:f3:e9:b9:75:31:e0:d9:1c:d0:ab:c2:
d7:1f:2c:57:70:c2:89:40:75:02:70:8f:94:96:c0:
d2:0b:bc:d5:0a:fc:8b:86:6c:0d:1c:89:bf:34:32:
b1:11:51:f3:b3:c8:69:e7:68:72:36:08:2e:d1:62:
63:6a:86:69:ce:9b:91:e2:19:f8:4c:42:c9:de:8b:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E9:70:52:93:82:67:CA:C1:0F:16:45:82:90:F1:D3:9A:BC:5A:45
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.16.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:51:f9:16:23:c0:6f:f3:eb:7a:80:8d:42:d0:4d:99:52:ca:
e9:9c:c2:47:86:17:df:b7:86:28:b0:53:dd:35:8d:74:05:81:
19:c3:8b:27:e3:d9:fd:bf:ad:15:88:6f:ed:a1:87:f0:e6:75:
dc:39:dc:40:68:5c:1f:32:d9:d9:10:ee:81:6c:22:ef:c5:0e:
82:bc:64:ae:d4:a3:72:8e:53:26:c1:98:91:06:20:49:2f:af:
ae:d3:b1:56:f8:38:28:3a:16:75:5b:dc:4c:96:4a:3e:ec:be:
f3:b9:1f:92:3e:33:02:4c:8e:c1:bc:d8:47:1f:a9:bb:78:b4:
73:99:5e:bf:10:ad:e5:4b:1e:46:a7:14:1c:a1:ed:8d:84:9b:
ce:13:39:51:e0:72:fa:9b:67:78:18:14:dd:51:5c:0c:5d:cf:
a0:9e:89:79:73:10:86:52:62:4d:34:f4:e7:d5:aa:55:06:d6:
82:2a:85:97:f1:a9:fc:8e:3f:e3:8d:dc:22:3e:af:a3:d9:da:
4c:66:2c:90:96:19:c2:0f:a0:df:32:ec:7c:1d:8b:62:62:1b:
80:10:be:39:7a:54:b8:f6:7b:ef:eb:ce:a6:25:60:0d:ee:e3:
6f:30:03:4b:d7:88:f3:5b:e1:f0:8c:3d:54:42:45:03:df:71:
81:93:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:35:04 2025 by rpki-client