Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234352e302f32342d3234203d3e203435323938.roa
File: 3138322e31362e3234352e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier: hxEkAcIpN/fq10prPJNHze/bl0yKNTTzxoDLYi2yUq4=
Subject key identifier: F7:6C:0A:48:D8:EA:2D:3F:D8:5D:60:F8:78:8B:0D:F6:37:9C:16:55
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 748B52BE5E4AC1ABD01376E7D3C16FA1ADEEF077
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234352e302f32342d3234203d3e203435323938.roa
Signing time: Tue 26 Mar 2024 03:33:43 +0000
ROA not before: Tue 26 Mar 2024 03:28:43 +0000
ROA not after: Tue 25 Mar 2025 03:33:43 +0000
asID: 45298
IP address blocks: 182.16.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:8b:52:be:5e:4a:c1:ab:d0:13:76:e7:d3:c1:6f:a1:ad:ee:f0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Mar 26 03:28:43 2024 GMT
Not After : Mar 25 03:33:43 2025 GMT
Subject: CN=F76C0A48D8EA2D3FD85D60F8788B0DF6379C1655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:c8:bd:01:4a:87:fb:cb:c5:c8:18:79:c5:
01:87:ad:d3:af:1d:e2:3e:c6:cb:d5:fc:a1:e5:f0:
ff:c9:43:e2:b2:0c:82:e5:64:02:6d:d1:69:15:98:
a5:a5:0f:dd:39:62:95:42:f2:57:72:97:ff:68:3c:
1e:4e:a7:f4:a0:ea:1e:bd:d3:0b:c4:ab:12:80:0c:
50:e6:41:04:e1:c7:51:09:81:c2:99:66:d6:6d:32:
c3:02:4f:c6:0f:c9:50:b4:d2:fe:5a:44:aa:10:9a:
b6:d3:40:c7:8b:98:2e:4a:5d:2e:b0:66:59:a1:a1:
bf:62:7a:ad:aa:bc:57:fc:ac:f3:d4:7c:16:ac:68:
dd:67:59:d5:80:61:91:35:fd:00:a7:e1:6b:4c:00:
fb:92:97:8c:48:be:8c:b4:83:b2:61:51:28:6c:34:
39:fe:2e:b0:69:fb:61:0a:14:8d:dc:0a:6a:7f:fe:
60:9c:f3:99:ec:af:13:6d:07:fd:3e:a0:3d:69:8e:
5c:0a:0e:bf:37:50:c4:4e:7c:66:47:3d:43:a7:3d:
77:71:7c:39:74:bc:55:62:39:c5:d2:e0:d1:ef:58:
6b:c0:a0:37:39:f0:d8:29:93:90:72:05:04:76:4a:
2b:c0:6f:67:bd:f8:a7:2d:ad:55:65:99:01:45:89:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:0A:48:D8:EA:2D:3F:D8:5D:60:F8:78:8B:0D:F6:37:9C:16:55
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234352e302f32342d3234203d3e203435323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.16.245.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ab:8a:4d:7d:73:26:c7:a3:b2:65:f1:89:12:b8:1e:10:a0:
c8:a1:a9:84:79:02:86:b6:05:bb:60:91:93:08:4a:da:3e:29:
74:01:74:ab:cc:9a:81:31:ad:b4:8e:28:4f:e0:14:66:66:a8:
68:f2:ea:63:00:10:63:99:fc:d7:d8:77:d8:28:91:fd:06:23:
12:58:94:0b:99:fa:40:41:e1:9d:b1:f8:88:6d:04:d3:af:ae:
81:da:24:e6:c2:43:64:a5:8a:70:6f:f8:6b:5c:a8:31:c8:b3:
37:ae:4f:c6:84:c8:67:46:bd:f6:2c:c5:b0:e1:00:61:80:88:
a8:3f:d1:26:85:da:e4:c4:29:e8:91:a1:06:a6:b0:82:04:6d:
10:12:77:a6:57:75:85:45:df:97:27:02:c7:3c:16:90:64:9b:
c5:28:37:aa:7b:45:6f:57:58:f5:6f:a0:58:39:9a:c5:d9:e8:
cb:fc:e7:dc:84:d0:4c:dc:32:24:ff:8f:a6:18:9c:89:46:d7:
d7:b0:c6:1f:04:ca:ca:38:5d:46:db:52:bc:8a:49:a4:0f:a0:
61:d4:cb:fc:d9:a4:d9:bf:0e:89:5a:15:7d:2b:43:6d:1e:49:
d7:e2:71:ef:87:05:42:83:40:89:fa:5f:74:7f:41:4b:74:98:
10:07:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:35:05 2025 by rpki-client