Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235332e302f32342d3234203d3e203435323938.roa
File: 3138322e31362e3235332e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier: cDMfzq+lZVASPHOW0FNH/vgxJIX0L1tBVavjvaGKFok=
Subject key identifier: 29:C6:13:36:59:67:C7:BF:FF:CC:77:7C:FD:87:FD:9C:5D:85:68:00
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 1ADC39F6FCBB3F0AE5050A860090E35CB93DBD1B
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235332e302f32342d3234203d3e203435323938.roa
Signing time: Wed 27 Mar 2024 00:25:22 +0000
ROA not before: Wed 27 Mar 2024 00:20:22 +0000
ROA not after: Wed 26 Mar 2025 00:25:22 +0000
asID: 45298
IP address blocks: 182.16.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:dc:39:f6:fc:bb:3f:0a:e5:05:0a:86:00:90:e3:5c:b9:3d:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Mar 27 00:20:22 2024 GMT
Not After : Mar 26 00:25:22 2025 GMT
Subject: CN=29C613365967C7BFFFCC777CFD87FD9C5D856800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:86:45:39:e3:cc:a6:45:68:f3:a1:ab:da:
d4:81:44:fa:ba:ea:4d:da:ed:8c:8e:f1:3c:8a:0e:
63:74:ce:bb:31:61:0c:b3:04:99:d7:db:e3:68:6c:
d1:7f:10:dc:84:b8:59:66:97:22:8b:68:26:9e:e1:
f2:0e:cc:54:2e:c0:ac:d5:89:95:23:87:7a:62:37:
c4:0a:50:0a:92:a3:33:cb:7f:1d:f9:fd:87:3b:58:
ad:7a:b2:e3:7c:c3:0c:9d:fc:be:cb:cb:ef:93:82:
72:8b:3d:29:86:6d:a5:f1:0b:57:fc:26:a8:0d:6f:
24:77:ae:b6:0d:eb:0a:d3:01:0b:59:01:c1:3a:7c:
13:b7:7e:e3:e5:7c:df:2f:5c:74:7b:23:67:64:d5:
7d:79:a3:7d:4b:cb:50:f2:2d:5e:a7:a6:b8:fc:f3:
71:95:20:3d:8a:60:aa:f3:7f:79:6b:7e:c4:14:1f:
09:03:fb:08:f5:61:05:7d:70:a7:de:f3:b6:a8:4d:
57:17:00:50:05:47:84:bc:a9:dc:e5:c4:8f:ce:c3:
7b:6c:bb:6f:6e:6f:31:ec:8f:3d:9f:f4:d5:cc:36:
a8:97:4b:b9:6f:cf:f1:d7:f5:a2:73:61:0c:07:68:
08:07:47:9c:65:39:7f:cc:83:36:e3:7d:22:6f:0a:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:13:36:59:67:C7:BF:FF:CC:77:7C:FD:87:FD:9C:5D:85:68:00
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235332e302f32342d3234203d3e203435323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.16.253.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ff:59:08:82:b1:21:17:b4:6b:d2:96:87:93:39:65:67:23:
be:f2:33:d3:42:b9:be:c9:4b:db:75:70:2b:8e:ce:be:0b:8e:
78:4f:19:6a:49:b8:1a:3d:f7:30:5a:5a:65:87:2d:66:94:03:
52:c2:26:8b:89:fa:3f:2f:8d:af:b7:13:89:95:a8:83:24:23:
83:12:e5:c3:79:fd:a6:8b:e4:c4:52:6d:a6:ba:7a:12:18:6b:
cf:09:4e:07:ee:45:e6:e1:1f:e1:21:b3:3a:04:1e:3e:f2:d9:
e1:a1:b1:b7:15:41:32:48:14:40:1a:f3:53:f5:9a:e9:11:6e:
04:06:06:98:58:2d:51:65:1c:5b:60:a0:e7:6b:98:d3:95:4d:
dd:ce:e2:d2:2f:c2:7d:f9:39:27:47:26:04:f3:12:62:12:b7:
21:65:f2:d4:a5:d6:44:b9:2e:8f:d2:e3:bd:45:3c:c4:5e:25:
dd:56:93:83:db:e7:91:1a:dd:a2:dc:55:53:a1:23:42:93:50:
76:a9:6b:59:80:ea:1a:73:5d:5d:f7:cc:eb:ac:6a:3e:ab:39:
d6:65:cc:05:bd:4f:27:bc:49:fc:dd:1e:27:df:41:0f:34:b2:
b0:f5:64:0e:a3:fa:ab:0f:86:04:b8:07:eb:33:f3:a3:c5:58:
5d:36:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:35:03 2025 by rpki-client