Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39362e302f32342d3234203d3e20313532383238.roa
File: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (raw, json)
Hash identifier: KlFRCsDvqBxh6mAiXOERsszO0d+eekFAAKRE6fBTwjU=
Subject key identifier: D4:9C:31:4C:DF:73:A3:1B:F0:8D:F6:C6:7C:90:C4:78:51:B3:A6:DA
Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Certificate serial: 17E9264C0162F7EB1411916E8BFFFDD1C741384A
Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39362e302f32342d3234203d3e20313532383238.roa
Signing time: Tue 02 Jul 2024 18:47:32 +0000
ROA not before: Tue 02 Jul 2024 18:42:32 +0000
ROA not after: Tue 01 Jul 2025 18:47:32 +0000
asID: 152828
IP address blocks: 160.22.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e9:26:4c:01:62:f7:eb:14:11:91:6e:8b:ff:fd:d1:c7:41:38:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Validity
Not Before: Jul 2 18:42:32 2024 GMT
Not After : Jul 1 18:47:32 2025 GMT
Subject: CN=D49C314CDF73A31BF08DF6C67C90C47851B3A6DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:1a:dc:b7:f8:54:2b:73:ab:37:bc:73:5b:
5a:0b:77:24:2d:54:04:ca:6f:76:d9:e3:33:d8:13:
90:34:40:be:5b:86:0b:c1:a4:ab:83:fb:d3:5f:4f:
ab:fc:35:63:3c:4a:54:0e:ac:25:18:64:28:c6:4a:
13:2f:69:b8:34:cc:b7:99:89:cd:8f:8f:2d:39:c3:
c9:04:aa:3d:6d:51:c2:1e:78:77:27:93:a1:e1:b7:
72:ab:22:14:b8:9c:bf:93:05:f6:a0:b3:7b:eb:99:
cf:98:4d:20:31:06:f7:13:d1:01:d2:75:a4:8b:ce:
ce:57:a2:3a:08:72:62:d4:49:dc:66:8c:17:62:1b:
f5:a4:4b:c0:2e:5e:1e:52:12:83:5b:d1:13:b3:79:
92:af:c3:2e:1f:8e:7a:2f:02:2a:c4:09:e1:21:9a:
f8:40:b6:27:37:11:c3:63:db:2e:ae:ed:5a:c9:07:
b6:7e:22:9e:5c:87:16:84:d0:6f:b5:75:57:53:88:
da:8c:85:34:aa:35:a0:b2:90:50:6b:37:77:f1:30:
ae:19:17:23:55:51:15:94:74:35:60:1e:cd:ba:db:
d8:6b:ff:ec:80:f1:0e:dc:38:25:24:30:6f:b4:9e:
64:ab:c7:97:39:af:e3:ee:54:9a:47:1a:ae:ea:3f:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:31:4C:DF:73:A3:1B:F0:8D:F6:C6:7C:90:C4:78:51:B3:A6:DA
X509v3 Authority Key Identifier:
keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39362e302f32342d3234203d3e20313532383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f0:c0:05:a0:92:8b:a1:25:8f:28:5a:c9:45:60:0c:aa:4d:
fb:c7:b2:eb:d0:b5:a9:27:5d:bd:54:2b:57:4c:bd:f2:2c:5c:
36:3c:be:35:0d:e1:ac:d2:f6:c9:df:95:a5:c0:9b:b5:e8:c9:
60:fd:f7:17:2d:51:0e:1d:5f:44:1c:d3:f8:88:74:62:d2:ac:
4a:d9:70:49:ad:90:cd:0e:0a:be:e0:ff:d3:71:24:1b:ca:5b:
8b:3e:7f:ce:e9:20:13:83:18:54:6b:e5:ad:02:0f:ac:54:cf:
2b:ca:8e:f5:02:2f:c8:7c:c2:3b:86:80:16:2e:b4:a9:f9:22:
4b:46:18:f0:64:1a:76:f0:82:cb:8d:2f:d1:04:1e:fe:84:87:
f8:f6:1f:19:79:03:f7:65:cb:60:81:49:ee:c3:6a:db:1a:65:
45:b7:d8:de:de:94:92:bf:60:e8:f4:e5:b8:a2:e1:48:b8:77:
59:b0:21:0b:a9:86:dd:3a:64:9c:96:60:30:ab:e3:79:c0:90:
72:01:fb:64:33:47:c6:d9:d0:82:1e:e6:5f:0b:7f:9c:fa:83:
5d:43:8a:ea:69:b7:15:60:61:c6:ec:05:6a:ab:f4:ef:89:a5:
78:42:8c:9d:80:0e:10:bf:de:c2:47:f8:b4:23:89:fd:6b:2d:
72:8d:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:48 2025 by rpki-client