Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa
File: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (raw, json)
Hash identifier: hfp0R3ELBQf5z/8Cte4K8Vl+BAiPG2EB5Pp1Bo96E+c=
Subject key identifier: 6E:BD:B4:4C:33:D1:99:86:4D:87:A4:FD:89:9F:A0:96:5C:68:4F:11
Certificate issuer: /CN=1E40BE2B668DAE3E7271E835148386D785E3724C
Certificate serial: 7526A71AB3DDA4D038BB4EEC42617D203F8F2CA1
Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa
Signing time: Wed 06 Nov 2024 05:18:27 +0000
ROA not before: Wed 06 Nov 2024 05:13:27 +0000
ROA not after: Wed 05 Nov 2025 05:18:27 +0000
asID: 152810
IP address blocks: 160.22.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:26:a7:1a:b3:dd:a4:d0:38:bb:4e:ec:42:61:7d:20:3f:8f:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C
Validity
Not Before: Nov 6 05:13:27 2024 GMT
Not After : Nov 5 05:18:27 2025 GMT
Subject: CN=6EBDB44C33D199864D87A4FD899FA0965C684F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:6c:4f:9c:13:18:dc:1f:39:78:06:33:47:
e5:37:0c:fc:88:88:56:2a:1d:5c:47:a2:dd:22:5e:
6f:55:98:96:50:4f:3f:ea:ce:7a:f9:58:20:d0:da:
0b:9b:a3:da:3b:30:05:3a:e5:6d:1c:19:e7:1c:69:
9b:bf:c2:d4:fe:81:49:79:25:f0:e3:70:f3:01:e5:
96:0b:7e:1f:ad:d5:e4:64:f8:a2:6a:26:af:b0:c2:
b4:f4:60:72:fa:7d:7e:2d:84:ee:10:59:1e:9c:54:
c2:d3:54:ee:82:a9:46:15:41:e0:8f:b6:8a:6c:a8:
02:b7:85:43:21:15:93:6a:01:c8:66:07:c1:2f:84:
72:0d:ee:04:b6:70:5a:e4:18:f1:06:ad:04:b1:0b:
43:c7:90:23:84:a1:5c:e0:1b:77:31:0b:37:9f:99:
f7:95:b9:85:20:4a:45:3e:23:28:35:45:e2:5c:4f:
b8:61:59:e5:09:7c:12:af:89:48:cf:a1:81:5b:82:
17:6e:64:79:4c:02:97:2f:bc:d3:cf:48:11:15:06:
0b:b7:bb:30:55:84:4c:2f:5a:b2:94:c9:1a:d3:4c:
6b:99:0c:67:f8:8a:e5:eb:61:a2:f5:57:9c:49:75:
53:71:5e:4a:63:73:8a:c8:9a:80:8a:d8:1e:56:fd:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BD:B4:4C:33:D1:99:86:4D:87:A4:FD:89:9F:A0:96:5C:68:4F:11
X509v3 Authority Key Identifier:
keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.134.0/23
Signature Algorithm: sha256WithRSAEncryption
e3:b2:ce:34:87:b7:cb:11:6f:15:98:45:57:59:b9:b1:02:33:
ff:66:48:d6:57:73:7f:d3:f8:9a:49:43:87:67:74:6c:a7:17:
2f:df:6d:80:75:3f:bd:62:df:8b:95:f9:0b:73:fc:ee:8b:2f:
54:04:02:94:34:d5:d2:bf:95:01:1c:f8:1e:c9:78:c2:75:a3:
6a:28:d2:a4:eb:32:9b:2e:4a:28:f5:e5:a7:b7:25:f8:6d:6c:
95:db:e6:40:cc:ba:d8:35:17:56:31:a8:30:a8:f2:87:c0:74:
e7:a7:1b:d7:51:5d:13:f7:ae:d3:08:2a:c8:03:ce:2c:a5:00:
6c:3f:31:e5:f6:28:cd:1f:4a:03:83:30:a5:b9:49:a8:bd:59:
18:c3:cf:b8:39:b3:a7:18:7b:a2:f1:be:2b:e9:aa:b4:27:a1:
fd:68:7e:99:0e:49:00:05:f5:9e:28:ff:d1:29:f1:64:25:17:
ab:b8:b1:ca:c6:8a:75:a0:5f:72:b5:c2:c6:d1:67:ea:74:97:
87:a0:0f:ca:1d:4e:bb:08:bb:30:8f:9a:d6:53:a4:f9:e1:b5:
94:95:6c:bc:e0:39:44:06:47:3e:6f:b4:3f:dc:03:30:b0:72:
f2:d4:de:7a:5c:aa:28:a1:a2:19:15:5a:28:0c:ef:54:5d:01:
b4:be:18:62
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdSanGrPdpNA4u07sQmF9ID+PLKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4
NUUzNzI0QzAeFw0yNDExMDYwNTEzMjdaFw0yNTExMDUwNTE4MjdaMDMxMTAvBgNV
BAMTKDZFQkRCNDRDMzNEMTk5ODY0RDg3QTRGRDg5OUZBMDk2NUM2ODRGMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2GxPnBMY3B85eAYzR+U3DPyI
iFYqHVxHot0iXm9VmJZQTz/qznr5WCDQ2gubo9o7MAU65W0cGeccaZu/wtT+gUl5
JfDjcPMB5ZYLfh+t1eRk+KJqJq+wwrT0YHL6fX4thO4QWR6cVMLTVO6CqUYVQeCP
topsqAK3hUMhFZNqAchmB8EvhHIN7gS2cFrkGPEGrQSxC0PHkCOEoVzgG3cxCzef
mfeVuYUgSkU+Iyg1ReJcT7hhWeUJfBKviUjPoYFbghduZHlMApcvvNPPSBEVBgu3
uzBVhEwvWrKUyRrTTGuZDGf4iuXrYaL1V5xJdVNxXkpjc4rImoCK2B5W/cpZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbr20TDPRmYZNh6T9iZ+gllxoTxEwHwYDVR0j
BBgwFoAUHkC+K2aNrj5yceg1FIOG14XjckwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMC8xRTQwQkUyQjY2
OERBRTNFNzI3MUU4MzUxNDgzODZENzg1RTM3MjRDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4NUUz
NzI0Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg0NzUzMzhkLTdhY2ItNGFhNy1i
ZWRjLWQ2NDU5ZmQxMzUwNC8wLzMxMzYzMDJlMzIzMjJlMzEzMzM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBaGMA0GCSqG
SIb3DQEBCwUAA4IBAQDjss40h7fLEW8VmEVXWbmxAjP/ZkjWV3N/0/iaSUOHZ3Rs
pxcv322AdT+9Yt+LlfkLc/zuiy9UBAKUNNXSv5UBHPgeyXjCdaNqKNKk6zKbLkoo
9eWntyX4bWyV2+ZAzLrYNRdWMagwqPKHwHTnpxvXUV0T967TCCrIA84spQBsPzHl
9ijNH0oDgzCluUmovVkYw8+4ObOnGHui8b4r6aq0J6H9aH6ZDkkABfWeKP/RKfFk
JReruLHKxop1oF9ytcLG0WfqdJeHoA/KHU67CLswj5rWU6T54bWUlWy84DlEBkc+
b7Q/3AMwsHLy1N56XKoooaIZFVooDO9UXQG0vhhi
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:18 2025 by rpki-client