Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137362e302f32342d3234203d3e203436303330.roa
File: 3138322e34382e3137362e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier: +39ZiPXe2qiuQnI8Twz2gwGEEiloIsDlYgaNtpnRdkA=
Subject key identifier: 40:E9:C1:16:2D:4C:2A:99:AA:27:71:53:EF:F2:B4:B6:BD:2B:55:FB
Certificate issuer: /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial: 46CDB2EA610F2D8AFCEC37FEC92209AECA98B090
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137362e302f32342d3234203d3e203436303330.roa
Signing time: Fri 18 Oct 2024 12:00:02 +0000
ROA not before: Fri 18 Oct 2024 11:55:02 +0000
ROA not after: Fri 17 Oct 2025 12:00:02 +0000
asID: 46030
IP address blocks: 182.48.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cd:b2:ea:61:0f:2d:8a:fc:ec:37:fe:c9:22:09:ae:ca:98:b0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Validity
Not Before: Oct 18 11:55:02 2024 GMT
Not After : Oct 17 12:00:02 2025 GMT
Subject: CN=40E9C1162D4C2A99AA277153EFF2B4B6BD2B55FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:e8:18:16:0c:54:0f:ad:e5:d0:34:7e:cb:
4e:ec:b1:b6:15:d1:db:2c:91:2c:09:61:46:04:4e:
1d:e3:62:70:9f:87:38:10:93:08:ca:dc:fc:0a:71:
63:6d:10:6e:8f:76:eb:2d:27:bb:f5:d4:5d:bf:ec:
d9:a8:92:67:89:d2:d5:1c:03:c9:37:b4:23:d8:fb:
c0:c1:2d:6a:f6:c4:94:77:33:1a:ad:b4:fd:29:a0:
c0:40:19:1e:dd:42:d8:7a:ce:3b:db:d8:16:72:e6:
af:c0:6e:2d:42:3b:68:4d:66:91:22:f9:f9:d6:73:
22:e9:6d:bb:e4:c5:ff:74:a0:1b:09:68:fe:84:50:
1e:75:5f:c9:8e:f4:67:8b:4f:72:83:35:de:88:1b:
c4:0d:60:ee:d1:8e:35:fa:99:80:e9:dc:ec:15:6b:
04:31:65:8b:b1:26:56:91:6c:1c:bb:85:98:21:9f:
d2:72:e9:61:a5:28:fe:52:0b:6a:2d:dd:77:a3:5e:
91:c0:21:e6:a1:5d:99:36:bf:b5:af:78:65:50:e9:
d6:eb:6d:c0:0e:fa:e6:86:3d:0a:0f:72:61:b3:7c:
55:38:45:54:ad:72:79:e5:34:21:e3:70:63:a0:f7:
48:de:c6:a5:f5:a5:8f:b0:3e:4e:51:30:22:6e:27:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:C1:16:2D:4C:2A:99:AA:27:71:53:EF:F2:B4:B6:BD:2B:55:FB
X509v3 Authority Key Identifier:
keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137362e302f32342d3234203d3e203436303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.48.176.0/24
Signature Algorithm: sha256WithRSAEncryption
38:11:a4:e2:5f:62:b9:a4:7c:4b:2c:c7:d7:6e:62:9a:45:77:
8a:c3:af:e8:fc:16:3b:b8:ee:cc:7d:dc:2a:44:ef:a2:66:8c:
f6:6d:bc:ae:16:36:b9:3c:0b:f1:13:8c:68:b7:20:de:e7:05:
65:b4:72:16:54:7f:e5:18:6a:b1:0c:e7:4c:e1:21:84:2f:2f:
69:bb:23:38:97:64:47:6b:c9:a0:be:86:c2:72:cb:95:d9:27:
64:31:bf:77:6f:f4:b8:69:29:0e:27:14:f1:34:64:c0:47:58:
1a:75:55:57:9f:e6:7b:44:f4:d6:51:1c:26:3d:b1:c9:4c:89:
9c:d7:de:11:7f:8d:85:4a:50:28:4b:3f:87:dc:30:a5:c7:45:
7e:72:ee:3f:3c:a8:42:73:1c:04:dd:f4:00:f9:4f:da:aa:99:
87:8e:a5:18:18:9c:1e:a8:9c:bf:11:a4:12:62:08:c4:1c:49:
af:c4:fe:aa:19:49:13:d3:fb:98:1a:7e:c0:d4:51:1b:42:64:
52:2b:5d:20:73:c5:91:b2:0a:28:5b:ab:c3:9e:94:d9:60:67:
2d:17:84:8d:ed:06:38:47:5f:5c:33:5d:66:6a:a7:18:bb:47:
3f:fe:f2:b4:26:04:2f:df:ef:0e:42:34:e2:63:59:93:cb:55:
8e:d7:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:20 2025 by rpki-client