Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa
File: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (raw, json)
Hash identifier: EvJq4OLjEBVOFbG73OwOsPdQAb4z66x1zbfCbpT8orA=
Subject key identifier: 2E:30:4F:88:4A:B3:24:CE:48:85:AB:CA:D6:4F:B5:76:7C:F7:9D:EE
Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819
Certificate serial: 6FD2FFEC30F975EA01621AE4C7CED49F57A79448
Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa
Signing time: Mon 08 Jul 2024 09:30:56 +0000
ROA not before: Mon 08 Jul 2024 09:25:56 +0000
ROA not after: Mon 07 Jul 2025 09:30:56 +0000
asID: 152780
IP address blocks: 160.20.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d2:ff:ec:30:f9:75:ea:01:62:1a:e4:c7:ce:d4:9f:57:a7:94:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819
Validity
Not Before: Jul 8 09:25:56 2024 GMT
Not After : Jul 7 09:30:56 2025 GMT
Subject: CN=2E304F884AB324CE4885ABCAD64FB5767CF79DEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:bc:40:9a:7e:0d:a4:b0:db:4e:a0:79:a9:
da:ca:92:ab:17:a8:ae:1e:d9:8c:a8:37:4e:ee:e6:
05:b8:3c:de:c9:50:b2:b7:42:2c:f5:36:00:e0:bb:
1c:e7:78:5f:3c:68:84:cd:7f:22:a4:60:a8:73:a2:
c4:5e:8b:a2:c9:6a:4e:f4:30:ba:c2:7b:7b:fa:9e:
2b:98:f8:3f:98:a7:c2:ee:75:cc:1f:21:d7:e0:99:
44:70:20:c7:9c:c5:b2:77:32:61:1c:d8:f6:9c:f3:
2f:8c:1a:f8:30:a0:36:9d:e9:88:e0:57:68:be:81:
4c:7c:69:00:80:55:b2:f3:75:6b:ef:25:4f:af:1a:
61:4e:c8:67:6b:47:1b:16:e9:a5:de:68:11:69:0a:
86:c1:0f:39:5f:72:05:3b:fe:86:18:3a:f4:35:39:
42:da:19:07:44:04:42:fc:e3:14:a8:a4:be:40:71:
56:82:25:00:9c:45:f6:1e:b9:f0:71:88:0c:20:74:
25:c9:4b:bd:79:b8:41:9a:e0:cb:96:17:61:bf:8a:
98:01:7d:21:bb:69:d5:f7:99:18:52:89:cc:e0:83:
a3:02:a3:6b:48:be:cc:59:40:9b:3d:87:3d:b2:d8:
22:2a:f9:4d:bf:02:e9:77:f4:4f:6a:ad:73:83:58:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:30:4F:88:4A:B3:24:CE:48:85:AB:CA:D6:4F:B5:76:7C:F7:9D:EE
X509v3 Authority Key Identifier:
keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.124.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ee:89:e1:a6:8b:17:6f:b8:fd:56:a6:68:34:82:0b:3c:08:
e2:cb:9b:a1:d0:e7:c4:43:4d:d0:9d:e8:c4:8a:8e:2f:4c:9f:
73:2b:14:7a:45:3d:e4:a3:28:c8:22:9b:c2:2b:41:ec:bf:e6:
b8:c2:c3:ed:b6:2b:df:d3:44:e1:57:01:b3:83:aa:5d:fc:e7:
1f:d4:1e:ee:bc:d3:2b:00:4d:8e:1f:13:90:9f:6e:9a:4c:5b:
01:ff:ad:4e:16:bf:6a:39:75:49:ff:bd:19:97:ee:1a:26:e4:
3e:c0:4a:72:0c:77:68:ca:74:ef:25:45:37:9b:93:17:99:e9:
8a:92:b9:39:4d:f3:b2:72:24:b7:f1:06:33:8a:17:e5:66:92:
42:0c:28:e0:74:f2:f6:62:44:4e:36:be:42:89:1a:5e:54:e6:
80:03:82:93:95:bb:74:36:29:6f:b8:9f:9a:61:ce:fd:5a:5c:
f1:4a:2d:90:ed:34:c2:b0:89:68:d4:89:a4:01:53:01:ce:2e:
5a:2f:a1:51:a5:f4:0f:2b:da:dd:cf:3a:a4:94:ea:ba:b6:ed:
ea:71:99:d6:db:fa:66:0e:9a:a1:ac:da:92:35:cf:db:6e:af:
0f:22:46:6b:9b:1e:21:c7:45:20:ef:d4:73:3e:62:4f:6d:56:
37:45:a1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:23 2025 by rpki-client