Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa
File: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (raw, json)
Hash identifier: iBwCiGq60c+2kk4AeuGkzb89D8PG4a8vEAoiYw5XZV0=
Subject key identifier: 2A:6A:A8:0A:8B:F1:6F:7A:10:2C:6E:47:81:68:7F:7F:7E:15:CA:4F
Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA
Certificate serial: 36A8C1B3C9EEA26C58EBAB34C0FD6E10B5FAFAF0
Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa
Signing time: Thu 29 Aug 2024 17:27:46 +0000
ROA not before: Thu 29 Aug 2024 17:22:46 +0000
ROA not after: Thu 28 Aug 2025 17:27:46 +0000
asID: 152836
IP address blocks: 160.22.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a8:c1:b3:c9:ee:a2:6c:58:eb:ab:34:c0:fd:6e:10:b5:fa:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA
Validity
Not Before: Aug 29 17:22:46 2024 GMT
Not After : Aug 28 17:27:46 2025 GMT
Subject: CN=2A6AA80A8BF16F7A102C6E4781687F7F7E15CA4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:05:38:ff:a1:d5:af:4b:cc:0b:b3:fb:82:
7c:01:e5:bb:50:1f:f8:4c:31:6b:c0:2f:af:04:7c:
f0:4c:7f:9f:df:37:ce:cf:03:9a:4f:9b:e8:98:27:
d2:2e:3e:5f:3a:65:42:8b:44:c3:fe:5a:05:e1:85:
8f:13:16:5b:1d:5a:5c:31:11:44:fc:eb:47:16:6b:
07:bd:f0:ed:46:2a:d0:3a:c7:3f:81:d4:82:08:dd:
7f:c2:5f:0d:74:7a:cc:b0:16:a2:43:5e:00:a6:fe:
be:b9:66:78:c5:5d:50:42:b4:bb:e1:87:0b:c4:1f:
20:94:39:fd:e0:05:38:37:e1:ad:b2:47:5a:a5:ea:
b0:9a:08:cf:f9:fd:e3:5b:43:9f:2e:91:89:bd:3a:
f8:ed:b4:f5:c1:00:fb:35:a5:2a:fb:b1:c4:7a:31:
c4:2c:73:95:90:9d:30:18:f5:77:8a:f9:3f:aa:cd:
9e:d2:f7:8a:a1:7c:d6:23:a4:23:ad:a1:e4:f0:d5:
7d:9d:80:50:78:57:91:b3:ad:d2:b4:16:d3:df:3a:
ad:a7:97:f9:1a:cf:6b:3e:71:49:9d:bc:85:62:e4:
af:88:4d:50:b1:9e:83:67:41:63:78:77:10:4d:05:
d3:24:97:81:3b:70:5f:5a:4e:30:d7:fb:b3:98:f7:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6A:A8:0A:8B:F1:6F:7A:10:2C:6E:47:81:68:7F:7F:7E:15:CA:4F
X509v3 Authority Key Identifier:
keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e4:57:52:f1:1b:0c:4e:62:86:a7:52:2a:49:be:52:14:00:
5e:d9:73:03:38:b1:31:4d:ba:0c:89:72:51:3b:2c:f7:51:9e:
34:82:af:9b:0e:5c:48:d1:5f:41:6b:02:a4:cb:48:6a:74:29:
e8:da:54:d2:57:89:0c:d7:0c:b0:bf:fd:ce:39:15:de:91:4c:
db:cb:04:b0:49:91:09:25:8e:a6:ea:1f:fa:83:e4:d0:82:1b:
66:98:10:bd:5c:84:f8:15:bc:22:2f:9a:8b:98:48:5b:66:69:
4d:c7:91:5a:2d:26:3a:f8:55:a1:e0:b0:75:bd:29:66:49:9a:
46:67:6e:cf:5c:ec:33:8a:5e:4d:64:59:f6:06:d2:9b:23:e5:
f6:c4:e7:d3:9e:cd:10:08:56:7f:3a:2f:ce:66:8b:97:df:bf:
3d:bc:f2:05:4a:59:78:a1:98:50:cb:a9:a8:78:99:35:24:72:
92:0d:c9:1c:01:40:6e:a9:17:cc:31:44:4f:74:46:c6:0c:c4:
a2:94:98:44:c6:cb:45:e2:ea:4e:d7:68:1c:90:1a:f5:d0:04:
b6:a1:5e:ab:60:12:67:f6:9a:bb:77:ea:ed:6b:cd:5e:c6:ea:
e4:d3:29:f9:11:f5:e2:3b:7a:45:07:6c:79:b4:aa:56:4b:a5:
80:9d:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:56 2025 by rpki-client