Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa
File: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (raw, json)
Hash identifier: 396wvI67jqZy7okjsFOHdqyMEvjwT/V6xQtKNILvTEU=
Subject key identifier: EF:FD:0B:64:A2:DE:34:AC:B0:02:70:A7:B5:0D:4B:8E:99:18:C5:A5
Certificate issuer: /CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441
Certificate serial: 710DBA817A66028973D5E1047C5FA2C2437275B7
Authority key identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa
Signing time: Tue 10 Dec 2024 02:06:15 +0000
ROA not before: Tue 10 Dec 2024 02:01:15 +0000
ROA not after: Tue 09 Dec 2025 02:06:15 +0000
asID: 153082
IP address blocks: 160.22.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0d:ba:81:7a:66:02:89:73:d5:e1:04:7c:5f:a2:c2:43:72:75:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441
Validity
Not Before: Dec 10 02:01:15 2024 GMT
Not After : Dec 9 02:06:15 2025 GMT
Subject: CN=EFFD0B64A2DE34ACB00270A7B50D4B8E9918C5A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:69:6e:9b:93:d8:9e:a0:bf:03:dd:9b:be:
c2:ed:7a:65:3c:ef:6e:39:9b:33:a3:9f:68:e4:80:
0c:ae:0b:77:31:28:95:94:e3:c1:47:a1:d7:a3:bd:
5c:5e:21:98:33:dd:10:e6:94:4c:88:4b:5c:d5:c5:
2e:c6:fa:03:67:fb:82:63:57:16:18:ab:aa:5e:5e:
bb:2b:18:fb:62:92:3c:7c:de:de:4c:cf:86:59:6c:
1c:7d:31:1a:79:25:15:65:54:9c:5e:b9:59:31:28:
da:90:28:8b:f6:89:3c:6b:15:c9:58:18:0e:4b:29:
4b:b4:ee:76:8b:63:87:08:3d:95:e9:68:e7:bb:f4:
95:10:48:ca:82:49:72:2e:05:6e:43:2f:b8:32:43:
dc:70:a5:75:c1:b3:95:f3:9c:f9:55:1c:72:2f:5d:
20:d7:a5:65:f7:df:30:a4:02:d9:35:5b:bb:2a:b2:
13:5f:84:6c:2b:09:fe:99:fc:75:2f:d2:a9:11:b3:
98:7a:da:dd:35:5a:d5:2b:c7:90:09:9a:ca:e4:bd:
a2:65:b0:01:5d:51:8e:df:15:33:ef:a5:80:78:dd:
64:2e:c0:e7:04:87:06:68:30:b1:82:1b:f5:d3:6e:
a6:e2:4e:fd:42:1c:96:09:ca:bd:af:01:1f:f6:db:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:0B:64:A2:DE:34:AC:B0:02:70:A7:B5:0D:4B:8E:99:18:C5:A5
X509v3 Authority Key Identifier:
keyid:92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.218.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0b:c0:a1:b1:49:ea:de:09:93:52:51:cf:c5:eb:53:50:7a:
ad:e4:95:7f:85:4a:b5:c3:08:54:55:2f:af:01:25:8b:f0:49:
6c:a8:5b:78:8e:16:20:fa:7e:3d:78:1a:ca:16:f4:f7:a3:3a:
f4:54:58:81:92:14:99:66:33:be:33:57:65:55:3e:76:86:9a:
f3:aa:6a:a1:44:e6:78:fb:5f:0e:32:35:a0:58:50:a6:1e:07:
17:08:d3:82:b4:38:e8:f3:a2:3e:16:b5:4d:88:a0:46:71:f4:
01:b8:41:8e:61:00:94:63:65:1e:5c:22:19:d9:e3:63:03:52:
b3:92:99:22:47:bf:99:f2:f4:40:35:a9:82:d1:85:fe:b5:c9:
03:ec:7c:a5:cf:83:c0:23:18:f0:59:e1:98:16:b2:eb:7e:c5:
ca:96:40:8f:9f:a2:45:9b:6b:a9:15:6f:69:34:c8:1b:36:51:
53:41:7a:46:d3:fc:13:1f:76:d2:06:27:89:0f:69:be:3d:9a:
58:8c:0f:e5:f9:f8:bd:23:96:e5:2f:4a:8f:07:b5:1b:e6:dd:
c9:22:e4:0b:66:ee:3d:63:80:ef:a2:31:00:c3:53:f1:ca:44:
2c:a5:83:52:9b:40:c0:88:c2:89:51:69:46:49:b8:28:8d:a5:
a3:97:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:23:45 2025 by rpki-client