Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32322d3232203d3e203436303439.roa
File: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (raw, json)
Hash identifier: 4lUl/bGr3LsLR/vnV3xMIVxucYqdv89T4oDlo5SwVJ0=
Subject key identifier: 64:9B:D9:DA:B2:AA:3F:D6:94:AA:E4:F2:22:E8:D7:B0:F4:E5:E3:2B
Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial: 3B898025E1AA1837F480D9AD1B90AC56CC370BFD
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32322d3232203d3e203436303439.roa
Signing time: Thu 18 Jul 2024 06:00:00 +0000
ROA not before: Thu 18 Jul 2024 05:55:00 +0000
ROA not after: Thu 17 Jul 2025 06:00:00 +0000
asID: 46049
IP address blocks: 182.255.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:89:80:25:e1:aa:18:37:f4:80:d9:ad:1b:90:ac:56:cc:37:0b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Validity
Not Before: Jul 18 05:55:00 2024 GMT
Not After : Jul 17 06:00:00 2025 GMT
Subject: CN=649BD9DAB2AA3FD694AAE4F222E8D7B0F4E5E32B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:7c:57:7f:b5:2e:48:71:6c:43:15:c2:95:
93:bc:cd:c5:99:c9:93:ce:14:c4:e5:af:d1:d1:7b:
ba:e0:6b:09:7f:b5:a5:2b:d9:28:87:cb:28:f0:c5:
96:b2:ee:4c:0a:c9:83:47:19:8d:b0:49:be:56:9c:
c5:09:e7:66:38:f6:91:20:d6:6e:07:69:60:07:6e:
20:dd:c7:e6:2a:7f:fa:ea:69:7b:6c:b1:e4:d0:4b:
f2:68:c4:bf:e2:de:75:8c:dc:12:57:b7:bc:6a:6d:
69:48:c7:44:ee:26:12:fc:6e:5f:65:ad:b5:fb:de:
8f:20:a5:da:f3:0c:18:a0:45:22:7f:58:06:38:04:
9a:07:01:20:61:b8:82:03:d2:d5:ae:a5:ae:fb:e9:
97:f3:9a:08:50:9f:24:d4:1a:54:10:5a:1c:f4:ca:
70:16:1c:cc:76:da:7f:b7:f6:ab:8c:80:3a:3c:0b:
72:ef:64:a9:dc:fc:66:81:2c:fb:15:b8:0a:1e:89:
66:7f:8f:5e:13:e9:30:0f:93:65:1c:e6:22:f1:b9:
70:86:b5:cb:2a:d5:7e:4d:a1:f7:3e:da:0b:90:f8:
26:7e:19:0b:b7:37:85:c6:2d:8e:34:12:65:61:31:
d2:08:a9:17:a4:62:e5:a9:c6:06:8b:77:05:04:46:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9B:D9:DA:B2:AA:3F:D6:94:AA:E4:F2:22:E8:D7:B0:F4:E5:E3:2B
X509v3 Authority Key Identifier:
keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32322d3232203d3e203436303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.255.0.0/22
Signature Algorithm: sha256WithRSAEncryption
95:73:0c:db:89:a4:0b:a2:ed:be:26:f2:a3:7d:06:84:3d:b3:
82:81:32:d4:10:72:f0:95:5d:dd:b5:5c:c9:e9:1f:13:47:0f:
aa:07:5f:b3:ee:de:f7:8b:27:d7:bc:cf:02:17:7b:1c:1c:8a:
c2:1a:49:cf:d3:50:c5:c0:47:9e:1a:76:60:16:64:3d:8f:4f:
e0:63:40:96:82:58:db:a6:52:63:3b:16:c1:1d:05:a7:93:be:
17:64:39:65:b0:d6:f2:a5:75:10:eb:73:d8:c5:2b:54:09:6b:
f4:0c:90:75:04:fc:bb:5f:e4:80:12:8e:fa:b7:8c:da:eb:4c:
b5:64:62:aa:c0:e9:39:fd:b7:68:62:62:96:94:b4:97:1d:b8:
21:0e:70:6f:a7:6f:9f:24:bd:61:95:31:9c:61:b4:2b:15:19:
38:5b:7e:02:6c:6b:57:b7:f9:6c:10:8e:b1:0a:b0:5c:05:3b:
d5:2e:5a:72:3c:15:40:46:1b:1b:f7:f4:77:cb:15:af:12:d3:
4b:9d:63:99:01:b9:37:0a:b3:e9:0d:10:be:e2:23:dc:e8:54:
9c:34:26:2b:6f:6c:e0:0c:9a:40:13:20:6f:86:cf:56:1f:39:
b6:06:f8:60:6e:0d:bd:36:56:7f:88:96:d9:b9:bc:39:91:cc:
48:e1:9e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:34 2025 by rpki-client