Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa
File: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (raw, json)
Hash identifier: xeHbC/VCkuQ0ewa0mKT4AWB4+3P9LD9U12PZtoBDe2A=
Subject key identifier: 04:99:05:96:CE:32:04:84:DA:BA:FC:5E:D1:8D:CF:91:5A:05:04:1B
Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1
Certificate serial: 4423AE79651D8642ACBEF71117FD73CDCB8F8D72
Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa
Signing time: Sun 21 Jul 2024 11:34:23 +0000
ROA not before: Sun 21 Jul 2024 11:29:23 +0000
ROA not after: Sun 20 Jul 2025 11:34:23 +0000
asID: 152808
IP address blocks: 160.22.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:23:ae:79:65:1d:86:42:ac:be:f7:11:17:fd:73:cd:cb:8f:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1
Validity
Not Before: Jul 21 11:29:23 2024 GMT
Not After : Jul 20 11:34:23 2025 GMT
Subject: CN=04990596CE320484DABAFC5ED18DCF915A05041B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:1d:35:85:d6:bb:3e:8c:33:17:27:29:be:
c6:33:28:17:d6:70:d2:42:da:67:62:38:c8:be:d5:
fb:15:7f:f7:c5:08:71:05:ec:dd:72:f7:9f:bc:50:
94:e1:17:f1:c2:0d:bc:89:55:2f:46:c7:b1:74:7a:
29:2c:61:20:f8:87:60:f8:3b:d9:d2:b8:a3:1d:71:
cf:19:8b:9c:59:58:ce:8a:03:23:0d:ae:82:20:0b:
ea:90:f1:1d:b4:8c:2b:89:88:5a:ab:ff:6a:b0:a3:
e7:ff:25:b7:60:4a:00:fa:db:8d:67:88:98:32:15:
65:48:a8:11:6a:d6:b7:5e:f4:12:2f:7c:15:29:c9:
a6:12:fb:85:7c:59:61:7c:fe:94:e6:77:a0:81:32:
d7:19:0b:73:83:7b:24:a8:62:4a:54:b4:9b:e2:fd:
d1:d0:6e:ab:d7:f4:80:e8:b9:8a:73:1b:e2:0e:41:
f6:c7:2f:35:ed:f1:bd:48:2f:b1:14:38:65:eb:6e:
49:82:b1:eb:5f:89:0d:89:d4:1e:09:f4:c6:c1:5c:
17:5a:1a:13:75:e0:97:20:63:a0:da:28:f9:c5:8a:
45:5e:d4:d7:ee:2b:10:db:9e:fe:ec:4d:f6:5e:50:
78:53:a3:08:a0:37:f5:bf:c9:b1:ed:82:2d:19:74:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:05:96:CE:32:04:84:DA:BA:FC:5E:D1:8D:CF:91:5A:05:04:1B
X509v3 Authority Key Identifier:
keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.100.0/24
Signature Algorithm: sha256WithRSAEncryption
69:73:ba:17:b6:cc:63:69:68:d8:c1:35:c1:7b:fa:f3:87:5c:
fa:be:a2:04:d3:92:88:c4:d2:b6:4a:4c:07:14:9d:19:f8:ee:
53:fd:ac:8b:45:ba:9d:01:7a:8f:0f:0f:99:cd:6e:e1:1c:5e:
07:55:2d:3a:f1:e6:ac:43:ca:74:d0:83:5c:45:57:1f:0c:e1:
31:2d:2d:e5:eb:53:73:75:f4:50:fe:ec:5a:38:70:ed:7c:7b:
e6:25:bf:c1:21:d3:44:a5:c1:57:69:e0:39:dd:32:fd:0e:26:
0e:4f:75:39:69:2c:22:cb:4a:89:8c:07:af:73:e6:12:27:47:
d3:2b:ae:a0:df:8a:b8:07:4f:7b:3f:ee:d2:6a:cc:2e:20:81:
86:d7:a1:1f:9c:08:f3:c2:57:3f:63:d6:b2:92:96:3c:24:e7:
f8:84:1a:ea:56:6b:da:ef:b1:06:fc:ce:35:20:31:a0:9a:eb:
26:8a:5a:31:25:5d:03:55:5f:1b:6a:54:26:97:a1:96:0d:54:
8a:d5:24:e8:81:b7:4e:0a:cc:f5:c0:39:80:65:47:fe:1c:6b:
fb:ee:d6:6e:6c:ab:2c:f2:97:af:ad:a7:db:62:ef:5d:67:bc:
e7:1a:21:16:08:3e:29:a8:19:4b:c3:2b:3d:b8:93:2d:7d:5b:
f2:1c:40:99
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURCOueWUdhkKsvvcRF/1zzcuPjXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0
MjA5QkJGMTAeFw0yNDA3MjExMTI5MjNaFw0yNTA3MjAxMTM0MjNaMDMxMTAvBgNV
BAMTKDA0OTkwNTk2Q0UzMjA0ODREQUJBRkM1RUQxOERDRjkxNUEwNTA0MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZB01hda7PowzFycpvsYzKBfW
cNJC2mdiOMi+1fsVf/fFCHEF7N1y95+8UJThF/HCDbyJVS9Gx7F0eiksYSD4h2D4
O9nSuKMdcc8Zi5xZWM6KAyMNroIgC+qQ8R20jCuJiFqr/2qwo+f/JbdgSgD6241n
iJgyFWVIqBFq1rde9BIvfBUpyaYS+4V8WWF8/pTmd6CBMtcZC3ODeySoYkpUtJvi
/dHQbqvX9IDouYpzG+IOQfbHLzXt8b1IL7EUOGXrbkmCsetfiQ2J1B4J9MbBXBda
GhN14JcgY6DaKPnFikVe1NfuKxDbnv7sTfZeUHhTowigN/W/ybHtgi0ZdOFpAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUBJkFls4yBITauvxe0Y3PkVoFBBswHwYDVR0j
BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0
NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5
QkJGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwYThjZTZjLTgyOTAtNGI5ZC05
YWVkLTA3NTRkM2ZkOGQzMi8wLzMxMzYzMDJlMzIzMjJlMzEzMDMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBZkMA0GCSqG
SIb3DQEBCwUAA4IBAQBpc7oXtsxjaWjYwTXBe/rzh1z6vqIE05KIxNK2SkwHFJ0Z
+O5T/ayLRbqdAXqPDw+ZzW7hHF4HVS068easQ8p00INcRVcfDOExLS3l61NzdfRQ
/uxaOHDtfHvmJb/BIdNEpcFXaeA53TL9DiYOT3U5aSwiy0qJjAevc+YSJ0fTK66g
34q4B097P+7SaswuIIGG16EfnAjzwlc/Y9aykpY8JOf4hBrqVmva77EG/M41IDGg
musmiloxJV0DVV8balQml6GWDVSK1STogbdOCsz1wDmAZUf+HGv77tZubKss8pev
rafbYu9dZ7znGiEWCD4pqBlLwys9uJMtfVvyHECZ
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:03 2025 by rpki-client