Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa
File: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (raw, json)
Hash identifier: uR53pbwW9P8hqVOeVN0hgPpqYO4PeD2g8LQ/VFiv7kA=
Subject key identifier: 26:82:41:F8:66:8B:EA:D9:50:30:A6:0E:A4:15:3B:33:A8:E2:59:BA
Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374
Certificate serial: 5300201EA655722660C9C9E7945D945FEFB907F5
Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa
Signing time: Fri 14 Jun 2024 05:45:33 +0000
ROA not before: Fri 14 Jun 2024 05:40:33 +0000
ROA not after: Fri 13 Jun 2025 05:45:33 +0000
asID: 152788
IP address blocks: 160.19.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:00:20:1e:a6:55:72:26:60:c9:c9:e7:94:5d:94:5f:ef:b9:07:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374
Validity
Not Before: Jun 14 05:40:33 2024 GMT
Not After : Jun 13 05:45:33 2025 GMT
Subject: CN=268241F8668BEAD95030A60EA4153B33A8E259BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:b7:d7:20:11:f5:57:fb:14:58:f3:3c:3d:
b2:95:60:ed:49:6c:ef:5b:fe:09:09:e1:ca:8b:c8:
c3:3f:df:d8:ba:5c:06:4c:7f:69:a8:1f:13:b5:de:
4a:3d:a4:40:df:d8:0a:7c:91:40:b2:f9:78:78:64:
4e:e9:10:15:69:ec:95:31:c6:85:47:de:82:24:10:
f0:0a:a5:2c:1c:84:11:9c:22:ac:dc:d9:4a:e6:6f:
a7:48:51:9f:d4:29:86:3e:af:1e:53:d8:78:ed:a5:
20:fa:83:11:94:78:a1:fa:cb:95:69:1e:ee:43:e3:
74:56:49:9b:fb:b7:16:2e:61:d2:82:83:0a:64:41:
d4:c1:d5:a3:e0:14:f5:e1:5b:bb:32:a5:81:6c:1e:
e3:54:92:5d:86:25:da:bb:91:85:ea:f5:b9:3f:7b:
42:c6:2e:f8:92:c7:3d:6a:7b:4d:94:f1:fa:b0:b5:
8d:65:40:1d:b0:02:cc:f3:6f:34:d8:64:6b:f1:4f:
ee:ee:3b:2b:d6:4e:18:f6:9d:af:2b:1f:2b:26:c8:
74:6d:f9:84:9c:48:e9:a0:19:93:a7:82:f3:5d:e5:
e7:8f:ce:74:ef:e6:52:9c:4a:3e:58:48:16:56:98:
44:0c:83:2f:66:a3:30:13:df:7a:ae:ae:ae:a9:9f:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:41:F8:66:8B:EA:D9:50:30:A6:0E:A4:15:3B:33:A8:E2:59:BA
X509v3 Authority Key Identifier:
keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.144.0/23
Signature Algorithm: sha256WithRSAEncryption
35:7a:01:7f:b6:d0:6d:17:54:27:15:bb:89:5f:64:88:6a:3e:
e1:a9:6a:bb:81:b3:0f:00:85:9f:2c:eb:56:42:8a:88:11:b5:
1e:5a:05:8f:b2:b5:26:27:cb:28:c8:86:ff:84:6b:94:d8:ae:
ad:15:45:ce:24:fb:4c:4f:6b:9a:60:5f:02:ea:df:d2:a6:0b:
ad:2c:f5:cc:29:2b:f7:c1:43:d2:3f:73:dc:a8:71:d7:9a:d8:
1e:ab:de:8f:f3:59:85:2c:25:73:5c:14:d1:53:db:28:a2:bb:
d0:17:62:3e:30:d2:17:15:04:07:86:5f:3b:a6:88:93:1b:de:
a4:b4:7b:ec:14:25:7b:c4:a1:dc:07:c5:53:78:be:d6:22:ff:
4a:f9:b6:ae:92:11:e0:3f:0a:bf:f1:98:b9:68:69:78:04:8a:
a9:7c:8c:97:32:22:fe:6c:d5:ec:72:d4:2c:68:f3:5e:b1:ba:
a4:a7:96:37:8f:a8:df:66:d0:8d:af:e8:2f:6a:b4:0b:65:aa:
ef:e6:64:09:13:f9:5e:63:9a:03:1b:ae:7d:6c:52:87:32:c5:
52:a0:b5:72:e7:44:52:9c:a2:ae:d7:56:ee:8a:ef:d8:a4:36:
a8:8c:34:9b:86:cf:8f:e0:46:fe:b4:79:05:08:31:2e:19:89:
36:9e:86:d2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUwAgHqZVciZgycnnlF2UX++5B/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0
QTQzMTM3NDAeFw0yNDA2MTQwNTQwMzNaFw0yNTA2MTMwNTQ1MzNaMDMxMTAvBgNV
BAMTKDI2ODI0MUY4NjY4QkVBRDk1MDMwQTYwRUE0MTUzQjMzQThFMjU5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDrfXIBH1V/sUWPM8PbKVYO1J
bO9b/gkJ4cqLyMM/39i6XAZMf2moHxO13ko9pEDf2Ap8kUCy+Xh4ZE7pEBVp7JUx
xoVH3oIkEPAKpSwchBGcIqzc2Urmb6dIUZ/UKYY+rx5T2HjtpSD6gxGUeKH6y5Vp
Hu5D43RWSZv7txYuYdKCgwpkQdTB1aPgFPXhW7sypYFsHuNUkl2GJdq7kYXq9bk/
e0LGLviSxz1qe02U8fqwtY1lQB2wAszzbzTYZGvxT+7uOyvWThj2na8rHysmyHRt
+YScSOmgGZOngvNd5eePznTv5lKcSj5YSBZWmEQMgy9mozAT33qurq6pn1CnAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUJoJB+GaL6tlQMKYOpBU7M6jiWbowHwYDVR0j
BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw
MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz
MTM3NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0MGJkNmU0LWI0ZmItNGY0OC1i
ODNhLWFjYjhmMmQ3NDU4My8wLzMxMzYzMDJlMzEzOTJlMzEzNDM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBOQMA0GCSqG
SIb3DQEBCwUAA4IBAQA1egF/ttBtF1QnFbuJX2SIaj7hqWq7gbMPAIWfLOtWQoqI
EbUeWgWPsrUmJ8soyIb/hGuU2K6tFUXOJPtMT2uaYF8C6t/SpgutLPXMKSv3wUPS
P3PcqHHXmtgeq96P81mFLCVzXBTRU9soorvQF2I+MNIXFQQHhl87poiTG96ktHvs
FCV7xKHcB8VTeL7WIv9K+baukhHgPwq/8Zi5aGl4BIqpfIyXMiL+bNXsctQsaPNe
sbqkp5Y3j6jfZtCNr+gvarQLZarv5mQJE/leY5oDG659bFKHMsVSoLVy50RSnKKu
11buiu/YpDaojDSbhs+P4Eb+tHkFCDEuGYk2nobS
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:40 2025 by rpki-client