Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa
File: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (raw, json)
Hash identifier: sWlaCPAtmIMRr2DxpJ25xh0gx4/gEACaEf8N+AdSR9E=
Subject key identifier: 55:04:FA:0E:55:8F:E7:9C:0D:68:79:85:3D:86:E4:F1:16:B4:6D:1E
Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D
Certificate serial: 7CED88F6709726ACA5C67DE0FED00E0368F324D0
Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa
Signing time: Sat 31 Aug 2024 02:48:05 +0000
ROA not before: Sat 31 Aug 2024 02:43:05 +0000
ROA not after: Sat 30 Aug 2025 02:48:05 +0000
asID: 152838
IP address blocks: 160.25.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ed:88:f6:70:97:26:ac:a5:c6:7d:e0:fe:d0:0e:03:68:f3:24:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D
Validity
Not Before: Aug 31 02:43:05 2024 GMT
Not After : Aug 30 02:48:05 2025 GMT
Subject: CN=5504FA0E558FE79C0D6879853D86E4F116B46D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b9:3f:f0:82:3a:90:52:48:d4:cf:ab:48:45:
a7:59:49:c5:0c:f1:34:f1:53:3a:8e:30:5d:9a:d4:
37:d1:d6:2b:83:00:3b:fc:74:c8:88:a6:da:a5:46:
05:81:f1:e6:d7:04:dd:8d:62:b6:d6:3a:b4:05:9e:
f4:da:75:c5:31:be:09:8b:a6:7e:ca:f4:49:0b:71:
84:4a:f1:00:67:61:29:1b:c2:e7:87:a6:58:b5:80:
36:3a:2a:f1:57:98:d7:f3:61:bb:79:30:e6:d4:b2:
4e:dd:03:98:f1:87:20:68:fd:9e:9b:ed:6d:e1:a5:
aa:9d:02:38:02:17:62:c3:26:16:cd:2f:32:63:58:
fa:97:c5:fd:86:17:86:d9:a6:f3:64:65:bd:e4:f4:
10:63:da:c2:61:26:21:37:de:d7:5b:17:86:f8:4d:
4a:a0:af:f4:92:02:24:1e:e2:30:82:1e:ef:ff:dc:
a1:f4:7b:4c:4b:27:0f:7a:12:20:2d:ff:58:23:1e:
36:c9:f5:fc:0d:27:62:fc:db:17:a3:74:90:af:8f:
7b:27:d6:76:34:93:e5:a3:ff:1f:00:9a:06:46:c8:
a0:7e:4f:b4:cb:08:77:45:41:38:1e:42:f0:5f:4d:
70:13:9e:7c:ab:66:93:65:9d:2a:ad:7d:59:a1:98:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:04:FA:0E:55:8F:E7:9C:0D:68:79:85:3D:86:E4:F1:16:B4:6D:1E
X509v3 Authority Key Identifier:
keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.126.0/23
Signature Algorithm: sha256WithRSAEncryption
77:69:a1:af:4b:01:56:80:79:4a:5b:be:aa:9c:24:c4:61:bc:
37:13:3e:8a:b3:16:0a:da:9a:8e:29:9c:36:ef:b9:d3:d9:2d:
c4:c4:a8:be:ba:f9:83:d6:0c:b0:1d:4e:3e:a0:04:d8:d8:10:
52:63:86:fc:40:9e:4a:f2:bc:c2:91:cb:e4:6a:39:e4:27:02:
d5:87:00:e2:87:6f:63:b7:aa:8e:53:4e:82:7f:67:13:ff:dc:
07:e6:f1:df:27:aa:0c:12:4a:93:43:03:f0:38:5f:4d:ef:f5:
81:30:e8:b9:a5:f6:46:14:b2:43:f5:79:5e:14:da:be:60:4b:
ec:f5:16:86:68:92:54:b1:90:0a:cf:1e:24:91:7d:9b:c6:0a:
30:44:57:4d:43:9c:f3:6a:79:2a:48:37:b9:a1:67:7e:ee:40:
62:46:da:60:4b:89:ce:9f:5d:65:16:73:fc:d3:94:99:7c:38:
1f:a0:0a:64:4a:8c:08:aa:52:58:fa:c4:51:ca:61:8f:0c:da:
19:a6:dd:35:18:00:17:11:6f:e1:3d:19:7e:78:ec:52:d3:ff:
cd:7a:c4:93:d5:58:af:02:fb:b1:6f:4a:36:99:03:25:d1:40:
88:71:f1:c7:9c:77:b2:c5:a5:c0:df:1b:23:e1:a5:de:42:ec:
29:39:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:36:12 2025 by rpki-client