Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa
File: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (raw, json)
Hash identifier: bOyeQBsCUPkjEJuoFJfo/gsC9zyThIVXOOR+IQS9abo=
Subject key identifier: 93:C6:F5:FD:38:53:6F:12:F9:88:34:85:93:72:74:23:75:EB:4B:51
Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D
Certificate serial: 0EEB2454C034A87969C17ED03D502354FE0A4610
Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa
Signing time: Sat 31 Aug 2024 02:44:50 +0000
ROA not before: Sat 31 Aug 2024 02:39:50 +0000
ROA not after: Sat 30 Aug 2025 02:44:50 +0000
asID: 152838
IP address blocks: 160.25.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:eb:24:54:c0:34:a8:79:69:c1:7e:d0:3d:50:23:54:fe:0a:46:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D
Validity
Not Before: Aug 31 02:39:50 2024 GMT
Not After : Aug 30 02:44:50 2025 GMT
Subject: CN=93C6F5FD38536F12F98834859372742375EB4B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:64:77:11:c2:c6:bb:c4:ea:e1:6e:c6:43:
86:66:18:f0:51:6b:25:cd:f2:13:8a:2d:86:91:98:
ad:2b:69:44:36:54:90:3f:81:c0:a7:be:10:23:89:
28:1b:41:99:19:a5:5c:d4:d2:3d:08:ea:91:51:ed:
17:ef:cc:cf:62:2b:6e:b3:09:91:45:9a:9e:66:e8:
a6:ce:8c:03:46:76:df:ac:15:18:89:25:a5:d7:e4:
ca:80:e6:64:20:5c:a7:c0:a3:8c:f0:d1:96:6f:18:
74:6f:f6:53:48:0b:87:5c:f3:9b:50:67:4c:19:d6:
d3:6a:cf:da:ab:c9:19:6a:4a:01:32:fc:a2:b5:4f:
ff:37:a1:45:64:ee:67:61:4c:d8:0c:11:59:67:50:
a1:13:b3:2b:c0:72:0f:8c:3d:48:3e:e5:c6:b1:18:
6d:bc:79:5f:79:a1:46:9c:89:ee:a4:2e:9f:e2:b1:
6e:5b:e7:1c:4d:4d:bf:b9:b3:8d:f5:24:cd:d2:63:
8e:52:5b:b1:f2:b5:a4:f5:b6:bf:8e:5b:21:3c:8b:
97:2b:bf:68:35:0e:d9:55:c0:a4:b8:2f:6a:72:fe:
fd:63:4c:37:ed:29:d3:c4:0c:d6:54:a0:f0:de:54:
10:09:a2:46:85:51:69:3c:14:95:3d:da:f5:5e:ad:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C6:F5:FD:38:53:6F:12:F9:88:34:85:93:72:74:23:75:EB:4B:51
X509v3 Authority Key Identifier:
keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.126.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d3:24:89:b4:69:04:53:a3:70:d7:52:58:b9:df:cc:89:c9:
ef:fa:9b:ef:4c:43:30:97:fc:59:b7:4c:3a:dd:63:fa:fa:01:
35:f4:39:87:26:a1:af:99:c6:a0:67:0a:eb:2f:2b:73:b6:43:
01:56:38:4c:09:e7:b2:c8:07:81:c1:c4:0c:c1:a0:b9:7a:60:
2f:a4:80:2b:76:ab:19:fd:dd:4f:51:e8:dc:e6:86:6c:5f:b7:
75:e0:29:8e:33:a4:fe:80:47:e3:e1:1e:f5:8d:4f:7f:56:20:
62:e6:56:05:bb:0a:49:02:3c:d6:92:22:c3:03:c0:53:a5:13:
a1:40:a0:e6:fc:1d:13:15:23:fa:12:83:3a:3b:a1:61:ce:d6:
a8:75:fc:cc:05:9a:10:71:3d:8b:54:8a:d3:93:37:0b:7c:5d:
70:51:f2:cb:bd:d5:f9:30:69:a3:55:21:ec:37:58:31:c0:1a:
2f:ce:8e:87:65:58:9f:32:93:80:70:38:7f:44:45:dd:93:6d:
3e:d4:25:9a:fc:01:d9:3b:7e:99:d3:53:8f:eb:dc:46:df:16:
fc:41:32:f6:b1:1b:0b:27:9c:b3:d8:c1:b5:1f:75:79:0f:7d:
d6:73:73:6f:c3:d9:9e:2f:91:89:82:67:6e:c7:5c:a9:09:d4:
30:e0:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:38:12 2025 by rpki-client