Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa
File: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (raw, json)
Hash identifier: AQ/XbNtQ/usULfQJtLCL3mFKNbrAAIw3wfJcq0cJVZw=
Subject key identifier: 12:3D:17:3E:51:46:D5:CB:3B:C4:DE:FA:CA:C7:42:72:23:23:6D:87
Certificate issuer: /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
Certificate serial: 3186BBED94E48106CFB07E5B4287552DB01707D4
Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa
Signing time: Wed 03 Jul 2024 11:27:39 +0000
ROA not before: Wed 03 Jul 2024 11:22:39 +0000
ROA not after: Wed 02 Jul 2025 11:27:39 +0000
asID: 152800
IP address blocks: 160.22.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:86:bb:ed:94:e4:81:06:cf:b0:7e:5b:42:87:55:2d:b0:17:07:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
Validity
Not Before: Jul 3 11:22:39 2024 GMT
Not After : Jul 2 11:27:39 2025 GMT
Subject: CN=123D173E5146D5CB3BC4DEFACAC7427223236D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:9e:37:4e:32:05:67:a3:0c:12:44:a8:ac:
e9:be:59:01:51:da:82:a2:89:da:a6:35:e7:41:0c:
54:60:c5:f6:57:9c:41:8c:18:bd:56:6c:2b:77:49:
af:12:6c:0d:25:cc:5d:f5:3b:eb:70:23:49:c3:f8:
30:48:cd:8a:77:d3:db:7e:0e:e0:63:07:21:f3:bd:
14:51:b7:53:c1:61:b3:d3:46:07:88:1f:9a:73:bd:
ca:ab:4e:9d:f9:35:b5:14:21:a3:09:60:a9:e2:20:
ad:fe:17:7c:81:c6:87:f4:d5:8c:5a:a1:e9:e0:cd:
28:a9:4e:06:5c:de:a9:a2:7b:3b:2f:44:11:5b:29:
e6:d4:0b:d6:ca:51:b1:ae:21:23:84:5c:b4:24:97:
c6:d5:85:18:63:f4:7d:c2:aa:20:23:e6:16:da:8f:
05:98:1d:7a:7b:3c:c7:10:84:27:25:15:2f:e2:d3:
6b:ae:03:d4:60:73:d8:bc:ee:89:2d:e0:ee:d9:45:
6d:12:61:a2:f6:57:b1:01:f7:74:20:60:fa:6e:87:
fc:6b:a9:01:b2:09:91:50:ba:b0:51:f0:39:72:f1:
ef:f2:80:e8:06:8e:9b:ec:8f:bd:ee:64:dc:f9:69:
34:f7:d3:14:53:1b:01:1a:4f:03:e7:b4:2c:0a:1b:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3D:17:3E:51:46:D5:CB:3B:C4:DE:FA:CA:C7:42:72:23:23:6D:87
X509v3 Authority Key Identifier:
keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.24.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:3f:dc:2b:21:10:9f:8a:70:23:cb:96:ef:52:3c:72:d9:f4:
a5:80:6f:56:35:94:15:ab:f5:85:99:72:26:14:74:c0:0e:95:
c3:e3:85:90:92:ff:b5:5d:d5:4f:b0:7d:67:e3:87:0d:db:b6:
b3:c3:f9:8b:1b:7d:6b:cc:96:81:98:87:d8:f8:3d:91:c6:71:
2d:94:1d:5b:8f:31:3b:01:e7:4b:60:2e:83:29:84:29:a3:ef:
50:1c:69:66:21:f5:59:ae:36:7e:a9:92:d5:ea:e8:51:d3:2f:
6d:f8:d6:03:59:af:66:41:5f:91:81:b0:75:2d:ab:cb:b7:55:
9f:1e:93:a1:33:4f:11:9e:ac:17:3d:18:d3:c4:d2:d9:a7:9c:
a3:15:98:65:89:be:f9:ef:69:ca:9a:ec:e7:11:08:38:2e:ef:
10:90:8a:61:0b:43:9d:62:7f:41:f6:34:ff:5e:c4:c4:bd:ae:
d8:b6:dc:dd:3c:99:d6:5e:2f:b2:5d:30:36:9b:6a:4a:67:2a:
af:fb:15:2f:d6:62:f5:71:ce:cb:6f:17:6d:ac:9b:c9:52:7f:
d5:64:bd:cf:d8:e2:24:11:a8:9a:dd:45:67:5f:d0:3c:03:7a:
b6:56:d6:43:11:e7:38:72:11:2b:44:25:0d:f4:0b:8e:51:7b:
6b:80:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:32 2025 by rpki-client