Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3136302e32322e39312e302f32342d3234203d3e20313533303635.roa
File: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (raw, json)
Hash identifier: 0OT1N5Rf9ROOY/Zt+fSYDh8hyIpfNlFvEpZdIjJrZrs=
Subject key identifier: F5:64:62:0B:B0:1E:A0:CD:92:07:4F:1B:C9:53:3A:46:44:30:0A:1B
Certificate issuer: /CN=3E08DEC2AE0EB41653597023376671331769A43E
Certificate serial: 1A0113191420D0A2F9832FED4E8E651309728054
Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3136302e32322e39312e302f32342d3234203d3e20313533303635.roa
Signing time: Tue 26 Nov 2024 02:29:48 +0000
ROA not before: Tue 26 Nov 2024 02:24:48 +0000
ROA not after: Tue 25 Nov 2025 02:29:48 +0000
asID: 153065
IP address blocks: 160.22.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:01:13:19:14:20:d0:a2:f9:83:2f:ed:4e:8e:65:13:09:72:80:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E
Validity
Not Before: Nov 26 02:24:48 2024 GMT
Not After : Nov 25 02:29:48 2025 GMT
Subject: CN=F564620BB01EA0CD92074F1BC9533A4644300A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:60:a5:57:35:56:b8:ca:89:7e:c6:87:28:
4d:97:be:c6:b3:5e:0f:76:3b:4a:dd:5f:ba:94:b8:
d1:34:f9:9c:10:b2:a3:2b:eb:4b:e0:fe:e7:01:99:
2e:b3:43:e2:3b:b8:bb:00:db:b0:90:9b:95:12:10:
1e:5a:a7:f1:c6:92:d9:60:2c:8d:df:e4:e5:22:f0:
f1:2d:b2:c0:9f:3c:3f:b9:46:bb:4c:54:44:06:1f:
89:7c:13:e1:95:9f:3b:0c:49:5c:91:f6:86:60:3e:
70:4d:ca:e7:5e:a5:23:b5:ec:36:80:f5:c8:da:ce:
13:9c:c0:2a:81:b2:af:15:fc:fa:31:01:57:67:62:
d9:da:88:c9:0c:f8:06:21:d2:a9:57:d4:ee:18:b0:
f7:c6:d8:56:84:69:b3:da:fb:92:0d:bc:53:db:e8:
81:a8:37:80:89:67:e5:97:b2:82:d4:77:30:ae:0e:
e6:9b:0d:47:07:57:51:2e:93:a8:0b:6a:fb:b6:62:
4e:80:d9:7e:80:29:53:ba:30:9c:db:2b:ca:42:de:
4a:bb:bb:55:42:30:1c:ca:ef:c3:24:b3:91:0a:75:
c8:40:43:2b:71:9d:b3:c1:13:52:a1:e0:8f:1d:53:
ce:2e:91:84:b6:42:5a:2f:ad:4b:3f:97:90:7c:45:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:64:62:0B:B0:1E:A0:CD:92:07:4F:1B:C9:53:3A:46:44:30:0A:1B
X509v3 Authority Key Identifier:
keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3136302e32322e39312e302f32342d3234203d3e20313533303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.91.0/24
Signature Algorithm: sha256WithRSAEncryption
34:41:a0:f2:65:37:5c:a5:45:96:ba:19:95:0f:0f:8b:d1:4a:
7e:bd:d8:81:be:31:d7:15:82:e5:f0:9d:13:9b:86:19:b1:a9:
4a:3a:cc:58:ef:bc:27:97:5e:79:60:01:1f:d8:6f:4e:c6:88:
3b:16:f9:97:ac:a8:95:96:48:af:c5:78:81:58:ee:f1:12:75:
7d:04:17:2f:53:ba:17:1b:7b:9a:f7:22:3c:9a:8e:21:97:31:
8c:3f:f2:74:76:b3:e6:5b:52:f0:50:c5:ac:57:c2:0f:ad:f2:
6d:37:c6:eb:a3:3d:50:36:0c:8a:ef:5e:e7:22:e4:26:ac:b9:
53:59:22:99:59:ce:88:26:53:81:d0:26:18:c8:2d:39:8c:bb:
2a:8e:7b:0e:5f:cb:6d:69:8b:1e:15:94:4e:fa:16:cf:f4:6b:
b4:a7:fd:4d:c2:76:8c:7d:d6:cd:92:22:47:b9:40:b6:fd:dd:
e0:dd:f3:db:1f:1b:b1:e3:25:f0:b6:b0:34:ce:4f:5d:07:2c:
26:8b:1e:a5:7f:c0:65:5a:3c:82:d2:21:e6:7f:85:ca:ec:dc:
9e:3f:93:55:4a:dc:a3:af:43:59:b4:3c:2c:73:08:14:f3:6c:
fa:93:91:7b:f0:e8:61:6d:75:eb:09:d8:f6:ea:86:e8:4e:34:
a2:00:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:15 2025 by rpki-client