Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
File: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (raw, json)
Hash identifier: n+/1ZzwG4EgdsUBMybZxOh7Up3KgHvNTAiUa7eDfLu8=
Subject key identifier: 87:D3:C0:59:C4:3E:00:A0:2B:48:BF:30:1B:B9:6B:90:28:D5:25:FC
Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD
Certificate serial: 15E0A9B81F12532915BA606BAEDCEDA2C2518610
Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
Signing time: Tue 25 Jun 2024 14:15:12 +0000
ROA not before: Tue 25 Jun 2024 14:10:12 +0000
ROA not after: Tue 24 Jun 2025 14:15:12 +0000
asID: 152800
IP address blocks: 160.22.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e0:a9:b8:1f:12:53:29:15:ba:60:6b:ae:dc:ed:a2:c2:51:86:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD
Validity
Not Before: Jun 25 14:10:12 2024 GMT
Not After : Jun 24 14:15:12 2025 GMT
Subject: CN=87D3C059C43E00A02B48BF301BB96B9028D525FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:0a:3a:eb:95:8c:10:47:2a:43:42:d5:b7:
56:a2:63:72:56:b7:fb:10:0b:17:a8:60:ba:fc:57:
f1:f7:a7:a8:27:15:62:a9:1f:ac:a2:a0:da:c6:a1:
43:88:aa:19:74:b9:40:23:80:6b:cd:1d:29:ef:18:
8c:ae:d6:57:35:62:bd:6a:4f:2b:b3:e9:a4:05:66:
2a:2b:c1:a7:4d:af:c2:88:7d:10:0d:d1:85:45:01:
35:32:2e:77:90:01:8d:7c:6b:4a:09:2a:9f:94:6b:
ad:a9:bd:90:76:54:1f:76:50:1c:b4:6b:e2:84:bd:
14:01:2c:33:d5:e9:ed:13:0c:1b:75:7e:83:4e:2e:
9d:1d:42:d4:d6:f1:5e:cd:11:c5:6a:ab:64:af:14:
58:c2:4a:4c:d7:f4:c6:59:70:f6:22:ad:f8:1d:5c:
43:51:2b:fc:c6:ea:b0:ae:35:c6:b5:ce:33:44:57:
5f:76:2e:27:cc:87:42:7a:4c:4f:17:80:f9:c0:9e:
ce:1d:a6:d1:0f:29:b5:6a:8c:d8:f5:08:71:23:4e:
74:ec:17:7c:6f:db:e8:10:49:42:72:81:c6:f6:aa:
38:83:1c:43:c8:29:7d:ba:d5:2e:f5:39:f5:b8:24:
25:b5:c5:99:e9:ef:fa:79:a0:14:b0:1c:b0:81:16:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:C0:59:C4:3E:00:A0:2B:48:BF:30:1B:B9:6B:90:28:D5:25:FC
X509v3 Authority Key Identifier:
keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.25.0/24
Signature Algorithm: sha256WithRSAEncryption
13:45:63:ae:3e:7e:bc:d4:a5:f4:ba:a4:4e:95:49:c8:89:8f:
20:d8:f8:16:4f:19:fc:08:25:4f:19:e4:06:ce:02:34:63:0f:
54:4e:25:98:02:50:89:ac:83:cc:7c:ad:e3:a2:fd:ce:c7:e1:
07:69:6d:03:64:78:36:3b:b6:59:cd:c4:af:87:ec:e9:f9:c9:
bc:0e:48:60:59:54:42:fe:49:0c:43:5d:8a:37:c7:64:23:9a:
25:f3:9e:f1:3a:56:2d:5e:54:0a:59:4d:83:15:f1:82:67:fb:
97:46:42:56:99:1d:c6:e6:74:32:ff:2a:7f:70:6b:8b:82:e2:
fa:a6:73:b6:36:d3:a3:b9:9f:48:f8:b6:d6:f4:82:82:d9:6a:
aa:8b:c0:06:73:9e:ba:df:cc:53:e5:62:eb:9b:d4:e8:7f:94:
29:39:62:8e:09:67:9b:8a:64:60:79:c5:ef:71:53:17:f2:43:
47:b0:d1:cf:04:0c:be:f7:41:4a:75:aa:15:0d:57:63:0a:69:
fc:81:28:15:dc:8c:55:30:3b:2e:1c:5b:ca:a2:b1:87:13:63:
60:81:53:df:9a:ff:23:2a:0d:bc:3a:14:4a:1b:3e:bf:f0:37:
7c:8d:90:50:bd:fe:9f:5e:0a:b6:e2:92:ca:a3:32:6b:2d:a0:
27:77:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:35 2025 by rpki-client