Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3232203d3e203536323432.roa
File: 3133372e35392e3136302e302f32322d3232203d3e203536323432.roa (raw, json)
Hash identifier: rcz//AsSqiZg8aHXcowT/JjNbH5viCHfj8Kqlm0HRpc=
Subject key identifier: 65:E5:18:4A:EC:69:59:F6:56:F5:AA:72:4C:AE:04:7A:EA:1E:6D:D3
Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial: 6050A9BDEFCB29A56DD40E0FA51D971C7D7EA1C9
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3232203d3e203536323432.roa
Signing time: Sat 11 Mar 2023 08:00:00 +0000
ROA not before: Sat 11 Mar 2023 07:55:00 +0000
ROA not after: Sat 09 Mar 2024 08:00:00 +0000
asID: 56242
IP address blocks: 137.59.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:50:a9:bd:ef:cb:29:a5:6d:d4:0e:0f:a5:1d:97:1c:7d:7e:a1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Validity
Not Before: Mar 11 07:55:00 2023 GMT
Not After : Mar 9 08:00:00 2024 GMT
Subject: CN=65E5184AEC6959F656F5AA724CAE047AEA1E6DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:be:f6:e7:0d:7c:ca:37:81:12:c9:ad:97:
61:d7:84:20:6b:07:14:cf:4b:1e:05:7c:13:4a:a8:
ea:f5:80:47:03:8b:29:e2:1f:22:87:02:7a:df:11:
21:3a:79:4a:b3:f2:4e:32:7a:a4:1b:ba:9c:9d:6c:
20:34:73:29:61:0c:fe:09:55:fb:c4:66:c7:29:e9:
f1:92:ea:9d:c1:94:88:47:27:f1:3c:62:00:0c:43:
92:17:79:c3:36:28:c9:c9:97:34:a8:d0:e9:ce:e4:
df:d9:ec:31:e2:7b:d1:75:2d:ab:96:53:5c:92:ec:
05:47:5c:1d:0b:a7:88:22:ad:4b:39:71:b4:4f:a4:
4a:90:18:b1:98:3f:32:df:a1:b7:b4:81:44:6d:19:
8f:4c:2a:3e:3a:76:7b:5e:f5:ae:96:27:fe:4d:7f:
15:d5:79:5b:8b:bc:61:ff:b7:fd:11:f6:6e:35:2f:
d5:fa:45:6f:2c:ec:5f:57:69:8c:4c:2b:81:ba:10:
17:77:bc:49:51:76:5a:86:1f:d3:77:cc:1d:13:6a:
6e:f4:a7:a4:0b:c9:d0:38:bd:f1:c3:d1:f6:4f:35:
7f:76:b3:53:8d:df:41:1b:6b:32:4c:34:b5:1b:7c:
34:55:24:cc:94:cf:5d:e4:4d:11:16:e5:10:d8:62:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:18:4A:EC:69:59:F6:56:F5:AA:72:4C:AE:04:7A:EA:1E:6D:D3
X509v3 Authority Key Identifier:
keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3232203d3e203536323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.59.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:e3:2f:82:31:33:52:0e:38:66:88:25:6e:ff:b3:49:24:b6:
ea:da:52:ea:9a:b7:22:35:5e:0d:b0:a0:e0:c5:73:d8:67:b2:
08:d4:1a:d7:57:2a:3f:b8:d9:b6:28:5e:14:c5:d6:09:93:79:
7a:75:27:1e:be:62:bc:93:c4:99:d9:d2:01:03:8b:ef:5a:56:
fd:47:64:c8:d2:0f:68:25:38:63:e9:e7:7a:17:b6:8c:42:46:
ae:79:c3:6a:8e:c8:49:74:06:27:83:8f:ed:43:05:0e:b8:8c:
bd:23:b0:9b:c8:22:28:8c:d2:9a:30:09:01:f2:16:88:5c:02:
21:a9:5a:ec:2e:1d:e0:4e:21:44:f8:e6:df:66:4f:bc:a6:35:
86:ef:84:d9:a0:9a:2c:d0:91:61:da:30:db:79:69:87:c2:9a:
54:35:68:ca:30:45:8c:12:b9:b5:16:f2:e0:1b:f3:cf:73:54:
40:f9:61:b8:d2:77:86:44:da:a5:e5:04:4c:80:5a:38:8c:65:
c0:56:df:3c:44:9f:33:16:01:6c:09:dc:4b:5d:69:92:e6:b8:
42:06:2b:82:2e:7a:f2:2b:07:cf:ef:73:17:35:69:72:a3:12:
2e:48:d4:39:87:61:52:c4:3b:3d:fc:17:c5:95:f6:8a:dc:5c:
b8:3e:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:52 2025 by rpki-client