Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32332d3233203d3e203536323432.roa
File: 3133372e35392e3136302e302f32332d3233203d3e203536323432.roa (raw, json)
Hash identifier: JBhAK8t5ip93cragGH3eioIX6S+/YI+QV76zfrKO8R4=
Subject key identifier: E2:BF:78:8B:8D:0B:CA:F6:2E:72:69:F1:7B:46:D3:C5:90:7B:DB:58
Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial: 56BC5DB0666C7D129DBB3AA7E1FF844605A1AC98
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32332d3233203d3e203536323432.roa
Signing time: Sat 11 Mar 2023 07:00:00 +0000
ROA not before: Sat 11 Mar 2023 06:55:00 +0000
ROA not after: Sat 09 Mar 2024 07:00:00 +0000
asID: 56242
IP address blocks: 137.59.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bc:5d:b0:66:6c:7d:12:9d:bb:3a:a7:e1:ff:84:46:05:a1:ac:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Validity
Not Before: Mar 11 06:55:00 2023 GMT
Not After : Mar 9 07:00:00 2024 GMT
Subject: CN=E2BF788B8D0BCAF62E7269F17B46D3C5907BDB58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:3c:5d:88:8e:bc:ac:cd:6d:63:58:3a:a4:
e9:f8:ca:cc:64:46:3e:94:96:61:cc:47:d1:ce:4b:
00:58:75:49:7e:60:30:d8:58:a3:ec:cc:34:eb:a6:
bc:6f:15:2a:33:4a:d2:0f:f2:af:38:2b:b8:cb:15:
9f:06:4b:50:e0:36:4a:c2:fc:f6:e4:24:d6:a0:2e:
44:18:dd:37:a8:48:2f:af:02:b4:71:fe:80:fe:49:
99:5c:65:14:16:83:95:2d:44:91:e8:c2:07:d9:56:
8a:a0:c2:ca:cd:b9:ae:f1:40:ab:86:c9:67:cc:e5:
76:21:ce:fd:5a:11:3e:d3:fe:1e:cf:52:0d:92:c1:
54:16:c0:93:a7:ee:fb:e7:28:ec:9d:ce:5b:90:53:
e1:e7:a0:66:e1:09:05:31:95:a4:48:1c:92:4d:32:
22:a7:74:88:99:97:0d:58:8c:c1:e9:96:f8:82:43:
1e:b7:51:4e:c8:a9:14:ee:d9:6d:7f:6c:c2:6d:89:
b1:e5:e0:88:d9:41:83:e3:65:f2:0d:2e:d6:6e:a6:
b2:d5:34:9a:1e:d2:49:c4:a1:77:26:95:23:51:ae:
a6:99:80:85:d8:78:f1:c5:b8:69:f7:bd:96:b6:6e:
3c:cf:3e:33:08:b2:12:2c:db:81:7b:e2:0b:18:a9:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BF:78:8B:8D:0B:CA:F6:2E:72:69:F1:7B:46:D3:C5:90:7B:DB:58
X509v3 Authority Key Identifier:
keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32332d3233203d3e203536323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.59.160.0/23
Signature Algorithm: sha256WithRSAEncryption
be:8b:09:e7:0f:17:bf:4f:3a:f2:82:ed:e2:ba:88:29:48:f8:
36:1d:f8:f1:c2:db:44:0c:24:c8:fe:8e:22:dd:dc:e1:1e:e8:
fd:9b:d1:df:ac:25:9c:68:6b:0c:a3:ab:ad:57:3f:dd:b5:1a:
f1:2a:4e:72:7e:6f:6d:e7:23:ac:b3:cb:3b:66:a1:14:2e:7f:
26:1c:ce:a9:2d:13:e2:08:77:cf:a9:5b:15:f0:59:0e:8c:ab:
15:7e:86:00:a2:4a:6d:ca:9a:51:68:14:ce:37:4c:fb:b2:38:
92:bd:3f:bd:cf:d0:f3:f5:1e:98:82:ac:9f:de:1b:a3:48:0b:
74:8b:52:58:39:a1:a8:cc:a0:55:5e:f0:55:f9:76:76:41:74:
71:35:a1:01:36:16:ac:71:2e:a0:a4:f0:61:fe:b8:a1:89:1e:
81:a4:7e:da:be:9a:28:02:b9:3a:79:0f:bf:66:ac:08:53:6c:
eb:60:9a:71:e6:1b:c3:e5:eb:88:2b:a7:bf:d0:09:37:24:51:
58:d4:ea:68:24:d0:67:a8:53:cf:d3:30:69:2d:cb:9e:ae:e5:
95:b8:ef:89:ce:80:cb:0e:a0:c3:13:29:31:ba:39:99:98:38:
01:a2:0b:6a:6b:51:4d:00:65:16:0c:9e:23:37:f1:61:e1:1f:
5b:52:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:30 2025 by rpki-client