Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa
File: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (raw, json)
Hash identifier: UdR2VsrcQEJLqL8yqAOv5eiXRwXBi0l4fctRzRTejQo=
Subject key identifier: 13:06:09:3C:A3:43:C2:26:0B:E5:91:39:D1:B3:22:FD:C5:1A:A1:77
Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC
Certificate serial: 1DF9DAF9F8E6C437CE951847D341409332131C64
Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa
Signing time: Wed 11 Dec 2024 07:04:04 +0000
ROA not before: Wed 11 Dec 2024 06:59:04 +0000
ROA not after: Wed 10 Dec 2025 07:04:04 +0000
asID: 153148
IP address blocks: 160.191.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f9:da:f9:f8:e6:c4:37:ce:95:18:47:d3:41:40:93:32:13:1c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC
Validity
Not Before: Dec 11 06:59:04 2024 GMT
Not After : Dec 10 07:04:04 2025 GMT
Subject: CN=1306093CA343C2260BE59139D1B322FDC51AA177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:17:02:0d:53:85:c0:fd:e0:4f:84:3e:be:
b1:de:d5:10:89:32:c0:34:2b:f5:20:fa:8d:fb:73:
40:48:4c:16:72:04:fc:72:21:39:e4:1f:2a:b6:df:
29:73:06:77:4e:4a:d5:ef:8d:fa:05:64:e1:a0:74:
6c:a3:e3:26:7d:87:3c:c0:f4:00:24:19:51:54:e3:
88:ae:c1:a4:d5:8c:a6:2f:f7:39:1b:dd:bc:c9:f7:
a3:a8:bc:56:e2:f4:68:15:14:02:b9:e8:58:de:63:
12:7e:38:2e:93:7f:a8:5f:6c:5e:34:93:78:4b:4c:
7b:7e:06:db:f7:32:dd:95:1b:01:d2:e4:66:3e:7c:
d3:b3:18:51:26:e9:bb:76:89:57:7b:e9:6e:30:22:
6e:ff:ed:95:af:5e:a6:36:d7:47:b8:2c:e7:ab:ee:
b8:15:00:f4:29:da:b7:4e:26:7c:6f:47:c2:ae:2f:
5a:e5:39:2d:27:2e:53:18:74:70:a3:c2:2d:7d:3c:
67:80:3b:93:9a:2d:09:73:77:79:a5:89:b3:4f:fc:
45:42:05:aa:66:2f:25:3b:d3:ec:ae:9b:c8:1b:c6:
de:5a:ef:7d:36:ce:63:74:5a:c1:ed:e0:62:7b:41:
21:22:ac:d9:56:3f:10:75:34:44:af:33:3c:a5:69:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:09:3C:A3:43:C2:26:0B:E5:91:39:D1:B3:22:FD:C5:1A:A1:77
X509v3 Authority Key Identifier:
keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:28:3e:fa:31:8d:8b:70:9a:67:35:18:19:dd:1b:d7:99:6f:
3a:11:08:41:88:b9:f2:65:18:79:2b:9c:ee:eb:a0:00:3d:6b:
c6:09:73:8f:bf:06:1d:5c:1a:e4:c7:40:3b:77:4b:26:df:03:
59:bc:26:22:9b:75:82:32:0b:6a:7c:4b:02:7a:f8:62:24:af:
5b:2f:08:72:91:f4:10:a4:9e:82:ae:db:9b:cf:6a:ef:db:95:
d4:6b:04:11:2b:57:f4:48:a0:1f:55:ec:3b:17:ba:56:92:2f:
88:b0:d1:97:29:5a:bd:93:74:d1:86:78:37:95:d3:44:6e:9b:
1c:c2:b4:ae:86:f3:dd:a6:43:e9:37:af:52:a8:63:d1:79:2c:
d0:46:16:c6:fb:f0:37:d7:38:63:c0:e0:de:09:d6:8c:75:14:
10:7a:a6:47:73:5d:53:67:95:69:68:6a:b7:95:6d:db:9d:be:
ec:c8:88:59:4e:27:bb:ce:cd:46:9f:1a:e0:42:00:28:97:7b:
5f:d1:32:a8:c8:6b:f5:84:0e:26:0f:a8:58:f2:da:65:38:e9:
31:c9:8b:eb:5e:b7:0b:02:34:87:d4:d9:6c:ec:49:b1:2e:d5:
61:e8:3e:5f:b2:cc:a2:02:42:69:81:b8:bc:6d:85:63:2c:69:
33:71:2f:c9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHfna+fjmxDfOlRhH00FAkzITHGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx
NURFRTdGQzAeFw0yNDEyMTEwNjU5MDRaFw0yNTEyMTAwNzA0MDRaMDMxMTAvBgNV
BAMTKDEzMDYwOTNDQTM0M0MyMjYwQkU1OTEzOUQxQjMyMkZEQzUxQUExNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/RcCDVOFwP3gT4Q+vrHe1RCJ
MsA0K/Ug+o37c0BITBZyBPxyITnkHyq23ylzBndOStXvjfoFZOGgdGyj4yZ9hzzA
9AAkGVFU44iuwaTVjKYv9zkb3bzJ96OovFbi9GgVFAK56FjeYxJ+OC6Tf6hfbF40
k3hLTHt+Btv3Mt2VGwHS5GY+fNOzGFEm6bt2iVd76W4wIm7/7ZWvXqY210e4LOer
7rgVAPQp2rdOJnxvR8KuL1rlOS0nLlMYdHCjwi19PGeAO5OaLQlzd3mlibNP/EVC
BapmLyU70+yum8gbxt5a7302zmN0WsHt4GJ7QSEirNlWPxB1NESvMzylaUuZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUEwYJPKNDwiYL5ZE50bMi/cUaoXcwHwYDVR0j
BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC
Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF
RTdGQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4MmE5YmQ5LTE2NmYtNDUzZS1i
M2MwLWU2YjNlZjkyYTU0MC8wLzMxMzYzMDJlMzEzOTMxMmUzNjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoL9AMA0GCSqG
SIb3DQEBCwUAA4IBAQCiKD76MY2LcJpnNRgZ3RvXmW86EQhBiLnyZRh5K5zu66AA
PWvGCXOPvwYdXBrkx0A7d0sm3wNZvCYim3WCMgtqfEsCevhiJK9bLwhykfQQpJ6C
rtubz2rv25XUawQRK1f0SKAfVew7F7pWki+IsNGXKVq9k3TRhng3ldNEbpscwrSu
hvPdpkPpN69SqGPReSzQRhbG+/A31zhjwODeCdaMdRQQeqZHc11TZ5VpaGq3lW3b
nb7syIhZTie7zs1GnxrgQgAol3tf0TKoyGv1hA4mD6hY8tplOOkxyYvrXrcLAjSH
1Nls7EmxLtVh6D5fssyiAkJpgbi8bYVjLGkzcS/J
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:47:34 2025 by rpki-client