Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3232203d3e203538333831.roa
File: 3136332e35332e3139322e302f32322d3232203d3e203538333831.roa (raw, json)
Hash identifier: Ya/lW55lsjGACgmYKk9IBgoqx5LfhNZUCYI3ALAWrMU=
Subject key identifier: B4:75:28:AA:DE:BD:15:28:A1:B6:E3:AA:A5:CC:E2:34:EA:B0:24:8D
Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial: 05081B586F88903466D58AF6B99A9D4995DB442E
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3232203d3e203538333831.roa
Signing time: Wed 31 May 2023 15:59:43 +0000
ROA not before: Wed 31 May 2023 15:54:43 +0000
ROA not after: Wed 29 May 2024 15:59:43 +0000
asID: 58381
IP address blocks: 163.53.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:08:1b:58:6f:88:90:34:66:d5:8a:f6:b9:9a:9d:49:95:db:44:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Validity
Not Before: May 31 15:54:43 2023 GMT
Not After : May 29 15:59:43 2024 GMT
Subject: CN=B47528AADEBD1528A1B6E3AAA5CCE234EAB0248D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:c7:25:53:3c:f8:13:d1:7d:eb:2b:61:19:
ff:9b:ec:1d:24:cf:fa:89:2d:4b:17:5f:d2:d3:16:
70:29:ab:0f:83:d2:33:30:4d:58:d4:5f:76:01:4a:
5a:1c:da:0d:ee:ba:4f:43:b2:99:6f:a9:3d:0c:c2:
40:8b:54:eb:dd:95:77:0a:3b:b0:19:f1:16:7b:2f:
13:54:75:2e:09:12:22:c7:5b:34:8b:f7:57:61:6e:
c2:21:63:97:3b:00:40:08:a5:be:7b:40:dc:2e:a8:
5c:73:65:72:e5:b4:e3:6a:88:cc:10:be:35:68:6a:
82:70:01:ad:ce:8b:3a:4a:86:f9:51:28:b4:b0:ff:
e9:ed:28:c0:08:0f:f6:62:3a:6f:f4:42:b0:aa:5e:
4f:94:c5:60:d5:36:50:43:e5:54:8a:69:d0:de:80:
a2:dd:27:63:5e:70:05:2f:bd:31:2f:f2:87:3e:43:
79:f5:d0:c7:c2:c6:d9:dd:14:ff:3d:d2:58:16:04:
3b:b6:ee:6f:d5:51:ef:2e:83:de:7e:a1:cf:01:48:
81:9d:a4:0d:61:f1:94:ee:f4:86:57:66:a7:93:8b:
5a:56:dd:f4:31:10:98:aa:c6:fd:b1:45:69:58:d1:
55:e6:0b:68:94:e2:21:cb:3a:64:a2:61:a3:ec:9d:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:28:AA:DE:BD:15:28:A1:B6:E3:AA:A5:CC:E2:34:EA:B0:24:8D
X509v3 Authority Key Identifier:
keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3232203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.53.192.0/22
Signature Algorithm: sha256WithRSAEncryption
82:73:e3:f6:50:12:70:75:3d:bb:f4:74:39:54:10:ee:7c:a2:
3e:f2:9e:f3:ab:7b:85:22:cd:52:91:e6:6c:eb:e5:b5:8d:24:
d2:43:e6:d3:bb:9d:ce:4d:64:9e:8e:e4:b1:b4:56:4e:55:98:
99:e9:47:eb:55:47:a4:da:ec:57:4a:28:3c:54:19:b6:43:5e:
88:01:02:06:67:b1:c2:70:4b:8a:06:65:ce:c2:0a:1e:4b:33:
21:3e:fd:3b:9e:de:ab:71:e1:c3:03:5c:3d:df:f6:50:8a:f4:
54:1c:4c:76:83:d3:d1:f3:37:0e:ba:48:ce:11:f9:b3:ac:27:
99:29:69:f9:d7:01:75:13:b6:9a:2d:e3:42:99:0c:da:32:70:
a8:f8:8f:0e:f6:dd:ca:32:bb:70:56:4d:0e:8b:b4:d5:02:f6:
be:16:ed:ab:c2:35:c4:33:4f:03:f3:56:76:c4:17:36:a4:ed:
c6:ed:b4:0c:a8:3d:25:76:3e:2b:a8:a9:5d:16:95:15:05:c4:
5b:11:7d:10:de:38:30:c7:79:9f:97:d9:fe:3f:9c:02:6b:cb:
cb:65:50:b4:72:4d:6e:e5:79:77:be:b4:29:cc:81:ca:5c:ae:
bd:7c:8c:8d:71:79:f5:f4:35:c3:c8:eb:10:88:31:9d:8f:fd:
36:0d:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:03 2025 by rpki-client