Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3234203d3e203538333831.roa
File: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (raw, json)
Hash identifier: /OfdPYALZiupMxs8iF6+SD24UB/8ZrzibAD0LeJLOAs=
Subject key identifier: 30:BA:B4:B3:F6:0B:E1:ED:26:07:49:67:7E:BE:93:AA:D2:29:86:32
Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial: 6E6E35379BB5F45922E7642204857D27B8FAA2AF
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3234203d3e203538333831.roa
Signing time: Mon 30 Dec 2024 03:00:04 +0000
ROA not before: Mon 30 Dec 2024 02:55:04 +0000
ROA not after: Mon 29 Dec 2025 03:00:04 +0000
asID: 58381
IP address blocks: 163.53.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6e:35:37:9b:b5:f4:59:22:e7:64:22:04:85:7d:27:b8:fa:a2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Validity
Not Before: Dec 30 02:55:04 2024 GMT
Not After : Dec 29 03:00:04 2025 GMT
Subject: CN=30BAB4B3F60BE1ED260749677EBE93AAD2298632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:1a:28:4c:a0:7d:44:f8:fa:31:c9:32:18:
a3:6c:4f:44:f7:bc:8b:db:77:cf:21:40:13:17:04:
46:63:f2:69:7d:0d:2b:34:b0:34:6a:c3:d0:70:a0:
24:c9:1d:82:23:16:f6:1e:37:12:c7:28:1b:5e:bc:
c4:68:49:c6:4a:12:9f:fa:2e:b7:d1:1b:e9:97:a7:
1b:e2:4e:3e:93:70:32:89:3e:87:b6:cc:21:fa:e0:
4c:09:db:b6:6c:d6:d9:0a:a6:d9:8f:59:a0:61:22:
0d:5a:20:7f:23:c6:aa:d7:08:51:4b:3d:f3:67:73:
03:b1:68:43:09:e6:9c:7c:64:dd:3c:87:41:25:64:
b2:95:bf:f3:4b:13:4b:e8:38:02:29:32:c6:60:5e:
ef:5d:24:d3:7a:4e:4f:2c:5b:7c:c9:e4:98:d7:34:
8e:58:e4:7c:1d:37:74:6c:74:3c:06:a7:34:7c:54:
22:26:6c:be:19:b3:d4:92:69:75:a0:71:3c:1f:9f:
86:8c:61:47:7f:5c:c2:c4:9b:fe:3f:be:92:47:a0:
b2:7e:91:3a:1c:db:dc:a5:79:ac:45:9f:8c:60:bd:
1e:3a:3f:6b:87:b2:01:7e:a9:0d:35:b5:35:ee:fa:
9a:c0:75:c8:4a:ff:ea:1f:dd:de:6c:ef:c2:54:5f:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BA:B4:B3:F6:0B:E1:ED:26:07:49:67:7E:BE:93:AA:D2:29:86:32
X509v3 Authority Key Identifier:
keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3234203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.53.192.0/22
Signature Algorithm: sha256WithRSAEncryption
13:07:4a:28:0b:bd:5f:40:04:27:0a:9f:92:5a:ea:81:77:54:
5e:52:a8:5d:cc:81:55:5f:0b:5f:f0:8d:2c:d6:14:d0:d5:d3:
ea:c2:7c:76:b1:b9:53:fc:8c:0e:06:f5:ea:12:15:12:94:61:
ae:32:e3:e3:48:df:70:68:de:df:80:94:99:cb:8d:2b:07:59:
20:9d:3c:d6:06:f1:94:c6:92:45:6b:58:8f:77:8e:18:c9:aa:
3f:9c:87:0b:53:65:24:4f:b7:db:5e:05:56:8f:43:6f:ae:19:
1f:52:d7:f7:29:61:00:0d:09:62:d3:c8:49:90:1c:9d:6b:c7:
6a:6b:3c:aa:24:09:f6:c8:f0:f8:48:59:71:31:5a:e3:0f:28:
0e:7a:16:18:98:c7:9c:fa:fe:83:8f:1e:9e:82:6f:6b:4d:be:
3b:11:1d:78:da:96:33:90:1e:d6:98:fb:cc:ec:09:22:f3:ec:
5d:60:b5:fa:16:c2:16:0b:aa:bf:14:44:ec:14:15:ac:cc:7f:
66:b0:fa:a4:f3:f8:22:1c:3a:1e:1a:9b:65:2f:a5:07:b4:35:
a1:85:cc:ca:f3:a9:e7:39:76:e0:4e:65:d2:7d:07:73:cd:16:
79:0e:24:ce:03:8a:45:8d:7b:ce:b9:c7:2f:81:75:d3:16:66:
4b:6c:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:37 2025 by rpki-client