Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa
File: 3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier: 0WNepwwfAO4ZO5UN5/kcClzIE4LLe4hUOYEzSPirPO0=
Subject key identifier: B1:CF:8B:AD:D6:0E:9B:17:8C:91:2A:D8:E5:BE:52:E9:60:D0:A5:4E
Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF
Certificate serial: 3DADF8D704543B48C09D403D8EE7876BA05FA1B8
Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa
Signing time: Sun 11 Aug 2024 09:00:02 +0000
ROA not before: Sun 11 Aug 2024 08:55:02 +0000
ROA not after: Sun 10 Aug 2025 09:00:02 +0000
asID: 63859
IP address blocks: 158.140.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ad:f8:d7:04:54:3b:48:c0:9d:40:3d:8e:e7:87:6b:a0:5f:a1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF
Validity
Not Before: Aug 11 08:55:02 2024 GMT
Not After : Aug 10 09:00:02 2025 GMT
Subject: CN=B1CF8BADD60E9B178C912AD8E5BE52E960D0A54E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:bf:d8:de:36:b6:67:ea:d3:92:71:b8:92:
c8:44:79:7e:a1:5c:c0:d8:f0:65:f9:d8:f8:ee:86:
a6:8f:2f:11:a7:de:d6:7d:0a:07:1a:f6:ee:6f:9a:
79:a5:58:58:1b:e8:aa:12:ab:47:0f:75:ea:b8:98:
44:c7:eb:f9:72:b3:62:41:e0:57:86:f7:3e:20:6b:
1d:c4:af:6c:7a:3d:83:d1:c2:1a:02:7c:ca:d3:8c:
4c:ea:f5:b8:a6:16:9c:21:ab:77:39:74:ff:47:f2:
e9:38:9e:ec:b2:5f:b8:29:af:5c:4a:67:77:22:88:
f7:cd:28:3f:e9:72:7b:ad:17:7c:f0:ad:62:92:08:
64:04:8d:92:eb:33:34:72:60:0e:9f:10:5f:26:0d:
69:a6:0a:03:7c:84:95:4c:32:ca:c3:18:a0:24:2c:
35:32:ba:1f:b4:e6:6d:a2:c9:a2:c4:2f:65:46:2d:
da:e3:02:89:63:61:05:86:0d:2e:4a:22:a0:ed:3a:
22:66:34:d0:b6:43:84:ac:03:9a:70:46:1e:dc:50:
49:43:e2:e2:ed:f4:3f:58:2f:75:75:a2:15:7b:eb:
c3:8e:f7:df:f5:0d:d0:d3:76:ea:09:e9:c5:3d:dc:
11:62:8a:7f:a0:47:1f:7d:5a:40:b2:b8:c4:df:e4:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CF:8B:AD:D6:0E:9B:17:8C:91:2A:D8:E5:BE:52:E9:60:D0:A5:4E
X509v3 Authority Key Identifier:
keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.140.165.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0f:b6:c0:f6:fc:7b:f2:f5:d2:1e:9b:76:70:b2:18:4c:ae:
ed:83:03:78:a0:a5:ed:31:84:02:de:19:14:8d:ef:39:7a:81:
59:2e:59:71:d6:2a:84:c6:3f:88:be:8f:62:41:c4:5f:0a:5c:
d9:1a:06:ea:b7:96:d1:f1:5f:45:32:0e:f4:b3:a7:7e:a6:9c:
1f:3c:be:c2:9c:16:c9:35:29:fa:22:1c:d5:44:8b:b9:8d:42:
fb:f0:f6:e5:25:79:06:32:94:44:ac:73:e2:ce:06:7c:0f:31:
f3:e5:b3:fb:72:be:8b:b2:fc:a1:13:05:b4:34:6e:df:2b:ac:
34:ae:e8:97:70:8c:5e:5d:6a:e4:73:39:67:47:66:28:bf:ca:
51:4b:b0:9a:9b:28:d6:29:48:52:7e:52:5f:27:2f:10:b5:26:
cc:40:58:6f:67:a1:17:3f:4e:be:8c:63:c4:24:7c:bf:90:85:
3b:e1:05:c7:e6:8a:a2:60:3c:f0:76:95:57:96:37:c0:4a:3b:
f1:d2:84:d4:c4:00:93:00:6f:fd:85:01:be:a0:3d:e9:7e:c6:
03:c3:96:04:e4:80:fe:55:df:9a:cf:98:75:50:c0:31:f9:60:
75:eb:fc:83:9e:80:50:2c:4d:af:26:29:2b:bb:15:2c:60:21:
1a:87:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:24 2025 by rpki-client