Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3134302e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3134302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 4l3SKW7kQr/5u8lnetZ4a8rRkzbAVwFVCRzNi3baj0U=
Subject key identifier: CD:5C:13:B3:DE:3B:50:8A:DC:3D:3C:7C:41:F2:91:40:7D:EE:02:23
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 47FFD6E868246B10ED1C416DF177F3BCAA17915B
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3134302e302f32342d3234203d3e203234323033.roa
Signing time: Sat 08 Jan 2022 17:19:11 +0000
ROA not before: Sat 08 Jan 2022 17:14:11 +0000
ROA not after: Sun 08 Jan 2023 17:19:11 +0000
asID: 24203
IP address blocks: 140.213.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ff:d6:e8:68:24:6b:10:ed:1c:41:6d:f1:77:f3:bc:aa:17:91:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Jan 8 17:14:11 2022 GMT
Not After : Jan 8 17:19:11 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:42:ba:6e:ce:37:5f:65:b4:bd:65:94:50:
34:87:46:67:aa:b0:82:6e:75:a9:0a:ba:76:19:11:
e7:d8:77:b5:5b:1a:b2:e3:d9:c5:dc:ae:ff:d3:ae:
04:7c:40:5f:a2:a1:72:6d:31:29:f5:f2:a6:2f:e2:
52:d5:16:e9:d7:8f:37:1a:ed:59:99:09:a5:87:19:
95:6f:b4:88:0a:21:83:55:44:ee:a8:ed:47:1b:e8:
fa:3e:5e:38:29:2f:f2:87:b3:e1:00:52:c0:6c:ba:
c2:80:4d:47:b0:e7:4f:33:c8:50:a7:06:1b:9c:22:
56:03:63:3f:ee:33:5d:55:0c:8b:c5:4f:b3:9a:b4:
1c:cf:c6:74:27:20:cb:f7:d3:85:06:e1:b1:3a:b8:
f0:40:03:92:56:9c:d2:f5:4c:7d:d0:c1:74:2e:d3:
1b:73:7c:12:7d:53:18:4d:79:e7:89:ca:2d:61:a0:
56:40:33:ec:64:85:58:6d:41:65:69:5e:08:dc:42:
79:fe:2e:87:e7:da:a0:d0:a5:6e:34:b3:10:6a:5c:
d1:5f:56:91:66:ad:3c:c6:54:19:c5:4f:dd:36:88:
52:ba:23:2b:a8:51:3e:8d:41:ed:c9:69:44:55:59:
22:f5:bb:f5:86:71:9d:55:4d:5d:3a:72:3a:d3:c2:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5C:13:B3:DE:3B:50:8A:DC:3D:3C:7C:41:F2:91:40:7D:EE:02:23
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3134302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.140.0/24
Signature Algorithm: sha256WithRSAEncryption
02:41:f5:b5:6d:d7:d4:14:7b:64:c0:91:83:4f:67:55:1f:81:
8a:59:f2:04:be:ec:bb:f3:05:27:23:8a:ba:21:8c:53:cc:96:
9a:b0:b7:9c:ea:e5:72:45:4c:6d:5e:97:de:aa:3d:d7:70:82:
2a:19:28:27:25:c5:85:c0:69:39:40:72:67:05:dd:1e:3a:1c:
e0:37:00:d8:5a:75:22:16:73:13:9d:f0:61:58:3f:98:ae:cf:
b0:34:27:d3:95:cd:df:35:cb:84:3e:85:45:1d:24:a3:f7:79:
f2:f8:02:fc:d8:29:3a:b5:c3:d9:4d:2d:34:6b:c3:3d:be:8e:
ae:7c:63:26:3c:37:a4:fe:f4:1e:3e:b7:8b:17:81:dc:73:cc:
fe:56:c2:75:2e:a9:2c:5f:7e:a5:a2:ca:78:a1:e0:af:d9:3f:
c6:cc:86:9d:8a:bb:a9:92:36:fd:12:a5:22:d2:5a:da:8f:ae:
8d:95:9d:88:8c:eb:47:5f:c2:98:f7:d0:b1:11:a0:9d:b8:68:
de:fb:98:e2:49:0f:51:bf:09:37:50:29:61:08:c0:cf:05:71:
29:8e:6f:5f:c3:fd:f9:60:1c:a3:f3:20:ea:1c:6f:d7:64:3b:
1f:71:66:d8:1f:f9:9f:db:0e:36:c0:72:98:cd:b6:ba:84:99:
34:72:1b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:30 2025 by rpki-client