Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3135352e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3135352e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: pT5m0ZT6iPwpwytFSmQZsYzZdrO7YPiK5/4PwkgDqVw=
Subject key identifier: 12:49:10:E7:58:EA:37:2B:CB:21:AA:7B:B0:EA:3F:C4:04:2C:4B:F2
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 67C35BE0B0A29BB9483ECFA34A059A73A0A104F8
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3135352e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:01 +0000
ROA not before: Wed 20 Apr 2022 04:55:01 +0000
ROA not after: Wed 19 Apr 2023 05:00:01 +0000
asID: 24203
IP address blocks: 140.213.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c3:5b:e0:b0:a2:9b:b9:48:3e:cf:a3:4a:05:9a:73:a0:a1:04:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:01 2022 GMT
Not After : Apr 19 05:00:01 2023 GMT
Subject: CN=124910E758EA372BCB21AA7BB0EA3FC4042C4BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:4f:b8:a6:59:b0:0b:6b:d7:b4:0e:44:f4:
e0:e6:81:d8:b0:78:c5:ac:e2:60:60:e0:b6:83:8c:
bc:4b:49:2a:01:9a:b6:b7:2b:b1:48:b9:62:0b:87:
c9:07:6b:6f:d4:36:0d:06:44:48:07:31:eb:9b:a7:
5d:07:4d:86:2c:d2:6e:27:12:6d:15:a6:be:b8:9e:
9a:79:a8:2b:90:39:63:23:ce:8b:a5:50:1b:e5:fe:
8e:c3:7d:bc:d3:aa:a7:50:72:7f:e5:8f:42:77:93:
cf:6c:c7:19:bc:10:95:97:53:85:c5:bc:99:99:68:
0e:bf:0c:48:fb:4d:c6:0b:1e:3c:8a:00:33:f7:4e:
17:a9:e5:2d:c0:6b:c0:ce:02:8c:cf:48:cc:41:18:
b8:85:3a:d8:8e:22:25:9d:db:89:d1:55:9a:16:43:
34:24:3c:0f:6b:61:28:e4:5d:13:fe:a4:9a:6e:c2:
3d:b8:e7:b0:c6:a1:1d:b3:45:9e:29:9e:b5:d5:ce:
1a:65:f0:ba:bf:c2:b9:de:36:50:9c:aa:ab:36:c6:
25:51:b0:67:51:57:28:a7:73:fd:8a:f9:5a:1b:4b:
c7:68:da:17:23:24:a5:0b:3a:d0:d4:82:93:e2:fc:
78:80:75:ef:dd:65:1b:8c:d4:c2:dd:48:1d:f2:dc:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:49:10:E7:58:EA:37:2B:CB:21:AA:7B:B0:EA:3F:C4:04:2C:4B:F2
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3135352e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:11:b4:8b:26:f2:4c:9f:e2:b7:6c:c4:1c:2e:d2:74:e7:24:
39:90:28:52:32:34:10:9c:b4:2d:a9:4d:0b:19:6e:34:71:8a:
ef:2a:91:d4:23:60:e3:3e:85:00:06:6d:12:01:40:b9:de:28:
44:94:75:36:69:45:f7:23:ea:be:a0:8a:79:09:8e:ef:54:12:
90:67:8b:20:92:b9:3d:20:55:87:56:5b:53:4d:10:ed:71:1b:
09:1c:92:82:9f:e8:c4:f6:ad:57:a4:91:28:9e:68:7d:1c:86:
f0:df:f4:25:68:95:a0:ed:64:6f:3a:b6:22:16:9c:e4:d8:62:
1e:c3:4e:17:86:c9:1c:f1:1e:a6:44:d8:cc:8f:4e:18:1d:10:
bd:ea:6a:c6:2b:d2:e4:ea:ee:71:9c:eb:ab:36:17:19:b6:3b:
6c:61:b9:e4:1e:90:ec:16:2e:4e:f5:81:42:c3:ff:15:a0:fc:
7a:5e:19:d2:6b:06:0b:59:dd:42:e8:3a:42:00:ab:c0:4f:05:
d6:7e:88:e4:ed:46:b0:41:29:9a:bb:b4:3a:69:2e:6c:bb:f3:
7b:af:1e:2b:40:da:8e:5c:7e:00:04:39:10:33:72:fd:b9:41:
75:13:39:32:58:03:14:e2:2f:b1:11:50:03:d8:7a:32:3c:ad:
09:78:3f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:28 2025 by rpki-client