Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136302e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3136302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: QLW09D6/5/+NVtx4TfZkBt4+8A7Y6O1omPK5VDhxLKs=
Subject key identifier: 1D:86:C3:09:B8:23:0E:C7:21:1A:EC:0B:4B:96:9D:0B:FE:DF:29:49
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 483EFE3C08768ED8A6DE6E307025D13C5787BDD4
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136302e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:05 +0000
ROA not before: Wed 20 Apr 2022 04:55:05 +0000
ROA not after: Wed 19 Apr 2023 05:00:05 +0000
asID: 24203
IP address blocks: 140.213.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3e:fe:3c:08:76:8e:d8:a6:de:6e:30:70:25:d1:3c:57:87:bd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:05 2022 GMT
Not After : Apr 19 05:00:05 2023 GMT
Subject: CN=1D86C309B8230EC7211AEC0B4B969D0BFEDF2949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:8a:60:d7:d2:66:ca:ef:45:2c:69:98:3a:
05:d3:1e:c5:ff:74:a2:de:73:d7:1d:69:09:26:20:
29:bc:25:94:64:59:b8:76:ba:42:09:86:ed:23:1e:
3b:df:c6:d7:78:f3:34:f1:6e:42:f2:38:f5:ed:bd:
da:9d:b5:4b:f5:14:32:1f:0d:5b:f5:1f:21:d5:c5:
4a:17:a4:42:d5:94:cf:91:8c:7a:82:4e:b9:8a:9f:
4d:f3:18:ee:c2:83:a3:65:b4:d4:b2:27:a4:5a:b7:
5e:fd:0c:72:b4:f9:e2:ec:72:e3:1b:f6:92:f1:d5:
fe:d6:cb:a5:58:44:4f:a0:31:02:50:3e:4c:31:aa:
c0:41:30:f5:5c:c4:fc:a6:da:f8:a5:8c:6e:70:1d:
f3:ec:52:a6:85:2d:5a:b7:69:e3:de:be:da:64:d1:
a1:4b:b2:1a:ba:c3:9f:f9:13:a1:bd:82:c2:1b:7e:
77:43:31:d4:70:80:59:88:b6:00:dd:d3:90:3f:2f:
52:8b:14:ed:bb:a8:fd:51:0f:87:fe:6a:a7:2b:cd:
11:09:89:cd:6e:e4:49:9c:ee:88:b3:3a:30:3c:d3:
a4:05:82:d0:9c:f0:6e:ee:08:18:be:c8:94:fa:f2:
9a:3d:a1:6b:84:75:70:75:b1:4f:5f:5c:24:cf:8e:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:C3:09:B8:23:0E:C7:21:1A:EC:0B:4B:96:9D:0B:FE:DF:29:49
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.160.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b0:36:16:b8:d8:ad:c6:e0:f5:e8:57:0d:45:29:60:16:5e:
68:64:48:45:28:ab:d5:14:c7:28:98:93:3e:9f:90:11:e4:f7:
06:46:bc:01:02:40:b5:58:ca:72:37:26:47:95:e7:fb:7c:28:
9e:62:d9:33:51:a5:c1:ea:cd:d9:81:c8:31:05:68:ed:2c:bb:
99:b6:0b:70:f7:03:d5:b0:cf:25:bc:95:35:20:a5:81:79:55:
4d:e3:b0:b0:59:25:d1:4f:ab:eb:70:87:74:bd:a9:9a:4b:5a:
ff:40:0e:55:49:44:c5:0d:80:38:06:57:21:af:82:30:ab:03:
ea:9d:b8:ed:2e:75:b9:c0:94:cb:d6:25:8f:b9:91:0a:07:78:
eb:1f:86:b1:07:66:f9:cf:17:e8:64:00:da:4d:72:80:03:39:
12:0b:b4:6c:08:96:79:dc:67:5e:0c:3a:93:09:c0:62:bb:5c:
7b:7a:e9:7c:31:d9:79:80:8b:71:e6:7f:ea:11:b1:eb:86:de:
1e:b5:8c:a2:c9:4f:29:19:65:99:70:be:53:04:6b:5f:75:38:
10:91:a3:86:35:69:54:c3:5b:1b:27:5c:04:32:34:bb:64:1e:
49:42:81:96:f1:5b:5a:65:cc:e9:6b:8a:51:1c:73:a0:e1:3f:
68:42:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:32 2025 by rpki-client