Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234332e302f32342d3234203d3e203435323938.roa
File: 3138322e31362e3234332e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier: P8D28JKFM06MNi05ib5wcU9FclilcMp00khEQOaFKnw=
Subject key identifier: 7B:2B:BD:E9:68:CF:EE:3D:9E:E4:AD:2C:42:C3:D7:4C:AA:41:E7:B0
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 07FCA76F506974D7DE1AE9034226D3C7AB23113A
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234332e302f32342d3234203d3e203435323938.roa
Signing time: Tue 25 Feb 2025 04:00:48 +0000
ROA not before: Tue 25 Feb 2025 03:55:48 +0000
ROA not after: Tue 24 Feb 2026 04:00:48 +0000
asID: 45298
IP address blocks: 182.16.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:fc:a7:6f:50:69:74:d7:de:1a:e9:03:42:26:d3:c7:ab:23:11:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Feb 25 03:55:48 2025 GMT
Not After : Feb 24 04:00:48 2026 GMT
Subject: CN=7B2BBDE968CFEE3D9EE4AD2C42C3D74CAA41E7B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:d1:0b:84:72:52:ed:b5:0c:8b:a4:f1:e5:
3c:f5:59:76:ed:ea:fc:2b:3b:7d:2d:88:d2:b8:3b:
c9:a8:ee:10:00:b8:07:63:c9:02:1d:1f:b7:98:f7:
a1:2f:bb:0c:c0:87:37:00:31:ed:fc:1d:de:ff:eb:
45:25:ed:75:9d:5f:c6:c4:c4:e6:01:5f:36:00:32:
87:72:17:de:27:d5:c9:3e:31:a8:af:30:db:db:ef:
55:9e:21:e2:e8:cd:7c:80:26:ba:cb:63:b8:2f:9e:
52:e2:23:bb:f4:28:2a:f8:04:6d:e9:bc:19:75:2d:
96:e8:e7:79:b8:c8:87:4d:46:dc:12:03:d1:7c:97:
98:c2:bb:c8:b4:89:c7:a0:7a:63:89:bf:e1:70:f2:
9d:de:4e:47:bd:41:2c:15:03:0b:0a:c6:ba:8b:3e:
a5:f1:f1:25:e4:c4:65:fa:1d:e0:1a:0a:6c:f8:9b:
65:dc:0b:5c:26:6f:eb:b8:ca:20:3d:0a:2e:67:5b:
3b:2a:92:51:fe:fe:0a:02:84:3c:02:d0:90:03:a9:
d3:26:fa:22:3e:6d:15:94:51:f9:43:a2:06:b9:4d:
03:2d:f9:42:4e:e1:5b:db:f7:e3:fb:b5:f2:47:80:
e3:44:79:4e:96:38:08:6d:5d:dd:80:8d:22:cd:8c:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:BD:E9:68:CF:EE:3D:9E:E4:AD:2C:42:C3:D7:4C:AA:41:E7:B0
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234332e302f32342d3234203d3e203435323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.16.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e3:c3:de:17:fa:56:1f:20:3c:c2:b2:26:fe:75:f3:c2:f9:
f4:fb:4b:6d:ab:37:b4:51:5b:21:e8:1e:ee:ec:43:a2:9a:8e:
6f:e2:60:c7:59:c4:7c:2e:8c:2e:8b:22:e7:96:cd:35:5a:a8:
02:8c:bc:77:81:02:8c:c9:f6:cd:bf:f6:54:79:60:86:60:5a:
03:c1:81:be:e2:03:a3:fc:15:b0:63:fd:38:3a:da:4d:90:31:
f4:f2:90:e8:8e:95:fa:99:d6:89:cb:a3:ad:9e:75:45:3f:e0:
63:ff:75:72:f6:d8:9d:95:36:34:69:19:b5:ad:b2:22:19:ce:
ec:0d:2d:8a:ed:c9:e3:b5:b9:2c:8b:9e:33:f7:20:b8:f9:58:
15:24:a0:97:9a:9f:f2:12:be:67:56:56:f7:fc:01:d5:9b:66:
e8:3a:2f:d3:74:43:aa:5b:2b:02:f1:86:a3:d9:59:69:82:63:
9a:4f:30:22:45:f8:bc:6c:e1:54:c8:43:df:94:3e:24:88:56:
6a:33:40:73:92:d5:f4:40:ba:96:ff:0d:80:27:98:6d:67:26:
a2:5a:a5:77:90:91:06:64:3e:f3:03:75:20:a2:39:e8:f5:f6:
b7:d2:98:df:75:19:84:56:d0:e1:f9:8b:0b:13:a6:12:e0:e2:
5d:75:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:50 2025 by rpki-client