Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa
File: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (raw, json)
Hash identifier: qbLrPvZpuRQboHf20eAwQEqv0hdBrMoM2us7hcpzxVQ=
Subject key identifier: 66:6B:45:CC:1B:AB:EF:4C:29:21:A2:00:9C:62:51:8F:CA:16:80:34
Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753
Certificate serial: 665DB3E81D80992BFE2D916AD10491FAA9D1A380
Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa
Signing time: Sat 18 Jan 2025 05:29:16 +0000
ROA not before: Sat 18 Jan 2025 05:24:16 +0000
ROA not after: Sat 17 Jan 2026 05:29:16 +0000
asID: 153122
IP address blocks: 160.187.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:5d:b3:e8:1d:80:99:2b:fe:2d:91:6a:d1:04:91:fa:a9:d1:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753
Validity
Not Before: Jan 18 05:24:16 2025 GMT
Not After : Jan 17 05:29:16 2026 GMT
Subject: CN=666B45CC1BABEF4C2921A2009C62518FCA168034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:99:37:5d:ac:af:54:13:9b:3f:c0:4a:5e:
2f:9c:45:a6:8d:49:92:0c:38:b3:00:09:a8:54:a6:
66:b1:12:79:39:a3:7f:6b:63:5d:a6:a3:7d:cd:fb:
5a:ae:53:e5:2f:c4:37:13:2f:82:66:89:1b:f7:49:
26:6e:4e:2d:9f:30:33:98:3f:b9:6e:a8:07:dd:65:
76:1b:c0:fa:9c:b8:a2:ee:d7:03:56:47:db:04:c3:
68:60:d6:b7:b9:60:42:b2:14:36:9c:ad:0d:94:69:
f1:de:cf:76:fc:81:1c:ef:cf:d1:5d:29:2a:f8:be:
76:ce:91:e3:38:85:bc:e4:ab:62:b1:22:7b:52:4e:
17:83:17:d6:9c:c5:c1:c5:ff:9b:54:91:47:1d:b8:
e7:d5:b5:77:dd:63:91:05:44:4f:a1:7b:7b:12:84:
be:6e:60:7a:cb:28:36:e7:73:5f:09:cd:8a:2f:45:
82:8c:b1:8b:7c:83:9f:9d:99:07:d5:04:8d:bd:d8:
cc:69:36:d0:8c:9e:75:d5:e7:a0:90:d2:60:ed:d5:
e3:23:c3:26:d8:58:f3:73:51:96:d7:64:1c:ca:86:
83:25:92:27:0b:6f:43:99:95:0b:da:3a:3a:bc:bd:
e2:68:5f:46:74:85:39:1f:a7:e8:e0:8d:14:00:72:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6B:45:CC:1B:AB:EF:4C:29:21:A2:00:9C:62:51:8F:CA:16:80:34
X509v3 Authority Key Identifier:
keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.187.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:3d:23:58:e7:b9:05:03:d9:ff:51:c4:c8:62:95:05:ba:4a:
74:c6:e4:4f:80:47:50:60:11:98:f5:1d:6d:07:0b:1e:75:62:
89:59:25:ab:6f:30:4e:18:e8:60:72:3b:d7:c6:91:82:bc:77:
6e:65:fd:f0:a2:7f:6d:56:dc:70:91:32:d9:15:c9:f2:7e:ed:
f0:ff:09:4d:c3:07:7a:f5:5a:06:0a:9c:32:2c:e4:4d:5c:69:
b7:e0:f3:16:a3:67:24:00:7f:ce:5e:73:e6:b2:32:cb:09:f6:
6d:32:70:25:c7:a0:a1:8f:d4:80:be:97:30:ef:f8:db:8b:3c:
b2:b7:91:de:77:39:ad:a4:33:19:96:2b:13:af:60:ed:35:6c:
32:06:b8:56:90:8d:fc:3a:fb:1e:97:28:2e:94:e6:00:90:ca:
90:a4:4f:78:af:91:c9:d0:98:e5:e5:ed:d8:90:ba:9f:45:aa:
fe:4f:4a:b6:91:b5:f8:f0:99:8e:1d:8b:6f:3e:46:f1:a9:40:
a5:6d:49:43:4f:76:50:09:0b:89:cd:4f:6e:55:12:1b:46:5b:
d8:8b:34:41:8f:9b:21:52:bc:1d:64:11:8d:14:e7:41:82:18:
58:cf:32:98:27:85:df:71:7a:6b:a8:9e:5c:05:29:de:7f:a4:
d4:2a:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:53:34 2025 by rpki-client