Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa
File: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (raw, json)
Hash identifier: k9ZzAkFQGvt+xqoKJ82nD9k3QBtwiwB5qwFg/LMZg2I=
Subject key identifier: C2:05:44:D5:05:DB:F5:AE:EF:9A:82:2F:3C:17:D7:2E:24:E7:2D:6B
Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36
Certificate serial: 5884ECDE8EDAA6C21F55857C0FBDB0CD99B2AB7F
Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa
Signing time: Fri 01 Nov 2024 06:01:47 +0000
ROA not before: Fri 01 Nov 2024 05:56:47 +0000
ROA not after: Fri 31 Oct 2025 06:01:47 +0000
asID: 140456
IP address blocks: 160.22.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:84:ec:de:8e:da:a6:c2:1f:55:85:7c:0f:bd:b0:cd:99:b2:ab:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36
Validity
Not Before: Nov 1 05:56:47 2024 GMT
Not After : Oct 31 06:01:47 2025 GMT
Subject: CN=C20544D505DBF5AEEF9A822F3C17D72E24E72D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:65:08:9e:35:9b:d5:8e:11:55:ab:22:2a:
f6:04:6c:69:62:f6:9b:7f:de:f5:65:1b:db:d8:c3:
06:96:0e:84:d8:3e:92:a3:a0:ae:f1:b6:f1:ab:23:
d3:e5:d6:bf:bb:d9:33:b0:f8:90:a8:30:46:48:5a:
b4:2a:0c:3f:e5:42:df:aa:9f:44:1a:71:30:2a:fa:
f9:40:50:b7:db:19:55:69:d8:10:41:03:f1:e6:04:
a6:ec:e1:a9:9b:d8:6a:51:a2:c8:da:88:fb:1b:ec:
e4:50:e1:ff:ef:9a:6e:d9:84:50:54:6c:8e:75:85:
d9:4b:af:06:fc:4e:54:95:9c:60:55:6a:e2:31:05:
c4:bf:f7:d0:c4:2f:4a:5a:86:41:0c:1e:81:9d:d3:
04:1d:58:72:ba:d3:8a:17:c4:28:94:3f:fe:98:62:
8c:07:33:a2:d0:89:cb:4b:b3:d3:fc:53:42:45:99:
9a:92:f6:72:fa:ec:e3:d2:44:f5:c2:74:1d:af:a9:
6d:e1:5d:2e:54:b8:02:df:59:f5:72:66:59:4c:89:
7b:fc:db:cf:82:ba:8c:b2:52:1a:7a:4c:80:4c:5d:
cd:cd:5a:8e:44:de:c3:3b:68:bf:cd:de:03:d0:f3:
d7:39:fd:c3:a3:c3:eb:50:6b:2e:e8:18:c7:a5:51:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:44:D5:05:DB:F5:AE:EF:9A:82:2F:3C:17:D7:2E:24:E7:2D:6B
X509v3 Authority Key Identifier:
keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d4:32:7e:12:bc:52:c6:e4:1f:7e:28:c2:b0:79:c3:20:ed:
50:c0:5a:43:21:42:9a:c5:0f:86:a3:20:98:81:19:5a:7c:bd:
f3:30:8d:9a:d5:d2:63:8d:dc:35:0e:5a:d9:9c:15:85:16:54:
c7:8b:d8:90:81:f5:81:43:d0:78:d6:28:33:19:5a:5d:d1:c5:
94:2f:d1:ab:5f:49:d0:cc:f5:ec:f9:2f:e3:c7:47:28:9b:53:
ce:76:a1:af:c9:cf:16:2b:34:42:b9:46:60:46:18:3d:5c:a8:
6d:31:bd:ed:01:14:18:ca:1e:d9:3e:eb:c9:0c:4e:bf:65:2f:
77:bf:10:c5:89:e9:40:a8:99:be:66:b2:2a:d3:26:41:9a:2c:
a7:9d:64:7c:a8:0f:02:9a:86:0a:27:30:6f:d8:58:d1:4f:ba:
e3:80:dc:8e:cf:eb:32:f3:d7:6c:92:5a:5e:2c:c0:35:a5:cb:
37:ef:fe:90:6b:70:ab:dc:cb:e2:d3:5b:f3:81:1b:2b:eb:48:
68:3a:8d:51:df:0d:6b:4b:51:bd:28:ba:5b:b3:a0:36:c9:94:
6d:57:aa:72:01:ba:2b:d2:93:d0:21:79:b0:a3:f6:7a:e7:df:
6a:68:d5:bb:bf:ec:08:77:11:56:d5:e8:fe:3e:a8:60:67:9e:
03:3f:2f:ee
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWITs3o7apsIfVYV8D72wzZmyq38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF
OUIyREEzNjAeFw0yNDExMDEwNTU2NDdaFw0yNTEwMzEwNjAxNDdaMDMxMTAvBgNV
BAMTKEMyMDU0NEQ1MDVEQkY1QUVFRjlBODIyRjNDMTdENzJFMjRFNzJENkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aGUInjWb1Y4RVasiKvYEbGli
9pt/3vVlG9vYwwaWDoTYPpKjoK7xtvGrI9Pl1r+72TOw+JCoMEZIWrQqDD/lQt+q
n0QacTAq+vlAULfbGVVp2BBBA/HmBKbs4amb2GpRosjaiPsb7ORQ4f/vmm7ZhFBU
bI51hdlLrwb8TlSVnGBVauIxBcS/99DEL0pahkEMHoGd0wQdWHK604oXxCiUP/6Y
YowHM6LQictLs9P8U0JFmZqS9nL67OPSRPXCdB2vqW3hXS5UuALfWfVyZllMiXv8
28+CuoyyUhp6TIBMXc3NWo5E3sM7aL/N3gPQ89c5/cOjw+tQay7oGMelUcmfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUwgVE1QXb9a7vmoIvPBfXLiTnLWswHwYDVR0j
BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy
NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy
REEzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwOGFiMTU3LWQ4MjctNDlhOC1i
Yjg2LTI4YmUxMzFjM2QyNi8wLzMxMzYzMDJlMzIzMjJlMzIzNTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBb7MA0GCSqG
SIb3DQEBCwUAA4IBAQAd1DJ+ErxSxuQffijCsHnDIO1QwFpDIUKaxQ+GoyCYgRla
fL3zMI2a1dJjjdw1DlrZnBWFFlTHi9iQgfWBQ9B41igzGVpd0cWUL9GrX0nQzPXs
+S/jx0com1POdqGvyc8WKzRCuUZgRhg9XKhtMb3tARQYyh7ZPuvJDE6/ZS93vxDF
ielAqJm+ZrIq0yZBmiynnWR8qA8CmoYKJzBv2FjRT7rjgNyOz+sy89dsklpeLMA1
pcs37/6Qa3Cr3Mvi01vzgRsr60hoOo1R3w1rS1G9KLpbs6A2yZRtV6pyAbor0pPQ
IXmwo/Z6599qaNW7v+wIdxFW1ej+PqhgZ54DPy/u
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:55:06 2025 by rpki-client