Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa
File: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (raw, json)
Hash identifier: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=
Subject key identifier: B1:B7:DF:4D:E9:8A:F1:6C:0A:09:1A:12:F4:C1:C8:CE:43:4F:84:31
Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E
Certificate serial: 3B6C62AAC281E57639442D1B591EA0BAD2718028
Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa
Signing time: Tue 05 Nov 2024 07:35:08 +0000
ROA not before: Tue 05 Nov 2024 07:30:08 +0000
ROA not after: Tue 04 Nov 2025 07:35:08 +0000
asID: 153135
IP address blocks: 160.187.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6c:62:aa:c2:81:e5:76:39:44:2d:1b:59:1e:a0:ba:d2:71:80:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E
Validity
Not Before: Nov 5 07:30:08 2024 GMT
Not After : Nov 4 07:35:08 2025 GMT
Subject: CN=B1B7DF4DE98AF16C0A091A12F4C1C8CE434F8431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:9a:e7:65:96:38:7b:43:83:ad:82:32:c0:
38:ce:a1:f7:95:a7:eb:d6:34:5a:25:2a:68:58:b4:
94:0d:e9:d3:07:9e:b4:99:60:02:ba:30:ec:98:15:
77:a1:73:6a:1e:6c:e4:a8:e5:8d:31:57:ca:cd:e9:
86:c6:bb:0a:70:de:fd:a3:b9:d1:b9:26:ee:71:71:
c8:45:d9:48:8a:f5:de:08:a7:6f:8e:32:0c:b6:f8:
4e:bc:2c:e6:5d:21:a7:92:d9:74:35:b3:51:92:5a:
4b:f5:42:72:1e:76:9d:85:e7:d7:82:f2:27:7a:55:
3c:7b:90:c2:07:36:04:18:fe:92:05:44:39:34:7c:
0f:01:06:5b:9a:b3:2f:c3:ec:17:a0:ce:00:3a:11:
98:b8:16:39:9d:d8:ca:f5:f4:9b:8c:00:31:9a:5c:
e0:97:a6:ba:ec:08:be:1e:6c:a1:4c:2f:48:45:59:
52:48:e7:23:58:5a:3a:41:b2:20:c8:63:26:e1:51:
87:14:97:76:33:d0:42:bb:56:a3:97:bb:d8:07:cf:
59:73:19:e6:b9:af:99:75:0a:79:df:86:7d:04:0c:
c7:23:96:1e:2d:98:87:09:f0:9f:c8:b4:b6:3a:5c:
3d:77:bc:f3:46:01:96:d7:f0:9b:b8:58:ca:1c:83:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B7:DF:4D:E9:8A:F1:6C:0A:09:1A:12:F4:C1:C8:CE:43:4F:84:31
X509v3 Authority Key Identifier:
keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.187.174.0/24
Signature Algorithm: sha256WithRSAEncryption
63:42:10:1a:29:c2:b5:b6:16:6f:05:92:52:39:24:0c:26:af:
81:1e:ad:e6:b2:c3:63:00:94:d7:8c:5f:eb:65:9e:82:f6:94:
39:21:8a:e7:b1:00:93:f5:33:30:db:d6:5f:20:89:08:de:6c:
43:d5:18:63:c1:32:47:29:ba:56:f3:31:3a:35:47:aa:f1:3b:
82:4b:57:7b:e2:6c:c1:a4:32:97:46:a0:24:ac:c2:92:e9:18:
b8:fc:de:de:f0:7a:bd:25:fb:91:67:37:d7:79:1f:dd:46:b9:
d3:7d:c5:2b:a7:e8:fb:c5:d5:7d:de:82:7f:64:3b:7f:07:b9:
02:1e:86:f8:5f:10:26:b1:16:e7:57:ae:c1:fa:99:1b:2d:7b:
e1:83:dc:60:10:56:ef:3b:8f:85:e2:76:99:72:5c:bd:42:26:
2b:62:40:a0:e7:f8:10:97:ed:a9:99:9e:d1:bb:1b:7e:4a:e5:
3d:24:13:dd:7c:ba:83:a5:2c:57:75:aa:0a:39:19:06:8d:b2:
e3:6b:00:82:9b:da:2f:61:9b:87:8d:32:e5:4d:4a:70:e3:5c:
62:10:7b:a8:0d:55:f2:d1:3f:a3:a9:e7:9f:38:43:da:6e:e7:
f9:19:0d:f2:a6:21:a9:f0:16:6b:df:a2:59:60:45:fb:ef:ad:
67:11:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:59:36 2025 by rpki-client