Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa
File: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (raw, json)
Hash identifier: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=
Subject key identifier: 86:25:71:84:BB:03:93:BC:BC:47:E7:8E:43:F4:39:46:E4:CC:39:89
Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89
Certificate serial: 78E1D383E65157B3A335F9F2249A587586077DF5
Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa
Signing time: Sun 09 Feb 2025 21:56:28 +0000
ROA not before: Sun 09 Feb 2025 21:51:28 +0000
ROA not after: Sun 08 Feb 2026 21:56:28 +0000
asID: 153085
IP address blocks: 160.25.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e1:d3:83:e6:51:57:b3:a3:35:f9:f2:24:9a:58:75:86:07:7d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89
Validity
Not Before: Feb 9 21:51:28 2025 GMT
Not After : Feb 8 21:56:28 2026 GMT
Subject: CN=86257184BB0393BCBC47E78E43F43946E4CC3989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d7:84:f4:0a:d1:d8:ad:75:91:db:67:7e:a8:
aa:42:10:3d:01:53:51:5b:41:df:4c:f2:f6:89:7e:
aa:13:34:d6:54:47:e8:37:7c:bb:8a:f5:80:7a:60:
24:47:d7:f6:c9:8e:cf:5e:2a:22:50:be:08:5b:f8:
f9:65:e4:35:7b:c8:92:69:fe:97:03:4f:96:13:0d:
15:e9:17:09:1a:20:70:ac:4d:cd:9f:03:2e:da:61:
65:7b:46:13:c0:28:de:09:27:1f:d6:ca:a2:0e:1f:
e1:4e:41:cb:fd:04:a4:eb:32:fa:3b:5d:05:55:55:
79:4a:85:44:0f:92:4f:ab:2d:60:88:2c:a2:dd:0d:
f6:fa:e6:e2:24:7a:b7:8e:31:ca:9a:fa:1c:b4:3a:
29:f4:fb:cc:29:52:98:04:6e:46:b4:4b:56:c5:07:
91:94:c3:a2:a4:42:ca:14:be:4a:87:a3:13:22:bd:
0a:d8:6d:56:df:5b:c3:3a:f6:27:ac:f7:81:2e:3e:
e7:53:99:1a:68:a5:10:07:a4:f2:f8:69:b7:15:2c:
09:73:22:e3:5d:ff:6d:85:53:08:32:6b:43:a3:06:
40:c5:65:7f:da:e4:62:d8:21:07:7d:e0:91:da:29:
a4:56:1a:3f:31:26:6d:0d:65:1a:8f:e4:65:28:42:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:71:84:BB:03:93:BC:BC:47:E7:8E:43:F4:39:46:E4:CC:39:89
X509v3 Authority Key Identifier:
keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4a:6a:37:53:61:5d:d5:62:1d:6b:03:af:1b:7c:6a:51:b0:
b7:40:62:15:24:69:ed:ea:13:32:0b:46:ac:1a:30:bf:f7:7c:
c6:8f:d5:70:47:e6:fd:c2:7e:59:23:44:8d:fd:0b:4f:47:76:
e6:f4:54:61:a6:16:42:30:98:4f:ac:17:6d:1c:ab:81:b8:ff:
3f:be:3f:6c:fd:9c:3d:96:6a:4e:3e:d6:30:63:60:87:75:cb:
dc:59:1b:fa:de:d5:ab:1e:95:24:60:d8:32:5e:26:08:b5:48:
67:6f:9c:91:a3:9f:b1:63:14:9c:a8:73:9f:00:b1:9d:49:07:
2b:1e:31:05:ff:fb:3c:c2:54:98:68:cb:96:43:66:59:de:18:
24:6c:44:71:89:2d:29:d9:40:5b:e1:3a:53:6a:f6:5f:83:3a:
86:46:64:5d:33:e9:6f:b8:27:1c:6d:fb:69:e0:3b:82:18:8e:
31:f8:f6:f4:0d:d8:55:c1:38:2f:20:50:c2:2e:9e:bb:6c:fb:
bc:55:99:ca:ee:7a:e5:e0:2a:d2:68:03:fb:6f:74:af:37:25:
1b:97:99:cd:6f:cc:0b:d7:00:be:b2:c1:93:a0:ee:a7:75:f0:
1c:e5:e6:6c:97:45:a7:78:6d:40:09:7f:ee:8d:43:ca:ae:59:
0f:d3:a6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:30:03 2025 by rpki-client