Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32332d3233203d3e20313533313130.roa
File: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (raw, json)
Hash identifier: NjyYz1ga8Qpztk8z2OnelqpIaeIr9KbAHbFDRDS0sFY=
Subject key identifier: B3:75:F6:91:ED:1A:2B:06:56:3D:EF:B4:20:95:83:53:28:03:22:84
Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A
Certificate serial: 2D3231FDC3F4B264EF487C6131CD2D55D52D243D
Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32332d3233203d3e20313533313130.roa
Signing time: Tue 17 Dec 2024 08:54:34 +0000
ROA not before: Tue 17 Dec 2024 08:49:34 +0000
ROA not after: Tue 16 Dec 2025 08:54:34 +0000
asID: 153110
IP address blocks: 160.22.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:32:31:fd:c3:f4:b2:64:ef:48:7c:61:31:cd:2d:55:d5:2d:24:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A
Validity
Not Before: Dec 17 08:49:34 2024 GMT
Not After : Dec 16 08:54:34 2025 GMT
Subject: CN=B375F691ED1A2B06563DEFB42095835328032284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:90:bd:7a:93:16:2e:aa:de:a2:80:36:f6:
2b:50:59:a1:2e:31:23:bf:e2:6c:5e:6b:fc:28:4c:
8b:0a:da:68:36:9c:fe:4a:ef:87:74:4c:ae:38:46:
2e:51:40:d5:79:e7:fe:b4:5f:ba:7c:bc:b4:ff:aa:
d8:31:d7:3f:72:03:d0:2d:64:6f:be:bb:46:dc:aa:
fa:84:72:6d:e4:b3:17:11:54:e9:ad:20:c4:f0:1e:
33:10:64:25:eb:c7:7c:f8:65:fc:c1:25:c7:4a:ed:
18:3e:01:1a:1f:5d:42:1f:65:b5:f7:47:d4:61:d8:
f9:54:4d:67:4a:bb:09:f0:f0:f9:aa:0f:38:ac:00:
2a:fe:e0:d0:cc:1f:75:90:08:4d:f1:ea:fd:49:66:
c4:7c:5f:b0:99:e3:4e:d1:8d:93:24:19:27:f3:b3:
15:29:df:d8:a3:25:4d:56:29:46:2e:2d:cd:96:ca:
dc:e6:f3:ce:3a:81:54:eb:30:1b:47:b5:30:08:64:
81:07:12:35:8c:7d:27:29:d4:d0:d0:de:cf:b8:ff:
12:e4:be:ce:3f:5c:c9:20:5b:34:a4:17:3e:b4:09:
7c:6a:ec:0c:be:26:f5:40:67:cf:90:85:4d:2e:5f:
e2:16:ef:e0:86:db:d3:c3:5f:97:a9:48:64:de:02:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:F6:91:ED:1A:2B:06:56:3D:EF:B4:20:95:83:53:28:03:22:84
X509v3 Authority Key Identifier:
keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32332d3233203d3e20313533313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.94.0/23
Signature Algorithm: sha256WithRSAEncryption
15:51:4f:f3:eb:a2:d2:e5:8f:25:1f:af:87:92:48:75:07:3a:
e5:d2:dd:f1:34:2f:52:fd:15:8b:29:41:b0:2a:76:69:31:d3:
03:78:87:60:ab:22:b6:e8:d8:25:2f:d2:e3:c3:c8:b1:33:96:
85:4e:54:b3:98:5e:0d:c4:27:aa:1c:36:aa:f5:01:dc:eb:62:
93:a8:f7:8f:77:c7:51:42:3f:c1:ef:19:30:92:6c:4a:75:30:
29:65:2f:3c:2d:b2:58:55:6d:ed:24:ad:17:f7:87:55:b8:e3:
67:7a:cf:c0:f0:bb:3a:a7:25:f5:6c:3f:37:73:32:d4:72:6b:
bb:79:2e:d0:27:31:93:66:e0:26:26:1e:89:ac:b4:96:63:5d:
6b:b2:61:02:7d:13:b5:78:e5:4f:45:fd:96:a5:2d:b2:70:69:
8c:4d:71:69:9d:94:08:03:f3:b5:9f:02:71:25:4d:06:bf:19:
6d:52:d2:2b:82:d2:1d:42:cf:ca:6e:fb:8b:42:58:ac:70:b3:
53:a1:f1:51:8e:bd:8b:fe:91:cd:cd:3e:32:aa:3b:2b:de:ff:
7b:33:c2:6f:03:3b:3a:7e:c2:61:fb:22:bb:59:2b:a7:91:ca:
8a:92:3a:1a:10:e8:0c:7f:89:26:bf:57:93:13:85:67:50:38:
20:34:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:56:47 2025 by rpki-client