Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa
File: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (raw, json)
Hash identifier: ss2EJAnpKFiDc20LCUbPWRGzhNcuFuLtxPENwLK+/ro=
Subject key identifier: 7D:A0:45:39:BB:0A:6B:57:D7:49:B8:DD:67:C5:C4:07:77:92:2D:99
Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A
Certificate serial: 4B9B9C55B4957F2974C40088CD3D42BB30D5A9CE
Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa
Signing time: Tue 17 Dec 2024 08:52:54 +0000
ROA not before: Tue 17 Dec 2024 08:47:54 +0000
ROA not after: Tue 16 Dec 2025 08:52:54 +0000
asID: 153110
IP address blocks: 160.22.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9b:9c:55:b4:95:7f:29:74:c4:00:88:cd:3d:42:bb:30:d5:a9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A
Validity
Not Before: Dec 17 08:47:54 2024 GMT
Not After : Dec 16 08:52:54 2025 GMT
Subject: CN=7DA04539BB0A6B57D749B8DD67C5C40777922D99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:cf:89:64:75:33:7f:27:02:6f:0e:65:1f:
49:de:38:1c:f1:00:af:cc:26:f3:ca:f8:18:87:b0:
c4:2a:3e:c6:a1:46:75:87:f0:fc:3d:66:ed:71:f5:
e3:a4:ec:76:0c:ca:34:1b:34:d8:5e:e9:4c:c0:01:
de:d6:27:b8:be:a9:a1:8c:72:e0:ce:ec:70:68:c1:
f7:4c:ef:eb:df:65:4a:eb:94:bf:2c:bd:a4:a4:47:
1d:a9:31:74:5f:8d:26:e5:46:91:40:97:16:0c:5f:
30:52:62:3c:17:13:dc:3d:3b:16:32:cc:4e:52:7d:
3f:8a:a1:0b:28:48:f3:4a:ec:55:1e:1c:6d:40:c1:
cd:6f:e0:af:5c:bd:93:d7:54:82:2e:c7:61:5e:a1:
22:14:bf:c8:6d:71:44:7c:c6:6f:3d:68:97:ba:8e:
54:8c:ea:18:24:aa:93:bf:e7:b4:32:51:17:ea:56:
13:f9:a5:67:12:0b:49:2c:c1:9d:0b:a3:9c:d8:c2:
59:99:8a:d8:3d:05:f7:1b:38:ff:a3:00:cd:48:0a:
f4:5f:1d:18:eb:e9:20:a3:f7:57:25:62:e6:30:0b:
f8:6d:bd:c5:46:30:96:22:0b:1f:22:8f:83:33:f2:
bd:d9:fe:1c:d6:83:de:10:77:0e:ed:f2:9a:7b:93:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A0:45:39:BB:0A:6B:57:D7:49:B8:DD:67:C5:C4:07:77:92:2D:99
X509v3 Authority Key Identifier:
keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.94.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e1:50:9c:7b:12:6f:8c:b7:ed:3b:82:61:7f:1a:0c:2c:b6:
c5:45:fd:dd:5d:0c:33:9d:8d:ab:ad:da:6b:b8:80:7e:40:16:
94:09:23:41:ba:40:9c:ff:0a:8a:c7:e9:6c:17:bf:b6:0d:bb:
3b:7e:1a:5e:d3:8e:69:d1:46:65:58:a9:a8:40:9f:53:4b:0b:
b3:07:02:f3:85:6d:6a:d0:63:88:48:1a:4a:e3:fa:b7:d7:9d:
bb:a2:a9:94:e7:f0:e0:83:cb:ef:0c:83:3f:3e:6a:ef:08:f8:
53:4f:b3:61:ae:a6:88:69:6a:01:ec:65:e7:f6:97:fa:40:a9:
97:0f:d2:51:bd:73:a0:fc:79:ce:05:c8:52:9c:a7:68:bb:a2:
03:3f:16:be:48:cb:51:4f:86:ca:16:ab:8c:e9:b2:9e:a9:da:
19:d8:c3:ab:11:9b:4f:b9:11:0e:9c:2d:72:2c:a8:ea:03:b8:
28:08:20:41:e3:04:c1:8b:e9:9c:95:72:06:96:44:34:b8:41:
90:dc:0c:80:8d:63:b5:3a:4e:d4:01:27:36:55:88:66:79:90:
08:2a:8a:63:13:39:d2:c7:3d:09:82:ff:2f:06:da:3c:bc:11:
39:26:0d:5c:3c:70:0b:e2:30:49:d6:d1:0a:6f:87:23:df:64:
3a:02:42:b3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUS5ucVbSVfyl0xACIzT1CuzDVqc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF
NEJEMzUwQTAeFw0yNDEyMTcwODQ3NTRaFw0yNTEyMTYwODUyNTRaMDMxMTAvBgNV
BAMTKDdEQTA0NTM5QkIwQTZCNTdENzQ5QjhERDY3QzVDNDA3Nzc5MjJEOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoM+JZHUzfycCbw5lH0neOBzx
AK/MJvPK+BiHsMQqPsahRnWH8Pw9Zu1x9eOk7HYMyjQbNNhe6UzAAd7WJ7i+qaGM
cuDO7HBowfdM7+vfZUrrlL8svaSkRx2pMXRfjSblRpFAlxYMXzBSYjwXE9w9OxYy
zE5SfT+KoQsoSPNK7FUeHG1Awc1v4K9cvZPXVIIux2FeoSIUv8htcUR8xm89aJe6
jlSM6hgkqpO/57QyURfqVhP5pWcSC0kswZ0Lo5zYwlmZitg9BfcbOP+jAM1ICvRf
HRjr6SCj91clYuYwC/htvcVGMJYiCx8ij4Mz8r3Z/hzWg94Qdw7t8pp7k68bAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUfaBFObsKa1fXSbjdZ8XEB3eSLZkwHwYDVR0j
BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC
NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE
MzUwQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMDc3Mzg2LTMwMWItNGZmMS04
NzFiLTYyMzJiNWYzYmUwOS8wLzMxMzYzMDJlMzIzMjJlMzkzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWXjANBgkqhkiG
9w0BAQsFAAOCAQEAd+FQnHsSb4y37TuCYX8aDCy2xUX93V0MM52Nq63aa7iAfkAW
lAkjQbpAnP8KisfpbBe/tg27O34aXtOOadFGZVipqECfU0sLswcC84VtatBjiEga
SuP6t9edu6KplOfw4IPL7wyDPz5q7wj4U0+zYa6miGlqAexl5/aX+kCplw/SUb1z
oPx5zgXIUpynaLuiAz8WvkjLUU+GyharjOmynqnaGdjDqxGbT7kRDpwtciyo6gO4
KAggQeMEwYvpnJVyBpZENLhBkNwMgI1jtTpO1AEnNlWIZnmQCCqKYxM50sc9CYL/
LwbaPLwROSYNXDxwC+IwSdbRCm+HI99kOgJCsw==
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:24:15 2025 by rpki-client