Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa
File: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (raw, json)
Hash identifier: 5TysUWdf//ijZZADQg/kyk1hPl8L9rMcShCWekWYvss=
Subject key identifier: 64:F0:D2:C0:E4:29:64:73:B8:4F:67:45:82:26:C4:DE:6E:81:CF:77
Certificate issuer: /CN=D237DEA20D73B3F216B98336BA8307D913DDB257
Certificate serial: 61AFE73AE25D6C01C0F8536D20697F5565DCB187
Authority key identifier: D2:37:DE:A2:0D:73:B3:F2:16:B9:83:36:BA:83:07:D9:13:DD:B2:57
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa
Signing time: Fri 01 Nov 2024 06:04:24 +0000
ROA not before: Fri 01 Nov 2024 05:59:24 +0000
ROA not after: Fri 31 Oct 2025 06:04:24 +0000
asID: 152790
IP address blocks: 160.20.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:af:e7:3a:e2:5d:6c:01:c0:f8:53:6d:20:69:7f:55:65:dc:b1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D237DEA20D73B3F216B98336BA8307D913DDB257
Validity
Not Before: Nov 1 05:59:24 2024 GMT
Not After : Oct 31 06:04:24 2025 GMT
Subject: CN=64F0D2C0E4296473B84F67458226C4DE6E81CF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:3a:f1:2e:ec:e2:f1:37:a7:9b:71:09:61:
83:aa:8a:a5:42:59:9d:bc:da:20:a1:7f:03:08:91:
5d:c9:4c:ca:a8:d7:9d:27:e3:2a:23:c6:0e:aa:86:
19:e3:27:d9:64:d1:98:6d:df:4f:20:45:04:48:d8:
23:47:06:55:c9:c7:f3:95:aa:8b:ee:7f:f4:f9:ef:
ca:0d:ac:2f:a0:e0:f8:d9:b8:aa:06:6f:61:3e:38:
9d:bb:0b:3d:da:e4:d9:29:8a:aa:f4:26:11:38:78:
6a:79:84:26:7d:59:5a:78:e2:31:63:8d:d4:41:d9:
99:8e:80:99:13:d0:38:c1:d8:82:aa:bb:cf:bd:b2:
6c:b8:9e:17:dd:04:3e:5c:52:29:85:d4:b1:e7:1e:
b6:7a:1c:b5:b6:0b:18:0e:5b:82:b0:ec:1f:bb:21:
b7:40:7c:b0:f5:e6:95:8e:b6:60:2d:cc:94:15:b8:
a3:ff:dd:e6:63:80:9c:69:15:56:65:d3:57:9a:68:
f7:12:e9:4f:0d:88:1c:bc:66:ea:6c:52:9e:04:b3:
ee:43:b7:28:75:38:9c:92:56:6a:0e:31:4c:2e:58:
12:e3:01:0b:2d:0f:a6:e4:0b:b4:c3:ea:e6:8a:ce:
04:78:9e:f0:b5:79:74:24:4c:e4:ea:01:0c:73:f5:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F0:D2:C0:E4:29:64:73:B8:4F:67:45:82:26:C4:DE:6E:81:CF:77
X509v3 Authority Key Identifier:
keyid:D2:37:DE:A2:0D:73:B3:F2:16:B9:83:36:BA:83:07:D9:13:DD:B2:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:9d:1b:a3:14:73:16:03:83:bb:d5:c5:c5:50:6f:af:59:41:
d5:5a:6e:97:02:4d:18:bf:50:6f:14:e7:72:33:0d:2b:0e:1d:
41:23:99:e7:c0:67:d8:a9:f9:2d:80:8f:29:de:c8:87:a0:be:
aa:4a:83:f4:45:7e:e8:34:63:bc:8c:95:c1:c2:ea:d6:d6:ae:
3d:da:3b:f1:52:fd:85:13:12:1d:e0:25:0d:e7:25:fc:ad:b2:
f3:38:8d:2d:24:a6:c1:0d:35:a3:2e:87:80:c1:3c:2a:d6:c8:
23:46:ac:01:9b:58:f9:bf:f6:a6:fb:94:fb:98:6e:71:e8:6a:
46:b6:35:16:e7:ab:06:1e:ef:b2:ae:ef:7d:5c:6c:54:1d:c0:
13:59:fe:88:1c:bb:cf:70:fa:7c:66:88:2e:4a:77:e3:e3:86:
1e:d1:63:6f:54:56:04:da:3a:14:95:a7:d4:e9:7d:ea:e6:52:
0d:7d:98:68:77:ec:95:bd:8b:12:0d:6c:fe:52:03:0a:95:5f:
77:a4:e6:d5:86:c4:24:04:3c:34:e4:e2:7b:ed:fe:a7:ba:69:
e0:51:18:f0:33:c9:b3:4a:be:cc:57:c8:2e:db:88:f6:54:0a:
3f:88:0b:57:4b:9e:34:e2:ee:bc:25:f1:ad:54:a1:b7:18:af:
5b:5a:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:00:25 2025 by rpki-client