Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa
File: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (raw, json)
Hash identifier: dqeWLF8yPtXdR/2P9eR9lA9pFgZLicVoP0/MTtzNvb0=
Subject key identifier: 05:C7:BB:B3:69:95:1B:41:E2:DD:4C:05:12:7F:91:C9:8B:78:CE:6E
Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4
Certificate serial: 43AFD484FD6C17E1A08B880EF9118660CE539BFF
Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa
Signing time: Wed 12 Jun 2024 06:59:22 +0000
ROA not before: Wed 12 Jun 2024 06:54:22 +0000
ROA not after: Wed 11 Jun 2025 06:59:22 +0000
asID: 139937
IP address blocks: 157.66.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:af:d4:84:fd:6c:17:e1:a0:8b:88:0e:f9:11:86:60:ce:53:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4
Validity
Not Before: Jun 12 06:54:22 2024 GMT
Not After : Jun 11 06:59:22 2025 GMT
Subject: CN=05C7BBB369951B41E2DD4C05127F91C98B78CE6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:f0:b9:0a:04:87:9d:6a:60:4d:e7:09:3b:
0c:7f:28:51:6f:ee:4d:be:05:82:43:22:42:81:39:
24:0b:60:57:2b:f2:67:fa:a0:d4:a4:58:24:18:55:
e5:05:6a:c6:2b:c6:cc:e0:90:0d:3d:25:51:b1:2a:
c4:a4:a4:fc:5c:ce:f9:e3:a6:23:a9:1f:e9:4a:88:
da:5a:83:0b:86:43:c0:ed:d8:74:84:ec:da:5a:ef:
f2:64:c7:c8:41:b8:04:68:50:c1:64:00:f7:c0:97:
95:ad:a1:12:60:f5:01:85:34:73:2a:89:a5:17:8b:
f9:53:a9:bd:16:62:f8:78:20:10:0b:b9:f4:11:8d:
d9:91:71:f1:fc:b5:67:e3:a8:d9:7f:c9:41:c5:75:
e4:f1:88:c3:ef:79:f3:d4:15:fc:d2:47:06:69:d4:
13:e4:5b:74:d9:17:b2:30:55:4c:45:85:51:56:f3:
a2:3b:03:06:7a:73:2a:62:69:0f:4e:21:08:02:6f:
90:21:9b:3c:de:5b:d1:4a:b1:3e:c4:a4:7f:48:cc:
f0:40:e6:e0:28:1c:8f:29:f8:c1:23:c6:57:f8:a2:
4a:a3:cc:71:a9:14:7a:7a:b6:b4:ba:94:c6:ec:61:
ed:e6:3f:bf:d4:bb:26:21:2c:69:c5:86:f5:b2:48:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:BB:B3:69:95:1B:41:E2:DD:4C:05:12:7F:91:C9:8B:78:CE:6E
X509v3 Authority Key Identifier:
keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:be:4c:e7:28:7f:06:fb:f0:bc:d0:1e:18:94:85:38:a9:15:
64:03:a4:b8:c2:b1:99:20:58:7b:fc:b1:88:62:53:94:a5:72:
a0:e4:b2:ea:90:50:81:e6:2d:5f:1c:11:ed:75:b7:7a:cc:5e:
ae:13:4d:cb:6a:1d:25:97:06:c4:da:06:f5:9b:f2:42:cb:9a:
33:f3:a9:af:96:e3:43:e9:f5:85:e3:9e:69:8f:a7:c4:2b:c0:
4a:c5:17:f6:ef:a4:02:6f:5d:3b:e6:5e:24:4e:12:c8:f0:00:
66:58:2c:1e:6b:d7:df:34:e9:e8:c6:22:04:a8:7d:3e:49:2e:
c6:92:39:97:a4:de:aa:e5:eb:6e:37:48:48:4e:92:7c:fd:1e:
5e:58:9d:bf:8a:cb:e5:33:05:96:da:a7:a8:f2:d5:c4:c0:7a:
b7:77:2c:52:9e:fd:ad:2c:97:71:ae:8d:b5:f4:dc:07:30:69:
72:72:b9:0f:e4:81:db:48:45:79:c2:ab:cb:ff:1f:49:a7:08:
f5:05:99:cf:6d:fa:7a:a9:3e:6f:d2:6e:15:26:b3:ad:cc:34:
7b:15:8c:e8:fa:07:32:aa:9a:45:88:39:2b:57:87:48:9c:06:
b5:fb:3c:30:6b:4c:91:23:72:8e:78:e9:bc:f0:a0:26:71:75:
5a:83:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:49 2025 by rpki-client