Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/3135372e32302e39382e302f32332d3234203d3e20313532343335.roa
File: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (raw, json)
Hash identifier: ITWrfeJDp0fwFBA4IaXmJBukJZtkza2QyRgZRaZccug=
Subject key identifier: 23:C7:96:60:73:8B:32:EC:E1:17:AA:FD:05:E8:3E:70:47:A5:49:41
Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Certificate serial: 6DB42F9CFF2D5EF7C948F5632389F5FAF0723D7C
Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/3135372e32302e39382e302f32332d3234203d3e20313532343335.roa
Signing time: Wed 11 Sep 2024 08:56:12 +0000
ROA not before: Wed 11 Sep 2024 08:51:12 +0000
ROA not after: Wed 10 Sep 2025 08:56:12 +0000
asID: 152435
IP address blocks: 157.20.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b4:2f:9c:ff:2d:5e:f7:c9:48:f5:63:23:89:f5:fa:f0:72:3d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Validity
Not Before: Sep 11 08:51:12 2024 GMT
Not After : Sep 10 08:56:12 2025 GMT
Subject: CN=23C79660738B32ECE117AAFD05E83E7047A54941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:f2:20:ab:6a:4a:30:c9:a9:8b:8a:af:56:
86:d4:bc:49:16:6c:81:a5:24:9a:db:09:e4:e5:99:
45:18:35:f0:55:25:11:36:60:f3:b7:3c:a5:87:b6:
f2:2b:cb:92:45:a0:33:4a:5e:36:04:6f:42:d4:03:
f7:24:3e:4d:83:62:14:a6:d0:61:fe:4e:47:2f:bf:
96:2d:91:c0:ae:43:be:df:72:ba:c2:06:6c:ae:c4:
8b:d0:fa:c1:55:19:19:cb:75:dc:1c:4b:43:d4:58:
f7:dc:47:69:4a:ac:4b:f5:94:1b:96:2b:87:58:99:
1c:16:c0:a9:69:e1:30:30:72:b6:18:f4:cf:2e:c0:
c6:e7:e0:2b:b2:6a:b3:5b:3c:6a:f4:48:4b:77:07:
e3:8e:1d:02:9c:c3:ad:08:e5:5a:17:99:22:02:3d:
2e:17:f6:57:c3:28:b9:ed:30:49:b4:31:8d:cb:57:
97:9b:f7:5e:34:9c:76:31:61:93:d6:93:eb:64:fa:
a7:fe:21:f9:3e:1b:29:cd:9c:79:5c:17:a5:e8:0f:
70:70:bf:72:d2:78:42:8d:19:e0:3e:30:51:8e:33:
f7:89:5d:9c:4b:cc:e7:09:dd:fb:ef:91:0b:da:41:
b8:d1:b2:c2:a5:4a:80:3e:59:4b:01:8f:3e:63:d3:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C7:96:60:73:8B:32:EC:E1:17:AA:FD:05:E8:3E:70:47:A5:49:41
X509v3 Authority Key Identifier:
keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/3135372e32302e39382e302f32332d3234203d3e20313532343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.98.0/23
Signature Algorithm: sha256WithRSAEncryption
af:82:01:82:cf:94:2a:89:f1:3e:4c:27:f2:33:15:7a:2d:b8:
14:70:54:a7:4c:f5:28:30:0d:55:d4:66:b3:dc:48:de:51:a6:
bb:40:c4:fc:34:cb:76:af:84:46:fe:cf:5e:46:15:55:76:9f:
a2:ca:9b:87:d1:d6:ef:f5:5d:d0:b8:64:ff:ae:d8:8f:fd:67:
b0:62:82:1b:d0:0c:9c:37:81:7e:98:00:bb:0a:c4:12:6f:b3:
65:42:4d:e4:b8:66:b7:55:6f:b9:a1:a9:7d:1a:af:8d:92:0a:
68:37:35:26:67:01:fb:63:1c:5c:98:77:5e:84:0b:9a:4e:27:
a5:4c:e0:2d:53:63:04:61:bd:a9:58:5f:b0:72:6f:83:93:df:
ef:b6:db:0f:87:cf:11:10:57:c9:80:7f:a0:63:04:5d:19:d6:
dd:25:18:b7:c7:c9:5a:81:54:ab:50:6b:88:78:8b:a5:ea:6e:
e4:4c:27:df:21:b7:a8:5a:c1:65:cc:9a:71:b7:cc:67:0c:c7:
39:bc:ee:62:07:60:6e:fa:ef:43:9c:3c:d4:38:12:0c:47:38:
57:97:a0:07:a8:8c:8a:0a:0e:a1:70:84:aa:02:8e:35:ba:ba:
75:74:a2:21:71:47:0b:99:04:58:91:f1:cc:46:c7:dd:ac:4c:
65:32:8e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:27:03 2025 by rpki-client