Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa
File: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (raw, json)
Hash identifier: 1f4UXWKsOacyCVtxubj2AeJTPPvOpeqJnHyC0iziuxo=
Subject key identifier: D7:AD:95:90:2F:10:2D:2A:64:61:88:B4:2D:1D:51:3F:0C:73:3E:67
Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8
Certificate serial: 6A6553E3427A89D7B1C07529C33B65AF684BEC7D
Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa
Signing time: Fri 14 Jun 2024 13:08:23 +0000
ROA not before: Fri 14 Jun 2024 13:03:23 +0000
ROA not after: Fri 13 Jun 2025 13:08:23 +0000
asID: 152363
IP address blocks: 157.15.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:65:53:e3:42:7a:89:d7:b1:c0:75:29:c3:3b:65:af:68:4b:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8
Validity
Not Before: Jun 14 13:03:23 2024 GMT
Not After : Jun 13 13:08:23 2025 GMT
Subject: CN=D7AD95902F102D2A646188B42D1D513F0C733E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:23:d5:f3:45:8b:4d:80:d0:ee:22:0a:99:
ee:10:cd:97:8a:fe:fd:c7:04:ea:1b:2c:10:27:0a:
46:51:69:52:0f:ad:a2:9c:84:bb:20:28:e7:37:71:
84:93:61:e0:b6:02:a1:37:8d:69:9a:6f:5c:90:99:
28:8e:bd:d3:42:a8:9b:9e:03:d6:eb:67:b4:94:63:
9b:fd:3a:91:d8:f0:b1:b8:8a:b0:8d:f5:c9:47:48:
7a:9f:2f:eb:75:fe:5d:71:07:2b:ff:a6:be:8e:4e:
34:3e:4e:30:c3:1e:57:b7:c1:9b:04:1e:68:23:c1:
04:d7:5b:70:4f:9d:96:3c:b8:92:15:35:2e:67:9a:
5b:61:82:1e:d9:66:6b:c7:b0:c1:ee:36:ec:89:98:
96:6d:3e:33:91:de:15:40:39:c0:c4:2b:49:dc:8b:
74:a3:65:1c:d1:96:0e:24:33:be:2a:58:3f:3e:34:
80:08:eb:d1:b7:77:6d:74:b7:0a:e2:92:70:25:4e:
14:d9:5b:28:60:33:90:87:aa:bb:7b:18:94:7a:74:
9e:d2:6b:87:2d:77:e5:0b:a7:b8:c5:11:7d:0f:00:
4d:fc:5a:86:ee:65:4a:c8:88:e0:5f:b5:f6:32:dd:
8c:74:a3:a2:82:56:8e:27:87:23:3b:70:8c:c6:0c:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AD:95:90:2F:10:2D:2A:64:61:88:B4:2D:1D:51:3F:0C:73:3E:67
X509v3 Authority Key Identifier:
keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e0:19:7b:51:c7:5b:ce:7f:5f:ef:b0:f5:19:ed:cd:0e:0e:
cb:9d:c7:54:34:a2:d5:ed:ef:02:4a:a4:0a:93:c9:5a:87:3f:
ac:ae:06:d0:5b:e1:5c:e9:95:e6:63:e9:ed:59:11:af:82:a1:
88:ad:bc:d8:08:20:eb:97:74:31:51:d2:7b:5c:7d:0a:df:ec:
2e:f8:c9:2c:db:2b:80:a7:ee:2a:fe:b8:6c:c7:33:fc:a3:dd:
0a:25:b7:48:8f:0d:61:75:12:23:c2:6d:21:54:7e:3c:29:02:
28:58:9e:5e:63:f0:37:2f:84:45:4a:f8:44:5a:23:f0:d1:33:
50:e1:fd:71:b8:67:aa:d1:54:38:19:0b:25:27:5f:e7:f3:d8:
2c:dc:1e:cd:dd:d4:8e:46:07:15:84:b2:a1:f4:ee:e9:92:cd:
e7:38:6c:0b:19:cc:d2:fa:da:fa:ba:aa:56:82:9b:b0:e0:45:
11:29:37:7b:2f:bd:d0:54:97:e5:0a:3e:53:98:68:bd:0c:e2:
a1:a3:2e:51:e4:df:64:e2:fc:76:09:da:1e:0e:02:a5:3a:55:
3c:6c:2f:15:3f:82:f4:a5:ab:68:2e:31:f3:bb:57:3a:6b:de:
6c:8a:68:1a:5e:56:bd:58:de:10:62:90:e8:82:c2:e4:e5:4d:
76:03:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:37 2025 by rpki-client