Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36372e302f32342d3234203d3e20313532333737.roa
File: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (raw, json)
Hash identifier: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=
Subject key identifier: B9:6F:92:DD:5F:FE:65:29:1C:DD:BC:37:58:CE:82:88:06:48:F6:52
Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B
Certificate serial: 74E8D99329D9765B8300299E83BA7449DD23C8BF
Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36372e302f32342d3234203d3e20313532333737.roa
Signing time: Mon 20 Jan 2025 06:00:44 +0000
ROA not before: Mon 20 Jan 2025 05:55:44 +0000
ROA not after: Mon 19 Jan 2026 06:00:44 +0000
asID: 152377
IP address blocks: 157.15.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e8:d9:93:29:d9:76:5b:83:00:29:9e:83:ba:74:49:dd:23:c8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B
Validity
Not Before: Jan 20 05:55:44 2025 GMT
Not After : Jan 19 06:00:44 2026 GMT
Subject: CN=B96F92DD5FFE65291CDDBC3758CE82880648F652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:fa:50:a1:e6:74:4e:ac:58:98:0d:be:54:
eb:78:9b:82:6c:8c:ae:9f:de:ad:61:99:4d:f4:b0:
c7:fa:8d:a2:17:62:99:17:e9:37:88:3f:ca:8e:5b:
c2:9e:19:97:54:0a:d5:f9:95:77:15:13:6d:b8:eb:
07:6a:2a:37:50:09:b2:5d:bb:66:b1:ac:ae:f1:61:
c5:0f:85:fb:e9:1e:43:a3:20:1c:d7:18:e7:68:51:
04:74:54:14:55:00:4a:52:f1:26:45:c1:4a:fa:24:
55:c3:6c:f4:2d:ae:71:ed:e4:0c:73:9c:0a:39:6e:
5a:04:f5:19:10:e7:da:62:eb:ba:1a:9e:39:82:ef:
2e:56:10:eb:90:86:8b:1f:79:d1:09:94:14:85:d2:
c0:f2:12:d3:70:05:de:fc:06:a7:55:c1:3e:c5:13:
a5:97:98:60:5a:03:ea:a6:48:3f:21:8b:48:c1:43:
8a:0b:02:94:5f:34:a0:6c:74:21:f0:d3:ac:06:ad:
69:63:e5:51:7f:3a:2f:f9:e4:0f:9f:0a:31:ea:db:
43:70:27:04:8c:ce:26:d0:0b:b8:12:cd:56:1b:df:
d8:24:b6:ee:0d:15:45:9c:8b:8e:15:5d:09:52:4c:
77:56:36:2a:1a:b9:d7:b2:3c:10:e6:11:f3:1a:c8:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:92:DD:5F:FE:65:29:1C:DD:BC:37:58:CE:82:88:06:48:F6:52
X509v3 Authority Key Identifier:
keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36372e302f32342d3234203d3e20313532333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.67.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5b:ba:d4:da:3b:b9:59:3c:34:85:42:1f:5b:41:a7:e4:3b:
d9:c8:9c:55:96:0c:03:f1:62:07:5b:36:8d:8e:cd:8e:85:e4:
2d:af:d1:4d:83:88:0c:e3:98:e9:06:cf:64:76:54:c9:66:09:
0e:90:48:3a:49:87:b5:72:be:98:9e:3e:20:3a:38:1b:29:b1:
b7:37:12:a0:24:ee:75:dc:d2:15:f2:df:6a:1d:e2:0c:66:b7:
2a:db:5e:a1:ab:ad:1c:d0:fb:55:4d:b4:b0:ac:2b:91:16:2e:
42:12:5f:6d:3d:66:f2:61:95:74:08:fc:65:d7:0f:1f:d9:df:
78:5a:f9:1f:29:03:24:3c:5a:5f:7a:5e:9c:c7:b1:4d:2b:80:
01:e3:b4:37:a9:89:a2:a7:2b:20:e0:c1:d4:7c:f4:40:2f:c8:
a9:01:a2:e1:a0:8f:9f:c2:6e:92:4c:e8:98:bf:ab:a6:ae:e5:
20:f4:a5:7b:ac:d1:75:56:95:52:91:2f:80:95:f9:25:cc:93:
35:30:62:ee:7f:a1:26:96:a7:86:1f:a3:e0:ba:d5:0c:bd:0e:
28:27:e7:b7:ef:65:ee:1c:23:19:47:92:59:2c:a8:89:88:a9:
46:3d:a3:92:ae:6f:a1:86:29:4a:f6:11:ea:45:34:b7:6e:f0:
d1:ee:35:ac
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdOjZkynZdluDACmeg7p0Sd0jyL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx
NTYzRjY3QjAeFw0yNTAxMjAwNTU1NDRaFw0yNjAxMTkwNjAwNDRaMDMxMTAvBgNV
BAMTKEI5NkY5MkRENUZGRTY1MjkxQ0REQkMzNzU4Q0U4Mjg4MDY0OEY2NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuvpQoeZ0TqxYmA2+VOt4m4Js
jK6f3q1hmU30sMf6jaIXYpkX6TeIP8qOW8KeGZdUCtX5lXcVE2246wdqKjdQCbJd
u2axrK7xYcUPhfvpHkOjIBzXGOdoUQR0VBRVAEpS8SZFwUr6JFXDbPQtrnHt5Axz
nAo5bloE9RkQ59pi67oanjmC7y5WEOuQhosfedEJlBSF0sDyEtNwBd78BqdVwT7F
E6WXmGBaA+qmSD8hi0jBQ4oLApRfNKBsdCHw06wGrWlj5VF/Oi/55A+fCjHq20Nw
JwSMzibQC7gSzVYb39gktu4NFUWci44VXQlSTHdWNioaudeyPBDmEfMayHYDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUuW+S3V/+ZSkc3bw3WM6CiAZI9lIwHwYDVR0j
BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB
N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz
RjY3Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NGU4NzlmLTNhNTYtNGQ4ZC04
M2U4LTBlOWNjNjU3NzBlYS8wLzMxMzUzNzJlMzEzNTJlMzYzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PQzANBgkqhkiG
9w0BAQsFAAOCAQEAQFu61No7uVk8NIVCH1tBp+Q72cicVZYMA/FiB1s2jY7NjoXk
La/RTYOIDOOY6QbPZHZUyWYJDpBIOkmHtXK+mJ4+IDo4GymxtzcSoCTuddzSFfLf
ah3iDGa3KtteoautHND7VU20sKwrkRYuQhJfbT1m8mGVdAj8ZdcPH9nfeFr5HykD
JDxaX3penMexTSuAAeO0N6mJoqcrIODB1Hz0QC/IqQGi4aCPn8JukkzomL+rpq7l
IPSle6zRdVaVUpEvgJX5JcyTNTBi7n+hJpanhh+j4LrVDL0OKCfnt+9l7hwjGUeS
WSyoiYipRj2jkq5voYYpSvYR6kU0t27w0e41rA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:40 2025 by rpki-client