Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa
File: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (raw, json)
Hash identifier: EwNPctz3GEA8b4HEhWJU+9J961tRLY7I9c2qIR6c9pU=
Subject key identifier: BB:6F:45:5E:7D:A5:AD:C2:B6:BB:49:3E:39:50:3A:77:E1:C8:6D:3A
Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial: 2BD5EFDD35493B177171F1B226B305A873CAC522
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa
Signing time: Mon 01 Jul 2024 01:03:17 +0000
ROA not before: Mon 01 Jul 2024 00:58:17 +0000
ROA not after: Mon 30 Jun 2025 01:03:17 +0000
asID: 45706
IP address blocks: 150.107.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d5:ef:dd:35:49:3b:17:71:71:f1:b2:26:b3:05:a8:73:ca:c5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Validity
Not Before: Jul 1 00:58:17 2024 GMT
Not After : Jun 30 01:03:17 2025 GMT
Subject: CN=BB6F455E7DA5ADC2B6BB493E39503A77E1C86D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c1:66:ed:b9:ff:24:93:47:f8:a8:af:93:5f:
c5:8e:4e:cb:a7:d3:a9:97:1d:f3:72:a3:d0:2d:6f:
4b:3e:59:4b:ed:8c:aa:62:d3:da:84:52:76:71:71:
13:5b:3c:21:73:38:36:1f:4a:27:fc:c5:7d:c5:3c:
c4:d7:57:4c:97:e4:09:f0:36:e7:24:0c:89:08:97:
9f:6b:a0:e4:fb:e1:80:62:33:01:fc:2b:41:55:1f:
2b:ff:4d:9d:cc:c5:18:31:22:9e:da:76:fa:b3:75:
1b:7e:06:92:7c:48:63:2b:1b:82:e0:fb:9c:1e:72:
42:8d:84:05:a4:28:df:80:4a:af:c9:8a:d0:93:44:
93:ab:71:6a:28:46:71:77:d0:3b:d6:3e:16:cf:91:
21:e4:4b:ee:b2:92:e6:cb:2d:80:48:82:16:72:80:
dd:d2:99:8b:9a:e8:5b:4e:1b:c0:dc:14:f8:61:07:
1c:77:6d:9f:18:db:ad:6e:62:48:f6:a7:8d:15:3a:
9f:10:2a:d7:f1:c8:b5:fa:3e:4b:be:47:0c:2e:f2:
0d:79:68:f5:ff:67:ce:96:8b:36:c4:ae:4a:a2:4a:
57:b8:2f:2b:6b:c1:75:5a:3d:4f:57:68:49:a4:15:
ce:cf:30:a6:bd:4b:66:cd:f6:7e:bf:16:0b:43:76:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6F:45:5E:7D:A5:AD:C2:B6:BB:49:3E:39:50:3A:77:E1:C8:6D:3A
X509v3 Authority Key Identifier:
keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.248.0/22
Signature Algorithm: sha256WithRSAEncryption
32:e1:34:8b:06:53:09:f7:06:68:f6:97:69:a2:be:50:ad:dc:
f3:f1:0e:fb:ba:28:9c:d0:98:e2:87:2a:b1:22:c2:9a:38:f6:
64:81:c4:05:64:d2:28:e5:a2:4b:2e:a4:66:5a:82:93:51:7e:
b5:0f:c5:00:0e:db:00:da:80:4a:c8:ca:85:fb:8b:7f:6f:19:
d0:9c:0f:75:db:04:a8:8e:85:dd:b4:da:58:4f:a4:f1:81:6d:
ae:55:61:76:09:eb:d6:c6:51:8b:da:fd:dd:fa:e6:64:b9:ac:
8b:bd:b5:fd:2d:71:a5:59:a2:8b:9f:dc:26:4d:2a:4a:fc:37:
2d:24:34:d1:d4:ef:1c:34:73:6b:cb:d5:95:18:a0:47:4b:3f:
cc:af:82:73:09:a1:7f:81:e8:5a:1f:a1:e7:d9:50:fd:f2:8a:
ce:7b:97:f0:f4:a0:1c:14:e6:a3:7f:3e:55:03:65:a1:5d:ad:
c9:0d:6c:6a:47:67:c7:4a:81:a5:53:ea:03:8a:27:86:20:fc:
c9:eb:aa:50:ee:d5:5b:d1:3c:8d:8d:7b:a9:0b:f1:a5:3c:73:
2c:56:28:d8:ae:d5:c8:b0:10:cb:c7:68:3a:43:1d:52:56:97:
11:ee:aa:26:d8:d2:6c:7b:60:9a:f9:99:15:7e:4e:ac:76:7e:
08:63:6e:c6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUK9Xv3TVJOxdxcfGyJrMFqHPKxSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1
MDU3QUNFNTAeFw0yNDA3MDEwMDU4MTdaFw0yNTA2MzAwMTAzMTdaMDMxMTAvBgNV
BAMTKEJCNkY0NTVFN0RBNUFEQzJCNkJCNDkzRTM5NTAzQTc3RTFDODZEM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwWbtuf8kk0f4qK+TX8WOTsun
06mXHfNyo9Atb0s+WUvtjKpi09qEUnZxcRNbPCFzODYfSif8xX3FPMTXV0yX5Anw
NuckDIkIl59roOT74YBiMwH8K0FVHyv/TZ3MxRgxIp7advqzdRt+BpJ8SGMrG4Lg
+5weckKNhAWkKN+ASq/JitCTRJOrcWooRnF30DvWPhbPkSHkS+6ykubLLYBIghZy
gN3SmYua6FtOG8DcFPhhBxx3bZ8Y261uYkj2p40VOp8QKtfxyLX6Pku+Rwwu8g15
aPX/Z86WizbErkqiSle4LytrwXVaPU9XaEmkFc7PMKa9S2bN9n6/FgtDduUbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUu29FXn2lrcK2u0k+OVA6d+HIbTowHwYDVR0j
BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2
RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3
QUNFNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3Y2Q2OGY0LTY5YTUtNDc1Zi1h
ZWU0LTNlZjRiOGQzMDJkZC8wLzMxMzUzMDJlMzEzMDM3MmUzMjM0MzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNDM1MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClmv4MA0GCSqG
SIb3DQEBCwUAA4IBAQAy4TSLBlMJ9wZo9pdpor5Qrdzz8Q77uiic0JjihyqxIsKa
OPZkgcQFZNIo5aJLLqRmWoKTUX61D8UADtsA2oBKyMqF+4t/bxnQnA912wSojoXd
tNpYT6TxgW2uVWF2CevWxlGL2v3d+uZkuayLvbX9LXGlWaKLn9wmTSpK/DctJDTR
1O8cNHNry9WVGKBHSz/Mr4JzCaF/gehaH6Hn2VD98orOe5fw9KAcFOajfz5VA2Wh
Xa3JDWxqR2fHSoGlU+oDiieGIPzJ66pQ7tVb0TyNjXupC/GlPHMsVijYrtXIsBDL
x2g6Qx1SVpcR7qom2NJse2Ca+ZkVfk6sdn4IY27G
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:27:49 2025 by rpki-client