Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
File: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (raw, json)
Hash identifier: ynzvFGFeVrYtYbfD+ePKrxwpaypexlX1cEKRBF9+ZqM=
Subject key identifier: A0:48:A9:EB:2C:04:02:89:74:B2:68:A9:22:95:E6:43:FA:41:91:7F
Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F
Certificate serial: 5DA3F94A978D7A5229A47695E862CE64F72E2CA8
Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
Signing time: Fri 19 Jul 2024 14:40:15 +0000
ROA not before: Fri 19 Jul 2024 14:35:15 +0000
ROA not after: Fri 18 Jul 2025 14:40:15 +0000
asID: 141609
IP address blocks: 157.66.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a3:f9:4a:97:8d:7a:52:29:a4:76:95:e8:62:ce:64:f7:2e:2c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F
Validity
Not Before: Jul 19 14:35:15 2024 GMT
Not After : Jul 18 14:40:15 2025 GMT
Subject: CN=A048A9EB2C04028974B268A92295E643FA41917F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:09:67:b1:17:ca:67:f8:8e:01:05:e4:51:
b6:5a:0f:25:94:88:c6:af:33:68:59:8c:15:d2:23:
ff:6c:b4:c3:04:6a:85:3d:35:62:3a:90:6d:50:80:
ef:95:44:b8:6c:3b:3a:1b:30:89:cb:26:50:f8:56:
00:bc:4a:ab:c7:bd:c3:e6:fd:04:79:2e:e5:0d:17:
0b:65:99:72:85:d3:88:9b:a2:c4:3f:53:7e:a1:50:
21:2a:9d:73:e9:21:9f:cf:0d:09:8e:0b:ae:08:c1:
2c:25:15:26:a6:ff:83:4f:87:30:17:75:82:55:24:
db:d7:0a:7e:4c:5c:db:03:27:5a:b3:14:ad:0b:4e:
07:6d:34:e1:bb:7b:09:a8:4e:f2:ea:1e:a5:b5:fb:
2b:3d:e7:5c:31:30:84:10:f9:89:41:df:30:6b:d4:
b6:29:33:1f:14:cd:aa:a0:63:93:2d:f7:2d:40:a7:
14:8c:5a:e0:d8:04:0b:ea:31:b1:57:fa:e4:56:84:
9b:fa:59:26:bd:e6:e4:9b:5f:9c:04:88:fe:78:bd:
f0:6f:6b:36:ca:21:8a:29:90:64:1d:84:7b:2c:db:
ba:d8:3a:b2:36:d1:fd:e3:b7:47:d5:7c:d7:76:af:
bc:90:fd:c4:6c:a4:f5:68:d5:c2:e5:d5:e9:66:4c:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:A9:EB:2C:04:02:89:74:B2:68:A9:22:95:E6:43:FA:41:91:7F
X509v3 Authority Key Identifier:
keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.62.0/23
Signature Algorithm: sha256WithRSAEncryption
21:41:f1:70:f6:8a:4a:7e:41:c8:55:e4:c6:1b:b4:15:ea:82:
af:ec:8c:d9:e8:e9:2d:c1:6b:9a:b4:a3:f3:3d:6e:d5:d5:d8:
b6:84:83:c9:ae:59:7f:f7:50:d7:81:54:87:3e:68:f8:5f:2d:
bf:89:ef:56:c1:27:af:9b:da:f9:aa:d3:a4:76:48:25:cc:4f:
a3:01:c6:2c:88:42:d5:f4:f8:2b:26:4f:b6:5e:87:e0:99:08:
6c:cb:b6:61:47:d8:c9:01:0f:18:bf:34:00:49:fd:c3:14:24:
07:99:68:4b:72:31:2b:1c:77:49:b7:5d:c4:c4:12:54:cb:55:
85:95:86:8e:12:f9:9d:d6:fe:a7:3c:f9:a4:39:91:c9:a7:99:
70:5a:d9:32:ec:7c:f4:65:8c:27:51:66:e7:ed:23:c4:1f:73:
e1:63:00:b8:55:1b:1e:f2:7f:85:a1:56:02:fe:0f:6d:1f:f6:
52:4e:56:48:26:3d:2d:3e:07:ad:5d:9d:9b:87:96:bd:84:d4:
25:39:19:07:c3:e7:e7:f1:96:8a:9a:c3:8a:d1:62:06:df:0d:
33:cd:f3:b6:81:ad:0d:1d:fa:53:68:13:62:02:63:ac:79:36:
c4:65:0f:29:c9:9b:b5:e2:79:ec:19:4e:b1:b5:f8:c8:1e:29:
dd:3e:f2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:00:03 2025 by rpki-client