Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
File: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (raw, json)
Hash identifier: 9wNgftNU3iv+7DPLldtRXqlQId6fVC+L0PN5+MslgcY=
Subject key identifier: F9:BE:32:95:52:30:82:A8:06:6F:FD:F6:14:FB:2C:24:EE:77:8D:55
Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E
Certificate serial: 4276B677E1AA0A12B64B1F855F2D3C15B4C0DFE9
Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
Signing time: Fri 05 Apr 2024 04:22:34 +0000
ROA not before: Fri 05 Apr 2024 04:17:34 +0000
ROA not after: Fri 04 Apr 2025 04:22:34 +0000
asID: 152389
IP address blocks: 157.15.216.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:76:b6:77:e1:aa:0a:12:b6:4b:1f:85:5f:2d:3c:15:b4:c0:df:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E
Validity
Not Before: Apr 5 04:17:34 2024 GMT
Not After : Apr 4 04:22:34 2025 GMT
Subject: CN=F9BE3295523082A8066FFDF614FB2C24EE778D55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:8b:46:73:90:58:b7:cb:4d:7d:ac:13:d3:
e3:9a:3c:33:ef:91:57:7c:2a:4d:1e:6b:fb:0a:38:
e2:1c:7b:3a:a9:65:e4:be:2f:7e:f2:3f:a9:6c:1a:
da:da:d7:8b:15:8a:64:bd:e0:82:9c:92:df:ee:d2:
7b:ec:31:bf:33:f4:fd:00:ae:05:97:b8:3c:5a:5c:
eb:94:5e:f5:29:ea:7a:3e:c6:a1:6c:1a:78:a0:86:
f6:50:82:f5:76:ac:16:1c:59:ea:5e:a4:16:7e:f7:
13:0c:b9:64:e6:47:ab:e3:59:0e:f5:1e:96:0e:95:
72:c0:5c:79:45:da:73:41:46:85:68:36:37:ac:12:
74:35:e7:dd:9c:1f:a9:38:f2:b3:bf:a6:61:89:54:
a9:ee:b1:f8:07:26:31:98:a9:90:df:38:6c:d4:1e:
90:90:4c:27:e5:ab:3d:bd:88:19:ea:ac:6c:13:c1:
e3:22:1b:bd:79:f3:fd:9b:29:97:8a:b4:8c:94:f0:
cc:60:e2:3b:1c:77:47:24:ac:68:05:42:70:87:ac:
16:f6:83:d9:d5:ab:c6:d4:cb:bb:1e:c0:c8:72:3a:
c7:77:71:70:54:13:7b:5b:5f:16:2b:13:86:90:a0:
b3:f8:0c:35:53:51:c2:23:e2:a4:19:b0:01:9a:3a:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BE:32:95:52:30:82:A8:06:6F:FD:F6:14:FB:2C:24:EE:77:8D:55
X509v3 Authority Key Identifier:
keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.216.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:b6:5c:1a:ed:aa:60:8e:67:52:6a:c2:6e:a9:eb:df:d3:96:
32:a8:63:23:72:62:64:b7:60:91:4f:ac:88:6f:af:02:da:73:
60:f2:5a:56:e1:86:38:78:11:99:b6:b5:31:fc:ec:02:aa:44:
9a:8f:95:ce:54:92:74:a5:03:15:8e:e5:d4:cc:53:35:88:a3:
70:f9:d3:c8:cb:d7:91:85:83:21:a0:9c:18:5d:f0:f4:b2:a7:
81:ed:92:d9:3e:5e:8f:3e:6e:c6:80:e5:d7:e1:b3:a5:5f:7c:
68:ff:ef:68:36:e6:68:85:5c:9f:df:cb:d9:e0:c3:e3:4f:57:
32:f6:8e:9a:d8:26:12:b1:09:f3:a9:be:42:26:4d:48:fd:09:
a3:a0:99:5d:cb:1d:1c:ee:8c:5d:71:49:eb:d3:c6:c2:f7:1a:
6d:f9:8c:26:3c:cf:c6:eb:e9:51:64:b0:0d:b5:29:5f:15:b4:
45:00:c6:07:92:2a:95:ca:4e:73:b0:ed:e7:66:c2:ea:26:13:
78:70:a1:8a:7f:17:bb:e4:36:89:cf:02:8a:8b:de:f7:29:f5:
34:07:d1:df:12:51:f2:0b:d3:40:e3:36:5e:1d:a1:81:7b:21:
08:f7:aa:37:85:85:c6:db:cd:25:f3:9f:04:c8:22:6b:3c:92:
47:47:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:29:44 2025 by rpki-client