Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa
File: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (raw, json)
Hash identifier: ldaui5sMmxqiHUVbs1jRCvNbZlVTdmCpnxDOTN/gSdw=
Subject key identifier: AA:15:98:CA:DA:25:37:DC:6A:0F:57:9F:C6:4D:96:E1:DA:21:63:14
Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B
Certificate serial: 494FACC44E7AE1C555209B536235867E7AC3EBDA
Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa
Signing time: Fri 24 May 2024 16:32:47 +0000
ROA not before: Fri 24 May 2024 16:27:47 +0000
ROA not after: Fri 23 May 2025 16:32:47 +0000
asID: 152756
IP address blocks: 157.66.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4f:ac:c4:4e:7a:e1:c5:55:20:9b:53:62:35:86:7e:7a:c3:eb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B
Validity
Not Before: May 24 16:27:47 2024 GMT
Not After : May 23 16:32:47 2025 GMT
Subject: CN=AA1598CADA2537DC6A0F579FC64D96E1DA216314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:bc:b1:9b:a3:a1:ec:c6:0d:e6:8a:23:5c:
33:f1:94:28:41:e9:cb:b6:06:b1:6c:19:0c:05:76:
2a:03:9b:10:4d:cb:c4:22:86:5d:58:0f:24:ed:ce:
47:f8:a2:fe:5c:b1:ea:6c:a7:a3:84:ef:24:3b:e2:
ec:eb:fe:c8:fc:20:95:84:84:0c:75:2c:21:dd:ad:
71:c9:8e:b6:8c:cd:8e:1e:29:a3:2e:c7:32:c6:b4:
85:c0:37:f4:b0:49:06:65:4b:60:5b:51:8a:0a:29:
06:5e:62:e5:ec:93:84:6f:98:74:97:47:74:d5:c6:
26:5f:f9:0d:fa:4a:e7:fa:d0:4d:e5:36:79:8f:00:
eb:f2:cf:11:e4:8e:1b:5b:4e:ae:5e:d7:b4:de:b4:
c6:05:fe:c5:a8:47:1a:77:33:e8:a5:9c:58:a3:c9:
e6:a6:0f:e4:a2:6a:8b:53:ee:6a:27:23:4c:8f:d7:
3b:b3:48:68:4c:9c:28:ed:be:ab:64:0b:84:cb:bc:
16:97:b1:05:0a:70:40:ce:d8:50:49:8c:f7:97:8a:
32:25:ff:53:cb:61:1c:a6:2f:20:58:23:29:0c:5b:
6d:1b:7d:37:5d:27:d9:38:bd:3d:2a:ae:24:6e:22:
ea:e7:01:86:22:86:c2:b5:b7:32:55:19:6d:44:74:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:15:98:CA:DA:25:37:DC:6A:0F:57:9F:C6:4D:96:E1:DA:21:63:14
X509v3 Authority Key Identifier:
keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.176.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:f2:bb:46:63:4c:39:75:dc:3d:70:a9:8b:5c:71:04:c7:be:
f2:ef:d7:00:f8:24:01:78:6e:42:e4:75:c6:a3:ef:68:0a:3b:
2a:c5:3d:a3:db:a3:8a:ea:f6:82:bf:8e:e0:3a:c6:ee:e7:d9:
45:31:6e:1e:2b:88:7f:1f:09:a3:0b:fe:53:83:e9:63:ce:3b:
3e:2d:25:c4:77:00:90:b8:83:c0:c1:51:17:c0:7f:e2:9a:a4:
e9:43:aa:dc:d2:09:45:7a:74:49:2a:ec:1b:55:63:38:d3:03:
69:e0:94:40:f2:98:40:a7:ed:8b:5f:c3:21:0a:47:29:91:91:
85:ee:ff:92:fd:95:57:29:47:73:52:f7:d8:10:76:1b:47:e5:
4f:c3:12:b3:82:60:03:5d:f9:14:54:d1:26:55:b9:77:6f:1d:
c5:28:3d:01:94:31:b1:5f:a8:2e:e7:4f:82:62:2e:44:38:eb:
67:aa:f2:3e:f2:72:18:fc:18:c7:b9:69:85:a5:03:29:80:55:
b3:e1:40:d2:f8:3f:7d:fd:55:f7:d6:f5:95:5d:ab:f4:9a:55:
26:21:86:4b:3c:79:a8:ed:60:f8:a1:38:56:94:a1:d5:7d:8b:
6b:03:ef:2e:4e:b7:ce:43:72:8c:77:26:73:1b:ec:d4:6c:38:
5b:53:75:0b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSU+sxE564cVVIJtTYjWGfnrD69owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2
NzY5QzkwQjAeFw0yNDA1MjQxNjI3NDdaFw0yNTA1MjMxNjMyNDdaMDMxMTAvBgNV
BAMTKEFBMTU5OENBREEyNTM3REM2QTBGNTc5RkM2NEQ5NkUxREEyMTYzMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVLyxm6Oh7MYN5oojXDPxlChB
6cu2BrFsGQwFdioDmxBNy8Qihl1YDyTtzkf4ov5csepsp6OE7yQ74uzr/sj8IJWE
hAx1LCHdrXHJjraMzY4eKaMuxzLGtIXAN/SwSQZlS2BbUYoKKQZeYuXsk4RvmHSX
R3TVxiZf+Q36Suf60E3lNnmPAOvyzxHkjhtbTq5e17TetMYF/sWoRxp3M+ilnFij
yeamD+SiaotT7monI0yP1zuzSGhMnCjtvqtkC4TLvBaXsQUKcEDO2FBJjPeXijIl
/1PLYRymLyBYIykMW20bfTddJ9k4vT0qriRuIurnAYYihsK1tzJVGW1EdHPDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqhWYytolN9xqD1efxk2W4dohYxQwHwYDVR0j
BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3
NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5
QzkwQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhYjRlMTRkLTAyMWQtNDBkYy05
MjNhLWMxMmQxYWY0NDNiNS8wLzMxMzUzNzJlMzYzNjJlMzEzNzM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzczNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUKwMA0GCSqG
SIb3DQEBCwUAA4IBAQA68rtGY0w5ddw9cKmLXHEEx77y79cA+CQBeG5C5HXGo+9o
CjsqxT2j26OK6vaCv47gOsbu59lFMW4eK4h/HwmjC/5Tg+ljzjs+LSXEdwCQuIPA
wVEXwH/imqTpQ6rc0glFenRJKuwbVWM40wNp4JRA8phAp+2LX8MhCkcpkZGF7v+S
/ZVXKUdzUvfYEHYbR+VPwxKzgmADXfkUVNEmVbl3bx3FKD0BlDGxX6gu50+CYi5E
OOtnqvI+8nIY/BjHuWmFpQMpgFWz4UDS+D99/VX31vWVXav0mlUmIYZLPHmo7WD4
oThWlKHVfYtrA+8uTrfOQ3KMdyZzG+zUbDhbU3UL
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:16:02 2025 by rpki-client