Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa
File: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (raw, json)
Hash identifier: p51eUIV9q2m9jWxXX8xAOU8z8+ncy/9DFxT2SrBloOE=
Subject key identifier: 1D:06:C8:87:14:FB:FB:48:E6:9D:0C:96:37:94:86:62:74:83:8F:6A
Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B
Certificate serial: 25C3746B13D1E3F68388C70796BC0F79FFF7CE40
Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa
Signing time: Fri 24 May 2024 16:32:24 +0000
ROA not before: Fri 24 May 2024 16:27:24 +0000
ROA not after: Fri 23 May 2025 16:32:24 +0000
asID: 152756
IP address blocks: 157.66.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c3:74:6b:13:d1:e3:f6:83:88:c7:07:96:bc:0f:79:ff:f7:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B
Validity
Not Before: May 24 16:27:24 2024 GMT
Not After : May 23 16:32:24 2025 GMT
Subject: CN=1D06C88714FBFB48E69D0C963794866274838F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:74:19:c5:05:e7:73:88:43:6d:1a:23:30:
e0:ea:b8:39:8e:3c:b9:46:fe:f6:06:e3:32:27:d5:
b5:c2:57:6d:e9:77:5e:04:de:5d:ae:54:8f:82:5c:
c5:4f:6f:30:26:3c:b5:ff:12:00:8d:ec:ad:a3:f5:
2a:cd:5b:2f:85:39:56:76:2a:f3:30:c9:ea:14:b1:
0b:21:28:03:40:4a:90:9d:4f:13:23:3d:54:0f:a8:
ae:84:34:4f:71:70:b0:5d:a1:08:dd:b4:23:f5:54:
8a:b6:d8:b8:91:e9:4f:c3:3f:80:14:7a:04:93:96:
bc:a9:0c:aa:02:47:a8:d2:82:f7:8d:b2:3a:cc:8d:
dc:b3:c6:e3:cb:19:12:d5:1c:e5:ef:e9:5c:8b:a9:
89:7d:f7:b0:d8:88:c1:de:3c:0d:f5:d8:58:e4:f6:
c5:5d:c4:24:ca:19:34:01:67:a1:32:80:ab:e7:54:
7c:63:62:65:17:b9:46:e2:73:5c:cb:3a:6a:c1:dd:
04:ea:60:64:c7:15:1c:6c:08:a5:92:90:44:e1:80:
6e:cf:7b:ae:7e:06:fa:76:52:41:4a:83:ca:7a:fe:
00:d4:48:34:46:4e:f9:05:29:b8:b1:f0:7b:a5:e4:
e7:8a:fe:4b:cb:8c:7c:c1:b0:d4:4d:81:66:e3:79:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:06:C8:87:14:FB:FB:48:E6:9D:0C:96:37:94:86:62:74:83:8F:6A
X509v3 Authority Key Identifier:
keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:56:11:14:d1:4b:19:d5:bc:ff:57:f6:15:96:6b:c0:20:ad:
10:63:7f:82:02:10:ef:9d:03:a3:b5:dd:d1:59:b6:ac:39:35:
13:5d:1e:60:82:b9:fc:e1:f9:92:71:0e:75:0e:28:e9:d5:b0:
30:9e:3d:ef:5d:04:d5:ba:d9:72:c7:1f:96:aa:4a:fe:9e:1b:
f9:62:7f:9b:a2:06:ec:64:bd:fc:45:c2:db:e0:96:6a:b6:a6:
10:02:2e:dd:9e:0e:21:79:60:32:b8:ed:af:7f:56:80:d7:73:
98:aa:2d:42:23:13:fd:2f:a6:f1:52:d4:6c:6e:fb:b8:20:21:
96:f7:b8:c8:78:dd:ef:5f:8e:f3:66:e7:0b:a1:c2:16:35:a4:
4f:d3:cb:5b:62:bf:15:d5:cc:18:e2:98:89:cb:07:f6:4b:ff:
e7:0a:89:96:a4:e8:29:5a:f6:c9:64:af:fe:8c:74:2c:6b:55:
62:1f:30:3b:ab:74:14:8b:4c:e3:1a:92:24:9a:e3:ee:ac:e9:
27:01:61:11:0d:3e:e6:84:2b:9b:e3:fb:70:31:94:96:57:42:
6a:0a:c3:dd:75:b4:d2:af:cc:c8:8a:60:4f:c9:ce:10:a6:40:
e8:21:7c:34:0b:10:ce:05:ca:0b:13:c0:9d:5d:b7:75:38:5a:
0b:23:88:fc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJcN0axPR4/aDiMcHlrwPef/3zkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2
NzY5QzkwQjAeFw0yNDA1MjQxNjI3MjRaFw0yNTA1MjMxNjMyMjRaMDMxMTAvBgNV
BAMTKDFEMDZDODg3MTRGQkZCNDhFNjlEMEM5NjM3OTQ4NjYyNzQ4MzhGNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7E3QZxQXnc4hDbRojMODquDmO
PLlG/vYG4zIn1bXCV23pd14E3l2uVI+CXMVPbzAmPLX/EgCN7K2j9SrNWy+FOVZ2
KvMwyeoUsQshKANASpCdTxMjPVQPqK6ENE9xcLBdoQjdtCP1VIq22LiR6U/DP4AU
egSTlrypDKoCR6jSgveNsjrMjdyzxuPLGRLVHOXv6VyLqYl997DYiMHePA312Fjk
9sVdxCTKGTQBZ6EygKvnVHxjYmUXuUbic1zLOmrB3QTqYGTHFRxsCKWSkEThgG7P
e65+Bvp2UkFKg8p6/gDUSDRGTvkFKbix8Hul5OeK/kvLjHzBsNRNgWbjeUbXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUHQbIhxT7+0jmnQyWN5SGYnSDj2owHwYDVR0j
BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3
NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5
QzkwQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhYjRlMTRkLTAyMWQtNDBkYy05
MjNhLWMxMmQxYWY0NDNiNS8wLzMxMzUzNzJlMzYzNjJlMzEzNzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnUKxMA0GCSqG
SIb3DQEBCwUAA4IBAQB8VhEU0UsZ1bz/V/YVlmvAIK0QY3+CAhDvnQOjtd3RWbas
OTUTXR5ggrn84fmScQ51Dijp1bAwnj3vXQTVutlyxx+Wqkr+nhv5Yn+bogbsZL38
RcLb4JZqtqYQAi7dng4heWAyuO2vf1aA13OYqi1CIxP9L6bxUtRsbvu4ICGW97jI
eN3vX47zZucLocIWNaRP08tbYr8V1cwY4piJywf2S//nComWpOgpWvbJZK/+jHQs
a1ViHzA7q3QUi0zjGpIkmuPurOknAWERDT7mhCub4/twMZSWV0JqCsPddbTSr8zI
imBPyc4QpkDoIXw0CxDOBcoLE8CdXbd1OFoLI4j8
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:32 2025 by rpki-client