Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa
File: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (raw, json)
Hash identifier: wfBLV7crHpRvOvrkP8sO7cSqml5P6MQ5e6U//U3tlqI=
Subject key identifier: 58:4A:95:EF:40:71:81:C0:C8:75:5D:0E:36:E8:26:B1:7D:4B:88:40
Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
Certificate serial: 484E4E05B269174100E99558520B2650188EB1B6
Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa
Signing time: Wed 03 Apr 2024 02:52:21 +0000
ROA not before: Wed 03 Apr 2024 02:47:21 +0000
ROA not after: Wed 02 Apr 2025 02:52:21 +0000
asID: 141120
IP address blocks: 157.20.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4e:4e:05:b2:69:17:41:00:e9:95:58:52:0b:26:50:18:8e:b1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
Validity
Not Before: Apr 3 02:47:21 2024 GMT
Not After : Apr 2 02:52:21 2025 GMT
Subject: CN=584A95EF407181C0C8755D0E36E826B17D4B8840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:ed:3e:70:0c:7f:7e:8b:56:7c:bd:a9:3e:
fb:02:4c:d7:8e:67:39:c8:19:17:09:a5:10:f1:b5:
19:0b:57:29:ff:77:d0:a4:62:07:ef:ac:84:31:59:
f1:e9:31:74:36:fb:53:40:5f:23:98:45:80:40:42:
65:d9:fd:6f:8e:c6:97:d9:f1:7a:04:ec:ab:18:38:
e6:e7:04:39:0d:ef:08:a8:8b:4e:b5:04:fe:4b:e9:
bd:0b:8c:fa:c0:58:b5:9d:38:ed:2d:89:29:71:e9:
81:cb:29:93:1b:c3:f1:5a:7a:5e:ce:a4:84:5e:85:
23:cb:8d:6b:9c:d4:36:5c:f5:e1:2e:ab:3b:bc:51:
8e:5a:01:11:b9:9f:1a:d3:2a:0f:05:0a:a3:f2:bd:
e0:2b:d2:c0:98:4c:eb:39:20:bd:80:b6:3e:ba:62:
d0:64:cc:b0:db:01:6e:27:86:1f:d0:19:e8:56:ea:
9e:b9:d2:55:85:30:4c:95:48:b1:09:30:1d:16:e5:
83:60:60:de:7c:09:ba:47:ff:94:b1:81:be:d9:9a:
3e:fa:ee:8e:ad:86:f9:b5:85:a9:6f:d6:e9:15:fe:
04:d1:0d:61:d3:51:b5:cb:b0:cd:db:b7:99:f3:d5:
f4:bf:90:02:04:75:6c:cd:5c:00:8d:8f:39:07:a8:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4A:95:EF:40:71:81:C0:C8:75:5D:0E:36:E8:26:B1:7D:4B:88:40
X509v3 Authority Key Identifier:
keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.159.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c6:a8:ac:46:0b:1f:ed:f4:4c:48:f2:5e:c9:d1:dd:2f:fa:
82:53:3b:74:b7:49:b7:10:0f:9e:6d:dd:b3:b7:3f:47:80:3b:
56:74:e9:ae:eb:35:da:29:8e:f0:5c:14:27:96:2e:ae:45:cf:
67:68:54:98:3f:70:d3:ba:27:79:bb:e4:ba:f1:80:11:ab:1e:
d1:82:c1:19:90:f6:8f:be:3e:80:3b:96:da:a4:b2:1a:dc:22:
4f:16:5f:38:24:d5:2b:9d:f4:6d:11:2c:f8:f4:1e:13:a9:c3:
14:4c:e5:32:a4:69:6f:b4:66:36:f5:ef:b9:56:19:38:35:e5:
39:32:5d:43:fb:46:11:66:d5:cd:ad:f6:57:78:6a:24:13:5a:
d3:b8:e8:b4:b1:0c:99:9f:ae:9a:c7:98:b9:86:fc:f1:85:e9:
3d:88:cb:22:b7:c6:b9:56:0a:a2:ca:30:43:e4:af:f7:1d:3c:
b8:0a:d5:1f:c4:97:c4:21:97:67:33:62:81:15:8d:c5:09:8e:
99:31:31:3f:d5:ea:20:c0:31:9c:52:ae:75:e0:2d:e6:c2:9a:
87:98:02:29:d2:43:36:8f:7d:17:ff:e8:1c:42:4a:de:39:19:
63:40:30:a1:bc:22:16:1a:93:2d:05:38:e0:0f:e1:62:bc:d9:
82:e5:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:00 2025 by rpki-client