Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa
File: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (raw, json)
Hash identifier: FvOPITybWRzIs1S1g5FFlGun2wfYZCtWZ4+3+p45v+s=
Subject key identifier: 53:34:21:72:69:5C:C7:C8:B6:F7:73:AD:AF:A0:25:F4:01:85:DF:D3
Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549
Certificate serial: 5158FD74B55C2008CC37B7BF2388C83F3D277BCF
Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa
Signing time: Tue 19 Nov 2024 12:16:59 +0000
ROA not before: Tue 19 Nov 2024 12:11:59 +0000
ROA not after: Tue 18 Nov 2025 12:16:59 +0000
asID: 152758
IP address blocks: 157.66.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:58:fd:74:b5:5c:20:08:cc:37:b7:bf:23:88:c8:3f:3d:27:7b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549
Validity
Not Before: Nov 19 12:11:59 2024 GMT
Not After : Nov 18 12:16:59 2025 GMT
Subject: CN=53342172695CC7C8B6F773ADAFA025F40185DFD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:f5:7c:a5:91:1f:52:a9:1c:8e:ac:60:5d:
2a:f1:b3:e3:d5:8d:c6:4d:40:60:37:0d:51:5e:c6:
62:da:05:c2:ec:5e:aa:e0:be:b5:12:29:69:21:67:
8e:53:d6:be:30:97:19:95:53:ef:7a:97:e6:b0:18:
f7:d7:c9:ec:3b:e6:0d:e3:45:3d:40:8b:c6:7d:c9:
8f:59:83:e5:e5:8d:b4:cf:1c:ce:b6:eb:0f:71:0d:
d5:cc:63:b6:83:2c:bd:ed:71:51:55:9b:90:02:a4:
d1:4e:3c:e5:e7:c5:37:c2:06:f5:6d:b1:fe:82:f6:
05:8d:f0:cf:a6:31:72:6e:8b:ab:bb:b8:df:22:08:
6e:f5:81:2f:88:cb:1c:4c:45:e8:19:b9:63:af:a2:
75:db:5c:7e:b5:b9:7b:95:ed:60:e8:bc:30:5e:dd:
a3:04:da:d6:ab:64:8e:d4:73:80:3e:01:05:7c:f1:
59:be:15:8c:aa:3a:d7:e0:cc:32:6d:f7:c2:4c:f0:
02:9e:b7:68:21:eb:df:65:46:cf:44:6f:ec:e2:7f:
2c:b4:e4:75:d8:dc:48:4d:4d:2b:98:8c:46:6f:81:
5c:b5:5f:d0:c1:36:9e:cf:38:21:f3:0d:d3:00:51:
12:4e:14:1a:96:11:39:9a:a1:36:d1:b2:a0:15:66:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:34:21:72:69:5C:C7:C8:B6:F7:73:AD:AF:A0:25:F4:01:85:DF:D3
X509v3 Authority Key Identifier:
keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.238.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6a:42:03:6f:56:4f:57:dc:d7:37:5e:39:e2:35:18:42:69:
a9:02:65:0b:b8:37:1f:b7:eb:84:06:3c:24:87:71:18:97:41:
96:84:90:b1:ee:a0:a4:f4:5d:d7:90:4c:2e:70:a0:c2:51:79:
aa:6a:ab:70:59:c6:70:74:3f:d6:0f:82:ce:a6:02:90:c4:6b:
3e:e5:cf:69:2a:d4:02:76:b7:7c:8a:0d:5d:13:d6:cd:17:72:
1c:5a:54:9c:7b:8b:95:f9:97:21:68:dc:78:31:ab:ec:99:f6:
ab:7d:d7:e1:30:33:4b:80:05:4b:2a:86:a3:32:15:50:5e:6b:
14:7e:53:91:e2:ea:51:32:7d:5b:dd:8f:55:f8:71:61:a8:db:
9d:fe:22:50:e0:59:fb:a2:2a:79:63:80:11:8a:ee:da:ff:77:
c6:04:cb:e9:75:c7:a9:2e:a3:64:23:76:db:73:80:78:03:b3:
14:c7:fc:cb:64:b7:6e:93:bd:29:6d:1b:8a:46:0f:cf:cf:a8:
1e:8d:6c:23:dd:3b:e0:99:87:2e:dc:09:50:8b:9c:25:d3:03:
dd:65:f5:79:68:c1:9f:99:83:ad:07:34:58:6f:66:d6:25:e8:
22:a6:12:81:3e:a3:e5:3f:07:60:02:aa:f7:50:e2:6c:2e:a9:
d6:f9:8b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:10 2025 by rpki-client