Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa
File: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (raw, json)
Hash identifier: 0DOfWeqjfqxK+dz4JWxf20Rpc5VV4htMDEtmcjdPHYI=
Subject key identifier: AD:C5:C5:59:82:34:0B:63:DB:09:FB:72:10:D4:8F:CB:34:FB:BD:2B
Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC
Certificate serial: 727C77F0B973D6675290A8EE1BE9AC1B65430F06
Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa
Signing time: Sun 19 May 2024 07:30:57 +0000
ROA not before: Sun 19 May 2024 07:25:57 +0000
ROA not after: Sun 18 May 2025 07:30:57 +0000
asID: 152416
IP address blocks: 157.20.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:7c:77:f0:b9:73:d6:67:52:90:a8:ee:1b:e9:ac:1b:65:43:0f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC
Validity
Not Before: May 19 07:25:57 2024 GMT
Not After : May 18 07:30:57 2025 GMT
Subject: CN=ADC5C55982340B63DB09FB7210D48FCB34FBBD2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:47:e6:d3:a9:fa:7f:82:15:44:90:dc:f8:
ab:7f:5c:1f:23:67:84:fd:7e:14:15:cb:bc:81:aa:
85:67:91:61:49:aa:0d:2a:f9:f9:3d:9b:36:c9:c6:
9c:d5:e4:c3:52:ad:51:f2:48:f8:00:f6:58:ae:08:
26:71:fb:6e:40:bc:50:f4:e3:ae:9e:90:d2:09:86:
f9:33:7a:d0:69:72:88:a3:a4:7f:3f:91:b4:6f:87:
9a:a3:45:49:40:6b:0d:0e:37:94:67:de:e0:41:34:
71:91:42:b8:6c:b1:0d:1a:b3:ae:da:c8:16:e6:bb:
e9:30:0f:19:a4:53:c7:0b:c2:e3:4c:ad:ef:5b:95:
ff:f4:0d:9f:b6:18:ea:03:bd:d2:b2:92:e7:31:67:
0a:54:70:9c:59:a0:08:56:7c:d1:40:6e:3a:f7:95:
18:f9:32:96:77:33:99:31:49:6f:c1:da:3e:b5:97:
1d:35:d5:cd:c0:be:ae:4a:eb:fb:9c:79:ca:e0:e1:
79:99:9b:4d:18:23:d2:ec:1c:46:3a:66:50:23:8b:
17:1b:6f:77:83:9e:a9:3f:71:38:77:29:b7:22:8c:
34:7e:26:5c:1b:7a:34:d1:d0:f8:43:ac:38:c3:9a:
43:bb:65:0e:b1:a1:b0:a8:b1:30:53:26:14:b1:70:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C5:C5:59:82:34:0B:63:DB:09:FB:72:10:D4:8F:CB:34:FB:BD:2B
X509v3 Authority Key Identifier:
keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fe:bf:17:fe:6e:1e:22:f0:98:f4:19:85:5a:92:cf:c4:63:
ba:a4:50:98:bf:5b:ee:d6:8b:e0:8a:b8:08:3e:8b:2a:e1:42:
92:b8:c9:7e:a5:db:fc:75:8f:00:3c:df:8f:a8:d9:9a:64:4c:
11:ec:85:01:a2:91:ab:9e:6c:fd:9d:89:d8:70:5e:78:86:a2:
a9:30:e5:b7:71:e7:7e:03:b0:78:f0:1e:64:99:85:51:ae:f1:
f5:58:2b:c8:af:83:8e:38:df:47:88:97:ef:b3:10:27:09:a8:
c2:87:b3:dc:27:3b:e2:aa:6c:5b:61:f3:d4:ed:7c:20:14:4a:
99:e5:c7:6d:f5:87:88:be:d4:18:df:f6:87:9e:20:41:50:02:
48:62:e6:13:fa:63:23:a2:0f:22:52:ac:e5:ad:aa:69:ca:2a:
8e:46:62:d6:d9:37:e9:21:a2:f9:b5:b3:46:90:f5:ff:85:df:
f5:9d:20:a3:62:17:4a:7a:51:fc:08:2f:35:92:96:05:0b:80:
a7:94:8a:09:b7:4e:6b:a7:6d:d2:83:f2:76:eb:15:78:96:34:
c6:6b:4b:cf:19:1d:70:72:a9:96:7d:9c:d6:ed:50:45:a7:3a:
aa:5e:3c:c1:20:42:90:01:18:bb:40:cf:f1:d3:cf:bc:53:7e:
3b:a7:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:42:44 2025 by rpki-client