Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa
File: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (raw, json)
Hash identifier: HWv43/lGQA3zuN61fiauVO9bfPbiLEUzUDy28en+btM=
Subject key identifier: 5C:B2:68:C0:96:0B:DD:F6:20:22:09:50:FD:9F:CF:88:15:E3:91:D5
Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC
Certificate serial: 6582E980D5CC68EC94F4B8BB9822E8285B2C1E43
Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa
Signing time: Sun 19 May 2024 07:32:38 +0000
ROA not before: Sun 19 May 2024 07:27:38 +0000
ROA not after: Sun 18 May 2025 07:32:38 +0000
asID: 152416
IP address blocks: 157.20.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:82:e9:80:d5:cc:68:ec:94:f4:b8:bb:98:22:e8:28:5b:2c:1e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC
Validity
Not Before: May 19 07:27:38 2024 GMT
Not After : May 18 07:32:38 2025 GMT
Subject: CN=5CB268C0960BDDF620220950FD9FCF8815E391D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:3c:53:a7:82:80:22:87:50:83:db:12:91:
28:63:05:8a:d8:1a:59:f0:dd:b2:d7:78:17:de:cf:
bc:8d:15:c5:5c:0d:e1:7b:d0:11:dc:95:de:25:df:
40:62:f9:64:30:c4:3c:74:6c:f3:2d:43:2f:47:6b:
5f:fd:47:37:67:5e:df:54:ca:2f:03:09:c2:59:e3:
01:00:4b:b0:8d:d1:7c:24:34:35:da:0f:76:00:cc:
55:38:08:93:a9:77:da:c9:f0:47:78:57:db:08:9a:
a8:4b:2e:bd:fa:66:ff:00:6c:55:28:1d:73:4a:c0:
b8:90:40:6a:9f:e1:ce:19:f5:45:68:08:3a:5c:1e:
fc:4d:ad:71:18:75:de:05:65:b8:ab:39:f9:0b:15:
18:c8:44:27:34:17:5d:09:ef:c4:a6:67:06:eb:e0:
f3:51:32:19:c6:e8:ef:5e:5e:f2:99:26:26:81:5e:
6b:55:e3:7e:5f:05:c1:86:87:72:96:b5:78:c7:f4:
f8:e1:4c:63:e0:55:71:78:c4:dd:82:53:7d:a5:3b:
dc:0d:c0:73:aa:4f:e6:9b:5d:d1:9a:df:29:f4:2d:
f4:5e:e5:0c:0e:36:fc:80:09:7f:16:03:84:6d:ad:
02:4a:c3:71:34:21:0a:b1:8c:6d:81:f8:1d:41:50:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:68:C0:96:0B:DD:F6:20:22:09:50:FD:9F:CF:88:15:E3:91:D5
X509v3 Authority Key Identifier:
keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.209.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4f:23:3f:97:e4:fe:53:bc:e8:57:94:f5:80:8c:1b:00:f8:
2f:a0:66:70:ec:6d:63:51:1d:06:c4:69:06:9e:a9:0e:f5:72:
b6:19:e1:cc:95:d6:79:0d:d1:e7:29:84:9a:7b:ed:27:7b:ce:
49:59:2f:6d:0f:2a:67:89:10:39:26:c9:b0:91:72:01:de:5b:
26:1d:22:6d:88:f6:38:0f:f0:0c:e1:19:42:04:a5:93:fa:af:
96:9a:34:88:d5:da:69:17:7c:93:96:cc:a5:09:b6:11:5f:53:
43:7d:49:bc:ad:31:04:8c:ff:6e:ac:a0:d1:61:39:cc:ea:bd:
ef:02:1b:26:fd:d2:7e:19:50:4c:cd:7b:5a:6e:0b:2d:d4:80:
44:a8:0f:99:6d:c7:c7:99:fe:d6:1a:8f:54:bd:b6:0a:53:b3:
2b:eb:73:46:f8:32:b5:07:e7:62:3e:78:3e:2a:dc:e1:7c:7a:
4c:19:ea:e0:3a:56:f4:1f:83:fd:d6:b8:8b:4f:24:bb:82:e9:
4f:a5:6c:71:61:9f:a2:d4:1a:0d:d6:a3:a8:a8:3d:24:c0:d4:
21:2b:86:07:da:78:1a:49:62:a0:23:47:a5:86:31:61:d2:8f:
9f:4f:c0:5c:99:14:19:a7:3c:15:fa:fe:e0:f5:d4:af:14:f4:
62:29:be:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:42:44 2025 by rpki-client