Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa
File: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (raw, json)
Hash identifier: FeggXCLXcgHSF8N14AAD1IKcFyaO/k5xFgL/JhRM1c4=
Subject key identifier: 0A:19:D2:59:78:B9:B0:A6:A6:0A:92:6F:A0:AF:8C:B0:0B:FE:DD:71
Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD
Certificate serial: 509DF45B57E0515FE736DF95249E9D2F82705F9C
Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa
Signing time: Thu 12 Dec 2024 05:00:03 +0000
ROA not before: Thu 12 Dec 2024 04:55:03 +0000
ROA not after: Thu 11 Dec 2025 05:00:03 +0000
asID: 152082
IP address blocks: 157.10.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9d:f4:5b:57:e0:51:5f:e7:36:df:95:24:9e:9d:2f:82:70:5f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD
Validity
Not Before: Dec 12 04:55:03 2024 GMT
Not After : Dec 11 05:00:03 2025 GMT
Subject: CN=0A19D25978B9B0A6A60A926FA0AF8CB00BFEDD71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:2f:10:c8:a5:3e:f5:25:bd:bb:2f:e9:8a:
00:bb:71:76:87:79:ad:4d:d6:d8:2d:c0:c8:32:f3:
48:7d:11:12:40:92:c4:70:2f:77:fa:f5:64:78:f0:
4e:7a:85:ad:27:dd:1e:c0:c4:da:85:53:e7:df:9d:
13:33:56:9f:d4:47:6a:39:f6:fe:65:bf:1c:87:47:
54:14:7b:91:e3:a8:90:f2:18:b8:6b:80:09:bd:85:
61:61:8a:af:06:ff:5d:e6:a3:ad:d2:e7:4c:98:b0:
77:04:82:74:e8:c0:2e:1f:4c:55:04:cd:49:09:f2:
d9:1a:19:ad:6d:12:14:58:6a:4f:4a:45:7d:c6:d3:
f7:88:a1:3f:0c:cf:35:e0:48:7f:be:f5:d2:10:cd:
b2:20:a9:f1:d0:b2:b2:d0:f6:03:88:ff:e2:53:b1:
52:b5:16:5f:d0:69:02:af:3f:38:b4:94:da:59:b1:
32:ea:98:a8:f5:f5:36:76:21:a9:1a:6d:81:1b:41:
ec:23:09:e1:54:79:3b:4b:28:4b:38:27:28:c0:4d:
0d:fa:c4:1f:53:34:c4:ef:47:05:f5:52:e7:23:66:
40:fd:78:f8:64:52:c8:04:4c:c3:0b:4f:61:8f:c2:
54:40:8d:c8:d9:45:c0:be:64:3c:00:b3:79:d9:81:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:19:D2:59:78:B9:B0:A6:A6:0A:92:6F:A0:AF:8C:B0:0B:FE:DD:71
X509v3 Authority Key Identifier:
keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.89.0/24
Signature Algorithm: sha256WithRSAEncryption
89:03:e2:18:9f:fa:6f:c2:8d:34:a1:a3:ef:03:1a:c9:ef:f8:
33:92:0b:89:5f:7b:8b:a0:4c:d3:8c:37:62:f5:56:49:ae:10:
dd:c9:23:dc:fa:66:21:07:e9:1f:43:9a:b6:96:01:aa:19:4d:
fd:57:37:de:2c:d3:01:29:a3:a1:36:72:7d:fb:4a:18:ab:62:
ba:cf:47:cc:8f:c8:22:8c:64:12:8a:be:8f:87:89:62:b5:63:
c6:23:57:a3:53:5e:bc:18:50:dc:21:1e:18:50:a5:72:03:49:
6b:7f:ad:a2:ee:98:4e:e5:d0:78:48:e8:29:6d:a4:cc:76:87:
c8:5f:b4:60:ad:40:74:31:9d:2c:e0:36:e3:b6:47:e1:6a:fe:
54:1c:9c:d3:bb:0b:99:7c:ba:5f:58:66:a5:b3:05:3f:48:df:
7c:20:8e:d1:fa:48:b7:bf:94:4b:cb:ff:3c:a2:da:4b:06:63:
d9:58:69:d6:8b:b3:e2:aa:10:61:72:89:0c:3f:a5:8d:88:aa:
a4:44:81:b7:58:1a:6c:fe:aa:75:e9:5b:ff:7d:fb:42:19:b6:
50:65:ca:84:17:6e:70:06:11:41:a0:ce:24:f7:36:46:24:c0:
15:b6:6c:0f:07:51:dd:d7:be:75:ea:e0:87:82:ce:d9:ab:8c:
d0:22:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:19 2025 by rpki-client