Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa
File: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (raw, json)
Hash identifier: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg=
Subject key identifier: 65:97:E9:F7:8B:9D:62:1A:05:8B:16:86:C2:31:A0:88:22:02:B2:8D
Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A
Certificate serial: 49731FBCE33B937B120F4DB3625C34C93A80B46C
Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa
Signing time: Fri 10 Jan 2025 10:00:01 +0000
ROA not before: Fri 10 Jan 2025 09:55:01 +0000
ROA not after: Fri 09 Jan 2026 10:00:01 +0000
asID: 152365
IP address blocks: 157.15.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:73:1f:bc:e3:3b:93:7b:12:0f:4d:b3:62:5c:34:c9:3a:80:b4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A
Validity
Not Before: Jan 10 09:55:01 2025 GMT
Not After : Jan 9 10:00:01 2026 GMT
Subject: CN=6597E9F78B9D621A058B1686C231A0882202B28D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:1b:9a:54:96:aa:75:d5:43:c8:7c:f0:e5:
2c:2c:52:75:d3:c3:4d:f4:69:26:ad:29:a0:c5:d4:
43:11:50:24:77:08:ab:6f:8a:30:43:4a:c4:64:91:
b3:d2:1b:2d:7c:e0:01:17:40:16:d2:41:a0:e7:f1:
03:71:da:a6:fb:22:e8:c4:3d:32:5c:d8:4b:2b:e7:
03:fe:0a:9f:c1:7f:bc:98:d8:b2:73:a4:0c:07:5f:
c0:58:47:55:9a:1b:3b:e8:9c:ad:6b:08:e8:21:7d:
67:fe:29:cb:1f:59:ea:46:80:e8:b3:da:03:55:fc:
bb:8d:a3:c8:64:ed:1c:12:8b:41:3f:35:37:8f:a5:
a7:21:69:9f:cb:32:44:ad:03:3d:1b:9a:63:26:3d:
71:1e:49:44:66:a2:2d:c1:d4:91:6e:07:3e:37:44:
58:b4:d7:6b:9a:80:98:46:1e:83:da:4f:ca:4b:44:
e9:40:98:a2:a9:e5:19:89:2a:ae:8e:55:28:8c:c2:
2b:6e:22:b5:20:2b:49:b4:a9:ad:df:0d:e3:15:41:
cc:60:8b:d4:2e:76:e3:93:02:80:d5:74:d1:4f:20:
c9:cc:32:e2:ed:12:d2:88:9f:fc:87:d1:c1:4e:72:
ed:fe:75:c1:a7:fb:9a:94:8f:8e:85:c7:6d:77:21:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:97:E9:F7:8B:9D:62:1A:05:8B:16:86:C2:31:A0:88:22:02:B2:8D
X509v3 Authority Key Identifier:
keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.42.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2d:51:16:2c:c4:43:26:29:0f:4c:2a:0e:ee:82:a2:3e:30:
4d:44:b7:c0:34:72:36:83:2f:9b:c7:00:29:df:46:3d:51:d6:
d9:be:7a:3d:5d:47:db:85:5c:a0:3f:28:a7:74:96:e1:ec:88:
63:1b:1a:e4:d8:86:ae:18:0f:78:b9:c4:99:51:4a:27:4c:df:
7d:7e:b9:12:5f:79:49:f1:0e:c7:38:da:c8:1d:44:71:49:56:
18:54:a5:93:2b:af:d9:0e:67:ca:0c:c6:32:87:6b:18:56:0a:
1b:33:b5:90:19:35:7b:d8:44:25:7e:ea:6d:6b:1d:9c:29:c1:
36:c1:69:c1:4c:37:90:3c:96:9f:b6:86:ae:06:18:ab:8e:85:
86:20:03:ab:dc:b2:51:5a:84:45:85:10:31:70:3c:f2:14:8a:
8b:68:13:09:27:2b:3c:9c:69:af:35:69:78:d4:fa:8e:c3:dd:
1a:62:98:5d:ae:9f:74:7a:db:8c:42:15:b1:6f:a2:b6:8f:f1:
48:e3:40:96:ef:59:fe:c6:f5:8e:1b:df:dd:18:1e:84:4e:e3:
1b:54:33:d6:12:5e:d8:5a:fb:1a:4d:39:d0:e2:6b:87:ab:e2:
2e:23:0c:f4:be:5c:57:80:dc:13:5c:2c:3d:cd:92:92:f3:f8:
93:9a:ab:8c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSXMfvOM7k3sSD02zYlw0yTqAtGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx
OTIzOEMyQTAeFw0yNTAxMTAwOTU1MDFaFw0yNjAxMDkxMDAwMDFaMDMxMTAvBgNV
BAMTKDY1OTdFOUY3OEI5RDYyMUEwNThCMTY4NkMyMzFBMDg4MjIwMkIyOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lBuaVJaqddVDyHzw5SwsUnXT
w030aSatKaDF1EMRUCR3CKtvijBDSsRkkbPSGy184AEXQBbSQaDn8QNx2qb7IujE
PTJc2Esr5wP+Cp/Bf7yY2LJzpAwHX8BYR1WaGzvonK1rCOghfWf+KcsfWepGgOiz
2gNV/LuNo8hk7RwSi0E/NTePpachaZ/LMkStAz0bmmMmPXEeSURmoi3B1JFuBz43
RFi012uagJhGHoPaT8pLROlAmKKp5RmJKq6OVSiMwituIrUgK0m0qa3fDeMVQcxg
i9QuduOTAoDVdNFPIMnMMuLtEtKIn/yH0cFOcu3+dcGn+5qUj46Fx213IS05AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUZZfp94udYhoFixaGwjGgiCICso0wHwYDVR0j
BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4
NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz
OEMyQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1ZGU3MWFjLTdmOWYtNDdkNC05
NTMzLTlkZjgyYWZjNTk3My8wLzMxMzUzNzJlMzEzNTJlMzQzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PKjANBgkqhkiG
9w0BAQsFAAOCAQEABC1RFizEQyYpD0wqDu6Coj4wTUS3wDRyNoMvm8cAKd9GPVHW
2b56PV1H24VcoD8op3SW4eyIYxsa5NiGrhgPeLnEmVFKJ0zffX65El95SfEOxzja
yB1EcUlWGFSlkyuv2Q5nygzGModrGFYKGzO1kBk1e9hEJX7qbWsdnCnBNsFpwUw3
kDyWn7aGrgYYq46FhiADq9yyUVqERYUQMXA88hSKi2gTCScrPJxprzVpeNT6jsPd
GmKYXa6fdHrbjEIVsW+ito/xSONAlu9Z/sb1jhvf3RgehE7jG1Qz1hJe2Fr7Gk05
0OJrh6viLiMM9L5cV4DcE1wsPc2SkvP4k5qrjA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:29:35 2025 by rpki-client