Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa
File: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (raw, json)
Hash identifier: 594wKSAWlPpCaF+0MRLR4aC4V5qJ2eufvq7sqBbmmOc=
Subject key identifier: D3:1A:4C:FE:B4:2B:FE:63:3C:C6:95:DA:95:7E:99:F2:A2:37:A1:35
Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED
Certificate serial: 23047027F837108D46AF8CFDC25C0AE1BEFFD6E1
Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa
Signing time: Fri 06 Dec 2024 04:28:21 +0000
ROA not before: Fri 06 Dec 2024 04:23:21 +0000
ROA not after: Fri 05 Dec 2025 04:28:21 +0000
asID: 152403
IP address blocks: 157.20.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:04:70:27:f8:37:10:8d:46:af:8c:fd:c2:5c:0a:e1:be:ff:d6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED
Validity
Not Before: Dec 6 04:23:21 2024 GMT
Not After : Dec 5 04:28:21 2025 GMT
Subject: CN=D31A4CFEB42BFE633CC695DA957E99F2A237A135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:9e:68:b5:8a:de:a5:db:fd:5e:b0:1e:dc:
d4:24:93:f2:79:74:d6:31:59:e8:62:95:4b:b9:3a:
d9:c5:e7:96:b8:3e:c9:63:c3:b5:cd:92:f9:8b:cc:
31:22:07:54:67:0f:78:e5:ce:a6:d2:a0:95:68:c7:
ca:b0:2d:9e:2d:69:cd:74:e7:cd:18:c7:86:82:9d:
35:43:df:43:09:83:55:1a:a2:33:a1:c2:83:cd:52:
a7:d4:c6:0e:0b:ff:80:68:23:d3:43:2b:b9:11:c3:
52:fd:2e:5f:ef:bf:f2:7e:8a:95:e5:d1:72:b2:fe:
21:2d:6b:f8:ed:c0:5c:ef:f8:6c:02:18:98:7c:e0:
87:2b:e9:bd:fb:45:63:a2:e0:a0:07:b5:d8:4f:f4:
fc:67:a1:aa:af:92:eb:d1:53:b4:48:66:3f:db:93:
cb:fd:df:51:23:95:b5:ec:11:e5:72:e3:ed:1d:e2:
02:a2:22:09:58:51:1b:2e:3c:c5:56:70:ac:3d:5b:
e9:e9:d8:69:92:41:de:ff:08:ed:5f:9a:99:14:f8:
93:9b:3c:03:14:d6:a1:22:41:10:35:01:50:5b:61:
eb:77:a5:f1:34:91:e0:9c:9c:ea:41:ee:13:d5:46:
67:a3:a7:19:4b:2b:f6:04:2b:ee:9d:b7:d0:4a:30:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1A:4C:FE:B4:2B:FE:63:3C:C6:95:DA:95:7E:99:F2:A2:37:A1:35
X509v3 Authority Key Identifier:
keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.132.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b5:c6:28:13:bc:be:53:e8:90:d6:ad:9c:6d:af:3e:99:40:
bf:9c:1a:98:2d:17:e6:f6:36:9f:88:de:57:6b:87:87:26:ba:
2b:fd:3c:a7:b7:ac:de:ba:4f:ec:37:3c:45:6f:a8:0e:df:14:
41:f3:b8:7e:3f:83:db:e2:ba:d0:fc:f3:3c:01:11:ae:ad:61:
dd:4d:65:cd:7d:6b:2e:cb:22:d3:cc:d5:12:31:b8:a7:25:91:
d3:67:59:08:00:b2:5a:87:c1:77:f1:d8:f4:29:3c:a1:6a:1d:
07:01:1f:86:53:af:6d:ac:a1:fb:1c:97:fb:ff:b0:f0:25:68:
60:78:e5:4c:d5:71:fa:cd:e3:c8:29:dc:e9:1f:c5:35:87:ed:
3c:3b:dc:ad:4f:6c:85:39:4c:d6:08:82:76:ca:bc:64:c4:5f:
a4:21:48:00:c0:89:7a:96:58:bb:32:ba:1e:db:c3:58:4d:69:
1a:32:47:df:19:63:d8:5d:96:36:f1:ae:4a:59:f1:20:84:fc:
22:69:4d:d6:dd:d3:85:e5:ce:c4:47:9d:16:d8:ee:92:7c:39:
81:0f:e0:8e:ed:e9:5c:35:20:90:89:70:f8:12:39:3a:b8:8f:
56:2b:16:a5:25:04:08:90:6b:64:8a:8b:ca:2d:59:80:5f:bf:
1e:7c:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:08:39 2025 by rpki-client