Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa
File: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (raw, json)
Hash identifier: VS9Cuwn3t0q97SOCPiAILshVWhFmPtuLTGwgoCrL9Gw=
Subject key identifier: B0:C8:47:DC:4D:89:E8:F0:E7:4E:6D:8D:17:27:48:7E:CD:88:CC:53
Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial: 53EE286EB55542F66C6E504BE0B44C330F4C0C6E
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa
Signing time: Mon 10 Jun 2024 07:35:07 +0000
ROA not before: Mon 10 Jun 2024 07:30:07 +0000
ROA not after: Mon 09 Jun 2025 07:35:07 +0000
asID: 152770
IP address blocks: 157.66.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ee:28:6e:b5:55:42:f6:6c:6e:50:4b:e0:b4:4c:33:0f:4c:0c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
Validity
Not Before: Jun 10 07:30:07 2024 GMT
Not After : Jun 9 07:35:07 2025 GMT
Subject: CN=B0C847DC4D89E8F0E74E6D8D1727487ECD88CC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:e8:13:5a:68:97:60:de:26:8d:79:87:b9:
d6:5e:ee:73:4c:35:1e:96:9d:a1:03:92:ff:7b:70:
28:3e:80:19:d5:b2:0b:cf:60:b9:15:12:97:d5:69:
b4:e2:e4:15:3d:e8:9e:b4:bc:57:dd:c1:f6:6e:88:
5f:a4:89:0d:7c:c2:ff:ee:ab:b1:ac:41:fd:55:49:
70:d8:66:30:0f:21:dd:b6:23:52:f3:2b:05:3d:0f:
77:4e:f1:12:0e:16:d0:e5:cc:5a:8b:b2:50:74:cf:
33:56:e1:95:cf:91:e0:37:b0:9c:55:3d:12:b5:0d:
6b:ef:83:ca:05:05:08:ff:7e:e5:9d:bd:98:7d:16:
ed:c1:25:a4:e4:3d:f1:76:45:f9:79:75:57:84:1b:
e7:f3:6e:05:da:97:47:82:0e:76:ea:e9:e7:8a:ae:
a4:72:a7:0b:20:f9:eb:2e:7c:3e:47:69:7a:31:5d:
85:70:e6:19:af:bc:16:d8:c7:f1:34:c0:12:da:c4:
65:0f:71:72:a5:a5:c4:e3:ad:27:e8:5d:f1:43:76:
2c:44:99:fe:05:e6:d0:e0:fc:36:21:9a:ef:6f:07:
64:67:7e:19:86:67:fa:72:da:57:37:22:6d:e9:72:
4a:45:3e:95:36:85:2f:ba:e0:8b:fd:f8:53:6f:93:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C8:47:DC:4D:89:E8:F0:E7:4E:6D:8D:17:27:48:7E:CD:88:CC:53
X509v3 Authority Key Identifier:
keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.192.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:65:4b:ad:ab:b4:08:02:60:ed:15:31:03:48:91:e5:ed:0a:
55:c0:01:df:39:c1:bb:3b:d7:01:a7:db:2a:21:52:21:fe:d6:
a6:a1:77:83:dd:50:74:87:09:a4:52:3f:25:dc:2c:23:a1:a9:
14:3b:03:8e:5f:04:ba:5b:58:db:52:6c:fc:0c:3f:7f:b1:3f:
85:2a:6f:33:cd:7c:53:df:05:f5:f0:27:b9:7b:4e:a9:b0:5c:
74:ff:03:3c:bd:18:19:dd:7d:26:e3:2c:99:13:02:ca:04:0c:
8c:f9:de:36:69:b6:40:79:4a:51:96:ae:b4:64:ab:f5:f7:3b:
e3:11:3f:84:e8:7b:79:be:84:bd:4c:da:ca:5a:06:39:4e:44:
d7:f8:11:d3:89:cf:7e:ae:f4:6a:7a:80:76:f7:75:06:d6:b5:
0f:a2:15:d0:ce:86:b8:cc:9b:3d:a2:3e:ad:b7:49:e8:74:25:
70:cf:92:dc:84:d3:e4:c0:8a:2f:e5:dd:75:bd:28:b9:25:66:
b9:f2:0d:8b:b5:d1:db:2e:d6:8d:ce:5d:11:92:95:a5:ab:ff:
c1:c4:82:cb:bf:c0:5a:df:f8:1e:1c:27:ab:ed:b2:f0:14:45:
b4:b7:3b:46:e5:e3:61:1f:03:b5:9d:30:76:ca:a9:ee:2b:8f:
9e:b6:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:54 2025 by rpki-client