Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32332d3233203d3e203536323432.roa
File: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (raw, json)
Hash identifier: zqqM4+D0YvV3kzADDLg9UoTtA+fv3LSZ59niExdp6h4=
Subject key identifier: 5A:0E:23:07:47:BB:73:BD:E4:0D:CB:9B:B0:75:46:96:A5:46:D2:06
Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial: 50DFCBE781D0DFC90D9669B68244CD1AECE5D3E4
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32332d3233203d3e203536323432.roa
Signing time: Sat 11 Jan 2025 09:00:00 +0000
ROA not before: Sat 11 Jan 2025 08:55:00 +0000
ROA not after: Sat 10 Jan 2026 09:00:00 +0000
asID: 56242
IP address blocks: 137.59.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:df:cb:e7:81:d0:df:c9:0d:96:69:b6:82:44:cd:1a:ec:e5:d3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Validity
Not Before: Jan 11 08:55:00 2025 GMT
Not After : Jan 10 09:00:00 2026 GMT
Subject: CN=5A0E230747BB73BDE40DCB9BB0754696A546D206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:e8:f1:56:61:dd:0f:28:cb:64:eb:72:52:
f0:fe:63:97:18:93:e5:5f:0d:6c:36:65:9d:54:e2:
0e:2d:dc:c1:32:64:ed:21:00:08:2a:65:67:ed:93:
99:97:a1:24:55:4d:63:fc:5c:62:a8:99:36:b9:d2:
9d:9d:b0:e2:e4:7d:91:96:b9:8a:60:be:23:ff:61:
c8:80:f2:82:8a:46:25:1f:b8:cd:11:ca:e8:de:e5:
96:73:6e:fe:01:75:8a:f8:13:5f:b0:ce:14:3e:eb:
62:76:cb:9b:76:39:20:1d:5a:70:d9:db:8b:82:c5:
bd:a1:b9:77:26:99:aa:a1:3d:8a:66:a1:eb:25:8d:
e4:fd:cc:ac:fd:cf:61:59:c6:e6:4f:17:bf:8f:63:
d7:06:21:15:bf:c3:cb:f9:3b:a6:08:b3:d7:2d:27:
f4:01:2e:f6:ac:bd:62:ca:f0:9b:b7:44:a9:97:19:
83:e9:df:64:d3:78:33:c8:ed:89:93:c1:7a:25:55:
f2:02:55:2a:cc:fe:31:08:ba:1b:0e:5a:b2:43:24:
5a:91:33:e4:56:58:e7:a8:47:14:56:06:56:38:b5:
ee:72:55:87:d5:4b:75:02:46:dd:f0:ee:06:41:dd:
d8:cc:e5:eb:fb:42:09:6c:8f:e6:8b:ff:69:0f:23:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0E:23:07:47:BB:73:BD:E4:0D:CB:9B:B0:75:46:96:A5:46:D2:06
X509v3 Authority Key Identifier:
keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32332d3233203d3e203536323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.59.162.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:34:b5:cc:e5:cb:69:ca:89:ba:57:0f:0f:eb:1d:59:98:fc:
b1:84:0a:53:a4:dd:28:c1:90:d0:02:82:5c:e7:e0:d2:72:ee:
9f:41:c3:a1:ac:c2:dc:3c:78:4f:77:07:c6:dc:86:70:27:4b:
1d:98:cf:57:cc:be:d6:b1:f3:c4:1a:9a:e0:c8:ce:a7:95:0d:
a7:98:5e:50:ab:c4:f3:7a:ed:f1:a3:f8:01:00:c4:f7:e5:9c:
28:04:98:31:61:6a:94:64:43:06:8e:c7:e9:a0:6d:22:89:85:
e9:05:61:59:4b:b4:85:36:af:32:92:df:6d:5b:22:a6:7b:11:
d0:5f:fd:67:ef:df:c0:62:b8:e5:01:a5:3e:68:fe:1a:3b:56:
e3:91:10:6a:39:e0:b0:53:bd:5c:06:34:9e:fb:4e:3a:50:43:
f5:25:f5:1a:e1:62:e0:a0:d5:45:43:24:9c:92:c9:2c:1d:25:
f6:5a:34:87:c6:b5:f8:3c:8f:78:d0:89:b3:56:3c:00:8b:24:
e2:ad:f9:a2:7a:9d:66:0e:b5:49:3d:d4:ea:b9:c4:a2:9b:bd:
04:bb:6d:37:d6:35:b6:cd:80:26:c9:c1:5e:3f:08:15:2b:5a:
c4:c7:30:af:ba:b4:e3:44:7c:9a:bf:6b:ae:c4:44:78:84:60:
f9:c3:0f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:09:01 2025 by rpki-client