Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136332e302f32342d3234203d3e203536323432.roa
File: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (raw, json)
Hash identifier: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs=
Subject key identifier: 0C:66:0D:AE:A6:6B:8F:1E:C7:91:14:79:FB:20:85:05:70:5F:42:DC
Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial: 18D22B57C6ACBDEEC75036F7A16CB373BBC5850D
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136332e302f32342d3234203d3e203536323432.roa
Signing time: Sat 11 Jan 2025 10:00:00 +0000
ROA not before: Sat 11 Jan 2025 09:55:00 +0000
ROA not after: Sat 10 Jan 2026 10:00:00 +0000
asID: 56242
IP address blocks: 137.59.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d2:2b:57:c6:ac:bd:ee:c7:50:36:f7:a1:6c:b3:73:bb:c5:85:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Validity
Not Before: Jan 11 09:55:00 2025 GMT
Not After : Jan 10 10:00:00 2026 GMT
Subject: CN=0C660DAEA66B8F1EC7911479FB208505705F42DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:44:2d:68:58:e4:27:05:b6:a9:53:7c:5d:
30:4b:5b:68:c7:f3:b0:be:e1:9a:2b:de:14:c4:81:
6f:0d:68:85:e3:01:36:11:ce:a7:39:9b:e0:bd:b9:
b4:9a:e6:35:30:0e:4b:f0:01:bc:51:95:d2:ba:ed:
28:86:f8:62:01:9d:69:72:6f:13:5c:bc:e3:81:2c:
0a:31:cf:ab:72:3f:47:ff:7c:4c:69:98:f8:ca:a6:
69:43:38:41:f4:67:53:44:74:43:1c:36:31:0f:da:
ce:8e:52:f9:86:32:71:c2:ad:da:53:ad:0a:e0:8b:
b5:80:a4:21:23:17:92:a6:92:8f:83:b7:c9:00:64:
dd:b6:5f:9b:9a:52:eb:6a:2d:b9:fa:1a:ed:22:fc:
69:08:6c:a1:aa:fc:26:ee:f7:39:13:5a:20:02:e2:
de:4e:19:d2:66:82:72:32:d3:71:b0:5b:38:bf:04:
f2:be:e4:2b:75:5d:53:f4:3f:aa:ed:8d:f7:35:4a:
08:d3:50:c3:74:44:4c:a9:28:a9:d1:b6:ed:c6:da:
aa:d4:98:52:01:99:75:9b:06:cc:cf:ed:44:9b:46:
04:88:db:4d:da:b1:0d:02:d4:cb:1c:9e:b6:b6:36:
6d:06:cc:af:e6:98:f4:f1:96:e5:20:9a:dd:4d:a9:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:0D:AE:A6:6B:8F:1E:C7:91:14:79:FB:20:85:05:70:5F:42:DC
X509v3 Authority Key Identifier:
keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136332e302f32342d3234203d3e203536323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.59.163.0/24
Signature Algorithm: sha256WithRSAEncryption
08:20:06:47:2a:d5:70:98:fa:27:d8:2f:e8:48:3a:88:78:53:
4f:4b:1a:b7:8c:70:c6:b8:c6:b3:42:c9:a8:28:80:60:52:c4:
17:4c:13:87:51:d6:30:95:37:4d:54:79:4d:09:5d:62:bd:6d:
fb:9f:8a:ed:2f:67:31:b5:40:f4:ee:22:f7:2b:8d:55:3e:61:
db:f4:1b:a0:c6:d6:af:ca:3c:f4:f8:69:3c:97:e0:38:6e:08:
45:34:8d:15:04:cf:61:ba:1e:bc:db:62:1a:a5:83:58:5e:ad:
46:f3:77:98:c7:a2:79:e6:0e:e6:07:2a:1c:4e:8f:cf:28:ef:
5f:08:09:b5:a4:c5:1e:9c:1f:02:8b:40:cf:4a:25:61:b3:53:
0e:32:1a:d3:63:06:32:0f:ea:5d:a2:2f:0a:f1:94:22:9f:65:
af:cc:e8:bb:11:9d:3e:5d:c2:39:40:74:52:8d:40:e2:f7:a3:
bd:72:2f:35:11:f6:18:37:80:8e:c9:27:ac:ac:42:1c:9d:21:
4a:b7:44:a4:a1:65:db:a3:02:6b:f1:8c:79:5b:af:ff:28:32:
72:9d:3c:1c:83:cf:35:1a:ae:71:db:c1:05:6b:55:05:af:68:
97:8a:8a:cc:c1:fc:10:92:67:71:d7:23:76:11:a4:14:1a:1d:
6d:51:14:5b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGNIrV8asve7HUDb3oWyzc7vFhQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0
ODUzMEU5RTAeFw0yNTAxMTEwOTU1MDBaFw0yNjAxMTAxMDAwMDBaMDMxMTAvBgNV
BAMTKDBDNjYwREFFQTY2QjhGMUVDNzkxMTQ3OUZCMjA4NTA1NzA1RjQyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8EQtaFjkJwW2qVN8XTBLW2jH
87C+4Zor3hTEgW8NaIXjATYRzqc5m+C9ubSa5jUwDkvwAbxRldK67SiG+GIBnWly
bxNcvOOBLAoxz6tyP0f/fExpmPjKpmlDOEH0Z1NEdEMcNjEP2s6OUvmGMnHCrdpT
rQrgi7WApCEjF5Kmko+Dt8kAZN22X5uaUutqLbn6Gu0i/GkIbKGq/Cbu9zkTWiAC
4t5OGdJmgnIy03GwWzi/BPK+5Ct1XVP0P6rtjfc1SgjTUMN0REypKKnRtu3G2qrU
mFIBmXWbBszP7USbRgSI203asQ0C1Mscnra2Nm0GzK/mmPTxluUgmt1NqYAhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUDGYNrqZrjx7HkRR5+yCFBXBfQtwwHwYDVR0j
BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy
NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz
MEU5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05
ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzMzNzJlMzUzOTJlMzEzNjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIk7ozANBgkqhkiG
9w0BAQsFAAOCAQEACCAGRyrVcJj6J9gv6Eg6iHhTT0sat4xwxrjGs0LJqCiAYFLE
F0wTh1HWMJU3TVR5TQldYr1t+5+K7S9nMbVA9O4i9yuNVT5h2/QboMbWr8o89Php
PJfgOG4IRTSNFQTPYboevNtiGqWDWF6tRvN3mMeieeYO5gcqHE6PzyjvXwgJtaTF
HpwfAotAz0olYbNTDjIa02MGMg/qXaIvCvGUIp9lr8zouxGdPl3COUB0Uo1A4vej
vXIvNRH2GDeAjsknrKxCHJ0hSrdEpKFl26MCa/GMeVuv/ygycp08HIPPNRqucdvB
BWtVBa9ol4qKzMH8EJJncdcjdhGkFBodbVEUWw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 10:04:03 2025 by rpki-client