Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3135302e3130372e3133382e302f32332d3234203d3e20313338383431.roa
File: 3135302e3130372e3133382e302f32332d3234203d3e20313338383431.roa (raw, json)
Hash identifier: Y4XRco5Cf1PQW1+ePQCZ3QCp/5iWzhXQ+8zfzLGxU0Q=
Subject key identifier: B8:C4:69:1E:EE:CE:4D:AF:92:63:43:4E:26:7A:12:C0:F9:E8:92:46
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 368ED205C37392AC292166988EEA286AF0F86BF0
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3135302e3130372e3133382e302f32332d3234203d3e20313338383431.roa
Signing time: Fri 23 Aug 2024 06:00:04 +0000
ROA not before: Fri 23 Aug 2024 05:55:04 +0000
ROA not after: Fri 22 Aug 2025 06:00:04 +0000
asID: 138841
IP address blocks: 150.107.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8e:d2:05:c3:73:92:ac:29:21:66:98:8e:ea:28:6a:f0:f8:6b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Aug 23 05:55:04 2024 GMT
Not After : Aug 22 06:00:04 2025 GMT
Subject: CN=B8C4691EEECE4DAF9263434E267A12C0F9E89246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:4c:db:de:ad:9a:3b:4a:05:8d:68:aa:d0:
fc:5b:e3:06:1b:d6:c7:c5:40:96:f7:e8:07:c1:76:
f0:0c:e0:cd:d1:a9:36:f7:e9:31:a1:0a:67:a0:e3:
7b:b6:b4:26:d3:45:5a:db:ff:71:d4:89:99:3b:f2:
69:ce:56:0d:d2:17:56:87:13:25:57:ff:68:d1:32:
59:ec:bc:ae:62:27:df:39:44:77:3a:d2:1e:e9:50:
48:0b:7e:ae:ab:27:3d:6a:b1:15:66:26:98:13:e0:
d0:ac:dc:2e:03:b6:8d:d3:f3:3b:83:47:55:0e:88:
dc:ad:8e:6a:c8:0f:e4:c2:3d:6c:8f:ad:89:36:d0:
4a:89:2d:f8:f4:11:aa:5d:8a:c6:90:52:6d:71:ca:
df:c7:c3:a3:98:71:19:c6:21:fb:db:e1:9d:11:38:
d6:29:a5:bb:91:5a:e0:83:1c:dc:65:3f:32:d6:fa:
45:b7:f8:6a:63:ae:f6:32:8e:22:20:f2:0b:a2:07:
b9:61:69:28:ea:75:2d:61:ab:f8:c8:ba:e9:bf:2a:
83:57:b0:8d:40:5c:f1:1c:d5:64:90:e8:55:b5:c7:
5f:e3:98:2e:57:cb:78:38:0c:b5:74:8f:71:df:ad:
06:8d:b3:77:55:35:8d:9d:90:a8:a9:6f:9a:62:31:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C4:69:1E:EE:CE:4D:AF:92:63:43:4E:26:7A:12:C0:F9:E8:92:46
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3135302e3130372e3133382e302f32332d3234203d3e20313338383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.138.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:be:98:ff:76:db:48:ae:7b:4d:b5:46:35:7f:8d:a3:5d:77:
f7:77:23:89:99:78:8f:e0:cb:26:d9:34:52:ae:2d:e0:06:3c:
df:b1:1f:bb:5a:e5:24:42:d0:f4:e6:36:f3:66:57:28:b6:d8:
20:21:54:3e:68:1b:8b:56:a7:c9:84:63:65:1e:37:3f:4e:01:
f3:51:4e:27:de:30:b1:26:ae:65:5a:46:2c:d8:e5:07:24:50:
73:1e:18:80:e5:f4:66:24:f2:bf:bd:0e:81:ab:fd:b2:58:9a:
40:47:07:84:22:4c:83:0d:e4:30:ab:d4:cc:ba:da:eb:c6:98:
c3:12:88:0d:f9:90:46:c3:0b:35:9e:ed:d4:76:94:ca:c4:93:
31:45:db:b6:bf:e4:d7:3f:2a:6a:b8:da:43:9b:50:a6:f5:e7:
65:a6:b8:f8:eb:af:81:e6:06:c3:5d:59:d9:17:2f:78:13:b7:
f0:b0:d6:09:53:50:39:cb:7b:7e:18:e1:e8:5c:40:2f:6d:7a:
cf:a5:f5:96:a1:d2:0d:d6:de:47:f0:ea:7f:82:8b:20:46:78:
eb:2f:ac:f3:86:bf:b2:15:75:00:bb:a2:b0:3f:37:a1:52:db:
12:8c:5e:53:39:2d:95:ce:4e:19:0b:4f:a1:23:ce:38:a3:4c:
7a:c8:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:48 2025 by rpki-client