Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134332e302f32342d3234203d3e203538343838.roa
File: 3135302e3130372e3134332e302f32342d3234203d3e203538343838.roa (raw, json)
Hash identifier: coyNFfv0t8z6HSwC5yFkjxaXmnBL13jYjDeRv+KgiQM=
Subject key identifier: E4:5B:D4:D3:F2:EF:FF:3E:06:4A:CA:C6:67:9D:56:E8:B5:CE:81:08
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 52E736FB7230251A89891E3174D7BDB8030AA617
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134332e302f32342d3234203d3e203538343838.roa
Signing time: Mon 30 Dec 2024 04:00:02 +0000
ROA not before: Mon 30 Dec 2024 03:55:02 +0000
ROA not after: Mon 29 Dec 2025 04:00:02 +0000
asID: 58488
IP address blocks: 150.107.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e7:36:fb:72:30:25:1a:89:89:1e:31:74:d7:bd:b8:03:0a:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Dec 30 03:55:02 2024 GMT
Not After : Dec 29 04:00:02 2025 GMT
Subject: CN=E45BD4D3F2EFFF3E064ACAC6679D56E8B5CE8108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:55:88:a3:b8:e1:2e:ab:99:bd:4e:9b:5a:
3b:c8:cf:a3:c3:ee:88:68:27:68:4a:0d:8d:12:c8:
65:93:7b:f7:90:6e:ad:e6:7f:e2:df:b8:ef:44:c7:
cb:7e:5e:c1:e1:26:e5:17:77:44:d7:bc:1b:58:e0:
df:c6:36:9c:3f:64:89:95:d7:34:dc:2b:52:01:88:
02:0f:36:84:6f:16:94:d5:31:9a:54:84:0c:68:42:
02:b8:03:d7:ed:3e:4e:53:f2:5d:74:f4:c7:05:24:
1a:2f:51:78:e0:9b:ae:10:6b:f9:69:a2:17:5a:7c:
30:84:c0:59:b3:c5:aa:7c:bd:4b:5f:52:d6:ec:d2:
4d:28:da:cb:f8:d2:56:d1:77:ff:a3:57:58:e8:db:
72:91:a7:45:ee:e5:6a:69:cd:41:f6:51:10:ad:8b:
2c:44:64:ec:7c:87:ba:1f:c2:72:6e:2c:1f:65:70:
82:3d:50:3c:6c:9d:d1:17:db:3f:4c:f5:d5:a1:5a:
7d:27:9f:f2:71:1e:d2:0f:06:48:85:b9:75:e3:7e:
81:73:bc:b4:70:21:d0:f8:3f:34:56:f4:2f:1d:46:
9b:8b:bd:66:ca:39:f4:28:13:44:93:49:de:28:34:
1e:62:2a:da:8d:7a:10:de:16:a1:e4:e1:37:bd:73:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:D4:D3:F2:EF:FF:3E:06:4A:CA:C6:67:9D:56:E8:B5:CE:81:08
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134332e302f32342d3234203d3e203538343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.143.0/24
Signature Algorithm: sha256WithRSAEncryption
71:70:75:3a:5a:56:de:9f:63:a2:25:2a:41:cc:5d:f6:b5:ec:
7c:f7:9e:3b:7c:70:d4:f4:c9:5d:1f:34:78:be:c7:ef:18:c9:
d1:77:2d:20:2e:92:66:1c:1e:27:71:13:17:38:ab:73:40:e7:
03:8f:b4:99:3f:a0:0c:1a:3a:2f:49:6a:6f:a5:72:63:21:75:
37:be:47:e0:ea:44:2d:b6:ed:cc:72:61:3f:c5:fd:01:9c:59:
fa:56:57:9c:67:9d:d4:84:00:41:1a:54:46:a2:07:b6:da:bb:
8a:3b:3d:e8:c6:9a:5f:d6:06:51:4a:d4:02:76:2a:5e:f2:dd:
64:85:53:57:18:01:3b:21:1f:b8:7d:ee:ac:56:4a:22:32:a8:
fd:7f:73:a7:6b:47:94:0b:4f:61:c3:1a:ba:61:ca:fa:1e:4b:
03:87:28:12:55:8a:ab:ca:b5:7d:bd:9c:4d:fc:49:5b:00:0b:
28:6c:48:3f:b7:d5:73:06:ea:09:d5:da:31:2b:29:c7:f1:f7:
14:fa:45:3f:ee:28:f0:2d:d2:a1:f8:7a:6a:df:18:a7:8a:29:
2f:09:31:ff:ad:16:db:05:6b:c8:fa:4a:81:16:fb:8d:0a:40:
3c:64:d3:90:64:a6:f4:de:04:60:5b:48:a6:1f:30:e3:09:2e:
8d:24:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:05 2025 by rpki-client