Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa
File: 3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa (raw, json)
Hash identifier: BYPvMoDDPypOQWfaJ1aHyrVN5GPt3r1xMFVPu9nx4mk=
Subject key identifier: 90:7C:09:AB:96:B1:54:C9:E7:8F:11:C3:37:E1:F0:3C:5F:0F:DC:B4
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 2A996D32002B8AC9F41F8239E70E28555342C4D1
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa
Signing time: Fri 21 Mar 2025 11:00:01 +0000
ROA not before: Fri 21 Mar 2025 10:55:01 +0000
ROA not after: Fri 20 Mar 2026 11:00:01 +0000
asID: 18059
IP address blocks: 150.107.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:99:6d:32:00:2b:8a:c9:f4:1f:82:39:e7:0e:28:55:53:42:c4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Mar 21 10:55:01 2025 GMT
Not After : Mar 20 11:00:01 2026 GMT
Subject: CN=907C09AB96B154C9E78F11C337E1F03C5F0FDCB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:a8:74:90:18:32:4b:db:e7:d6:da:af:41:
32:8e:d0:50:5d:9d:67:df:7f:07:50:1d:7e:b1:28:
3f:71:e8:9a:bc:bd:29:84:17:9e:12:f1:4e:91:b0:
2e:29:31:e7:ba:21:e5:e5:1e:bb:b4:2a:85:fc:47:
58:5b:eb:cd:90:6a:bf:8f:0e:16:0e:f5:37:17:10:
26:44:08:22:be:47:a0:04:a3:89:b0:1c:94:81:6e:
cf:89:09:6d:16:78:ee:10:d6:0d:7f:6b:02:43:02:
b0:11:cd:d9:78:7a:d1:25:90:63:99:6e:db:6b:3c:
8a:24:a1:19:ff:f5:83:86:4b:55:57:2e:de:f3:a6:
d0:c0:f1:4a:ae:6a:79:07:ac:fe:39:27:39:55:28:
95:b3:2b:8a:f6:bc:4a:17:e3:54:2a:c5:87:c9:fd:
da:29:d9:57:ce:34:6d:27:28:f1:fc:e2:a6:c4:ee:
99:01:11:72:fa:44:72:bf:8a:b5:2f:78:b4:91:51:
d4:a5:53:b2:de:91:a6:23:ff:be:b2:80:f9:b5:35:
13:6d:94:32:95:5a:b8:fc:cc:92:ee:91:90:24:5f:
66:7b:45:50:2f:36:be:b8:43:1d:0d:29:1b:c7:18:
25:1d:2b:ec:5d:83:a2:0d:42:78:4a:f0:63:d4:54:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7C:09:AB:96:B1:54:C9:E7:8F:11:C3:37:E1:F0:3C:5F:0F:DC:B4
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:2f:8b:64:55:38:bd:57:a0:5a:32:27:af:ff:28:d1:ae:21:
c3:d3:73:86:ff:2c:ac:9b:44:94:93:18:7d:a3:ca:08:53:2a:
26:78:6d:a4:c8:03:64:79:4d:0c:71:83:34:2d:b0:c8:3e:d4:
7c:ab:c5:42:7b:fd:b5:4d:72:ca:57:e1:19:f3:e8:c9:79:39:
07:ca:05:69:e7:b8:c1:ed:f1:bb:5a:39:45:b9:30:1e:42:69:
c2:12:5d:0d:08:02:34:32:c3:9d:26:6a:57:3c:1b:75:fd:03:
20:11:03:7e:1d:e1:d9:16:02:80:99:f8:d4:8b:a1:07:f9:37:
a1:34:eb:d2:bf:d0:cc:ac:b0:16:4b:5c:99:0a:af:88:ab:0c:
3e:70:66:0b:25:25:9e:f9:df:e2:b0:2a:1c:db:f3:37:5d:0a:
da:fe:13:6d:42:7b:8f:3e:55:21:8d:ab:1c:e1:2e:10:ee:0f:
11:62:08:58:b2:ca:1a:77:b9:fb:0e:c5:29:44:cb:91:65:28:
65:64:24:79:64:cc:56:25:92:36:48:a6:84:0a:74:03:0b:2d:
e3:3c:64:15:ad:95:44:4b:18:3b:4a:66:cd:4a:d6:61:74:20:
5b:b8:49:ff:ef:27:e3:c4:e8:4b:d3:8e:51:f2:50:57:e0:5a:
11:46:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:29 2025 by rpki-client