Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa
File: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier: 82foMffwQwzyR9wKrvwkyZl1LONBJ6UBCu4U17RUdAo=
Subject key identifier: 47:C5:D8:1F:C9:F9:4D:A2:E7:B5:FF:78:4D:DD:9F:2D:C5:D3:96:DB
Certificate issuer: /CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C
Certificate serial: 5EC6B2FF8CE8A59F966219743A09EA0585F8B173
Authority key identifier: F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa
Signing time: Mon 30 Dec 2024 08:01:22 +0000
ROA not before: Mon 30 Dec 2024 07:56:22 +0000
ROA not after: Mon 29 Dec 2025 08:01:22 +0000
asID: 136052
IP address blocks: 157.10.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c6:b2:ff:8c:e8:a5:9f:96:62:19:74:3a:09:ea:05:85:f8:b1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C
Validity
Not Before: Dec 30 07:56:22 2024 GMT
Not After : Dec 29 08:01:22 2025 GMT
Subject: CN=47C5D81FC9F94DA2E7B5FF784DDD9F2DC5D396DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:28:3a:7d:87:bc:16:e3:a6:89:46:49:61:
88:b7:e6:83:60:a8:ce:1c:80:7c:06:76:5b:a6:7d:
5f:81:dd:74:2e:74:31:b1:a0:73:5e:b8:0d:bf:d3:
3c:4e:31:60:53:af:4e:f5:05:93:0f:d2:68:84:bd:
a4:a2:56:6d:1f:95:4a:57:99:52:15:9f:54:94:f1:
70:8f:0a:c5:52:e4:53:02:7d:0f:96:29:f9:c6:c9:
e4:38:9d:1c:c2:54:86:ec:fb:d1:fb:60:43:49:37:
d4:d0:10:e1:24:2f:0b:67:de:9f:ef:f2:b0:88:73:
f9:d6:5f:3e:7a:98:9c:e2:fe:35:a3:5d:8f:78:03:
31:cf:ae:ee:61:dc:3b:51:8b:02:37:20:71:e9:9e:
25:75:73:80:a0:f3:70:af:ba:28:99:20:9a:52:0f:
4e:e7:e8:05:a2:56:a8:36:f5:3f:35:59:70:7a:0e:
db:ea:7b:15:6a:48:c2:ab:0b:f4:0d:10:79:b6:b5:
bd:1d:73:34:65:b8:03:d1:c3:a7:18:a8:f0:77:91:
0b:22:f8:25:0e:a0:63:0e:20:26:8c:0d:90:47:93:
21:fa:e7:39:5e:ee:b2:fa:07:46:fb:0c:57:12:02:
32:87:d1:f0:4b:6f:6c:0f:86:d6:78:00:57:bc:cb:
41:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C5:D8:1F:C9:F9:4D:A2:E7:B5:FF:78:4D:DD:9F:2D:C5:D3:96:DB
X509v3 Authority Key Identifier:
keyid:F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.252.0/23
Signature Algorithm: sha256WithRSAEncryption
36:58:8f:6f:50:03:d6:6b:47:82:16:f6:4a:d7:88:b7:f6:25:
97:49:03:1b:3d:fb:59:0f:10:6e:46:1d:f0:89:87:34:5e:d4:
31:50:62:10:b2:78:57:d3:c6:9f:dd:eb:fa:28:ad:46:fa:5e:
88:61:7e:90:5c:91:16:7b:19:df:63:a8:a0:3c:f1:99:44:39:
b4:8f:24:68:03:08:62:31:3b:61:d2:67:a4:65:95:e7:e3:02:
4b:62:fd:ea:48:5a:e2:91:c0:a8:41:b2:c0:00:2b:bd:45:68:
70:19:a5:48:41:6a:ff:d6:61:4e:ab:00:b3:78:83:14:be:8f:
6c:3d:fc:1c:01:51:30:e8:00:33:2d:6d:dd:39:d2:46:fa:29:
89:e7:17:e7:8b:ff:a9:22:45:e2:ea:21:3f:95:71:9c:d0:8d:
5b:43:03:16:a4:6b:5e:4e:8d:f8:45:bb:72:a7:bf:f3:09:88:
c9:c3:6d:52:b5:20:b3:29:36:b3:fb:38:ee:1d:7d:07:50:04:
31:26:d7:12:a0:c1:a8:32:bf:2e:ee:97:3a:8e:ca:e5:b7:9a:
df:9d:b4:75:50:3b:a0:00:0d:1f:7e:a7:10:5c:48:3a:e4:a1:
c0:79:2b:fd:f7:86:f6:67:ad:1d:33:62:38:30:6e:7d:2c:f1:
1b:7f:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:34:04 2025 by rpki-client