Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa
File: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (raw, json)
Hash identifier: 9Ps4lpyCI5AkpUO4H4klRIWsvqZu5uuBAWc0+OF7K50=
Subject key identifier: B8:F7:0A:0A:59:DD:DA:0B:F9:80:89:AE:CB:F3:BC:8F:B7:16:13:0E
Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336
Certificate serial: 7243FF2097939E9520FC2E306E1D495DD0201324
Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa
Signing time: Sun 03 Mar 2024 06:58:55 +0000
ROA not before: Sun 03 Mar 2024 06:53:55 +0000
ROA not after: Sun 02 Mar 2025 06:58:55 +0000
asID: 142375
IP address blocks: 203.145.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:43:ff:20:97:93:9e:95:20:fc:2e:30:6e:1d:49:5d:d0:20:13:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336
Validity
Not Before: Mar 3 06:53:55 2024 GMT
Not After : Mar 2 06:58:55 2025 GMT
Subject: CN=B8F70A0A59DDDA0BF98089AECBF3BC8FB716130E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:3c:4d:b9:8b:94:16:ca:39:a3:d2:c1:40:
d1:2e:a6:d8:b1:58:c8:e0:62:de:25:c2:eb:7e:30:
77:3b:88:b1:9a:17:3e:32:e2:14:05:52:75:85:dd:
0f:bd:e4:ab:08:83:4f:53:21:10:7f:ea:5a:26:ae:
14:b9:c3:01:0c:e3:d2:c6:47:ed:44:54:63:8c:57:
ab:80:46:21:80:e4:69:53:1e:ab:8c:f3:1d:36:e6:
8c:82:25:d7:c1:45:8d:f0:a3:7a:45:27:a0:c4:5c:
7d:6b:ad:e8:e5:e8:78:d0:cb:9f:2e:f3:29:dc:4e:
fd:12:36:88:b6:c0:3a:38:9f:1d:ec:61:1a:29:83:
b5:bc:9c:37:b8:6e:cf:44:10:aa:a0:2f:65:bd:ca:
60:5e:48:e2:ea:f2:79:3f:4a:c9:46:a9:2c:35:f3:
de:d0:84:82:01:7e:57:2f:b7:ec:99:87:5d:39:bd:
0f:af:dd:f8:42:23:b5:16:88:4e:47:36:d4:80:09:
84:68:dc:f5:60:c7:96:67:76:49:b5:79:3f:75:a8:
bd:4e:63:16:69:4c:ab:df:6d:20:a5:02:7e:06:4c:
c9:a5:c6:c3:b0:0d:ad:c3:79:cf:3a:34:e6:f7:5a:
56:dd:8b:fe:34:05:f2:03:d1:3f:5a:ec:d0:26:e1:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F7:0A:0A:59:DD:DA:0B:F9:80:89:AE:CB:F3:BC:8F:B7:16:13:0E
X509v3 Authority Key Identifier:
keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.145.59.0/24
Signature Algorithm: sha256WithRSAEncryption
87:40:4b:9d:e9:79:07:ca:21:58:15:4a:85:67:e2:b9:e0:ce:
8f:28:c7:e6:50:ed:77:d8:29:53:31:4d:d8:23:ba:68:3e:83:
0f:83:04:a9:2a:f2:0b:bb:79:cf:4e:8e:41:98:fa:9d:03:0e:
ea:e2:9f:5a:80:c6:c4:6a:3a:ca:3e:6a:33:80:90:cb:5c:79:
d5:06:ca:3e:b1:c0:7d:20:aa:b7:48:f7:b6:89:4d:35:a3:27:
6a:d1:34:5c:48:2b:b9:79:f5:76:98:a2:63:37:0b:c8:11:de:
68:52:c7:13:2e:e4:eb:3c:9a:1c:8e:48:fa:aa:2d:5b:75:44:
87:61:04:54:d5:c5:ee:87:4e:aa:f2:0f:e7:4e:db:1d:02:82:
5a:c0:bf:a5:77:b9:e8:53:7f:45:53:79:32:c1:6d:31:53:db:
57:f7:2b:a8:5a:80:b9:64:bf:d8:b8:ff:17:f1:9e:22:a9:a5:
7c:ff:19:4a:d0:96:0e:5c:e5:aa:56:e3:17:39:9f:cb:7c:bd:
fc:94:68:4d:d7:55:69:d7:4b:65:c1:80:f6:d4:8a:a4:3b:1a:
a1:d3:01:12:d2:fb:56:91:e9:67:d1:4d:f5:7f:22:3f:46:77:
00:f0:1e:0a:3b:00:24:a4:0f:f7:fb:2a:e7:7c:32:c2:16:d6:
d3:9e:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:56 2025 by rpki-client