Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa
File: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier: rBGdSMT8TyCX1hza79EhNX5rZ23TWWthY7OuvHhtfMI=
Subject key identifier: 23:18:BA:D7:EF:FF:46:6E:0B:E3:A3:E1:A4:57:C2:8A:2A:80:CD:6A
Certificate issuer: /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial: 549B7786C8D9445E3439BDF7B233870285DC582E
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa
Signing time: Mon 01 Jul 2024 01:04:23 +0000
ROA not before: Mon 01 Jul 2024 00:59:23 +0000
ROA not after: Mon 30 Jun 2025 01:04:23 +0000
asID: 24204
IP address blocks: 203.80.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:9b:77:86:c8:d9:44:5e:34:39:bd:f7:b2:33:87:02:85:dc:58:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Validity
Not Before: Jul 1 00:59:23 2024 GMT
Not After : Jun 30 01:04:23 2025 GMT
Subject: CN=2318BAD7EFFF466E0BE3A3E1A457C28A2A80CD6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:e6:d0:7b:5d:96:68:11:3f:b4:b2:bc:f5:
4c:12:9a:dd:a3:7f:6b:ef:a2:34:73:a6:9b:55:5a:
b9:16:b0:41:7a:a6:c6:fd:37:d0:0c:2a:b5:20:4d:
7d:97:e7:22:6d:df:8f:3a:0f:aa:b4:a1:88:fb:6b:
ca:6f:e8:54:58:54:a4:d4:1b:c5:40:f2:b5:18:2c:
4b:b1:ca:b7:c3:d4:7c:53:e6:fa:02:48:5a:42:fc:
52:a9:eb:a1:e0:36:f7:41:11:9a:ac:65:d6:e7:0d:
a4:25:ce:af:3e:c5:86:06:72:51:b1:5b:cc:e1:a2:
46:2a:5a:46:fd:bc:21:a5:c2:f2:fc:9d:c3:79:f3:
b0:30:7f:a7:51:2e:5b:9a:5d:d9:d5:9a:8e:a7:b6:
a3:bb:36:10:01:0d:f7:9e:ab:6c:00:41:88:b1:a9:
69:68:d7:82:77:a2:13:b7:d0:76:7d:a0:ae:0e:82:
8f:13:3f:5d:7e:fe:14:cc:8b:4f:1c:d1:69:b6:88:
ef:71:ad:ec:50:39:19:4a:11:e7:a7:d9:aa:7b:57:
dd:1b:c7:e7:c2:90:23:6e:94:b3:07:d2:41:4a:88:
0e:96:d4:c5:b8:6b:68:b6:77:05:86:c7:1c:80:ec:
0c:2a:6e:4b:ca:07:02:8a:5b:a2:51:f3:de:10:7c:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:18:BA:D7:EF:FF:46:6E:0B:E3:A3:E1:A4:57:C2:8A:2A:80:CD:6A
X509v3 Authority Key Identifier:
keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.80.9.0/24
Signature Algorithm: sha256WithRSAEncryption
44:58:01:48:d0:3b:3a:0b:89:c1:89:15:0d:48:09:cd:17:4b:
95:86:69:7a:b1:35:49:cb:59:44:ef:c6:6b:93:f2:e2:2d:14:
d3:e9:de:76:82:06:1d:c9:1a:f0:cb:7d:be:ce:a4:81:4d:95:
32:8b:8e:96:8e:ca:2a:4b:1b:ba:2f:d7:a9:8c:57:d6:4c:d3:
01:ee:81:c2:b6:85:99:c4:ca:8d:6c:80:c6:53:ba:86:98:66:
f6:1f:8b:35:81:5d:28:a1:7b:65:b1:20:7e:35:00:ca:86:fa:
13:53:de:f9:7f:37:59:7a:5a:56:3c:26:be:8d:e6:d2:c4:03:
6c:d5:5c:d4:aa:4f:c1:1d:b4:0e:c7:b7:7b:08:ef:de:b2:67:
f0:ef:10:bb:84:62:2d:4e:e1:99:0e:3c:4b:16:48:11:f3:92:
5a:13:0e:3a:5f:9c:20:5c:22:15:3d:ef:aa:cd:71:06:9a:71:
e3:1b:8b:03:11:99:5b:3e:2a:1d:99:03:c2:e7:b0:ad:23:51:
86:3b:1b:11:ef:f8:a0:d0:e6:fa:7d:9a:d9:6a:fb:05:95:c3:
17:31:7d:fe:b9:23:23:56:6e:5e:18:5b:61:04:94:2f:8f:36:
c4:52:17:5a:4b:5c:a4:15:05:9b:70:21:af:4e:e5:36:62:fb:
ef:e8:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:25 2025 by rpki-client