Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa
File: 3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa (raw, json)
Hash identifier: g5Eg8f2uwK8bPhT+Svfx9lnRuLA5TdKgNa3EsSTSVmI=
Subject key identifier: A4:7C:BE:24:BB:96:3B:CF:54:D4:7B:1B:29:54:32:C7:49:EE:BC:9A
Certificate issuer: /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial: 3CBE02329ABCCA3391CFC8825007ED147852B2F2
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa
Signing time: Mon 01 Jul 2024 01:03:19 +0000
ROA not before: Mon 01 Jul 2024 00:58:19 +0000
ROA not after: Mon 30 Jun 2025 01:03:19 +0000
asID: 133841
IP address blocks: 123.231.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:be:02:32:9a:bc:ca:33:91:cf:c8:82:50:07:ed:14:78:52:b2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Validity
Not Before: Jul 1 00:58:19 2024 GMT
Not After : Jun 30 01:03:19 2025 GMT
Subject: CN=A47CBE24BB963BCF54D47B1B295432C749EEBC9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:eb:9b:c6:2f:35:b0:b2:eb:ad:11:28:43:
7f:2c:e1:61:59:42:1f:b0:fe:5f:3c:a8:a2:6c:6f:
89:ce:f2:86:bb:6f:fc:de:ce:f7:eb:37:10:23:b9:
08:ca:f2:96:f4:64:c8:39:5f:d9:de:f3:e0:e2:ac:
75:1a:72:f1:55:31:1d:3b:23:13:9a:00:cb:2f:f5:
f2:db:76:94:e7:80:91:43:fc:b7:6e:a4:b9:4b:25:
d6:16:d0:14:80:3d:20:de:71:ce:e5:85:06:dd:39:
3b:7e:9c:f3:ea:7b:13:df:43:69:9e:0d:72:c8:58:
ba:7c:5c:d6:8a:83:64:9c:17:78:c3:b7:5b:26:0e:
5a:64:13:83:97:78:b8:93:35:49:39:b5:fe:30:cc:
63:74:02:6b:46:04:95:2f:ad:73:0a:bd:73:f9:e3:
84:62:cc:ea:61:22:10:9e:2c:69:4e:04:b4:70:ca:
46:46:fc:ab:e6:f0:e4:09:c6:a2:4f:1b:53:42:03:
3f:5f:0e:a6:57:23:d1:74:20:85:93:12:5f:01:e1:
a6:f2:f3:3c:94:df:ef:8f:0e:84:bc:17:3f:9e:34:
d7:06:a0:7a:68:1c:e9:9e:76:f0:00:dd:83:f3:35:
ed:a0:37:71:ce:ad:15:aa:a2:99:92:fa:db:88:e6:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7C:BE:24:BB:96:3B:CF:54:D4:7B:1B:29:54:32:C7:49:EE:BC:9A
X509v3 Authority Key Identifier:
keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.231.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0d:0a:6d:ad:18:3e:07:d1:13:cf:7b:1c:8d:06:54:43:e5:
08:27:fe:9f:dc:3c:ba:c7:ce:4d:4d:6b:df:1d:06:65:7f:5b:
12:b7:55:0b:66:4f:13:8d:3c:a2:0a:11:25:e5:42:41:4f:93:
0b:48:af:9f:1a:58:c7:12:3f:4d:fd:73:2a:82:b2:b4:cb:cd:
fe:45:ad:98:ec:28:4d:83:0d:40:92:8f:fd:28:69:0a:56:d3:
bc:30:2d:a0:08:e1:fc:d9:2a:0f:d9:e0:98:17:d1:06:ca:68:
62:fa:32:5f:71:8b:ec:85:1f:8d:44:cb:2f:b3:1b:38:1f:c1:
7d:ef:0d:56:4a:5b:9e:a3:32:a2:33:81:99:54:43:04:fa:9f:
e1:77:12:c5:cc:29:f6:cd:25:bb:74:c2:5c:17:10:e3:c2:69:
f9:4d:a1:95:c8:02:77:cb:03:fb:c3:ea:38:fa:37:46:d7:f9:
67:48:59:e9:d9:b2:e6:64:e6:bd:16:b6:7a:5e:40:43:5a:e2:
6e:aa:7b:b6:1c:2a:f4:86:d8:d0:24:8f:d9:48:ff:26:79:f6:
0d:0e:6d:a1:0a:4a:01:28:d7:c2:f8:9b:6c:f1:a9:a3:fe:f3:
25:d6:71:13:c0:0c:e5:c7:3c:8a:71:32:a0:23:f9:44:f6:ec:
fc:fa:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:21:13 2025 by rpki-client