Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa
File: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (raw, json)
Hash identifier: Ni8K6MxuczEixPJW7FrAgC5kkezA9a+/a/29Cb7hSuw=
Subject key identifier: 15:59:38:5D:4A:07:91:44:77:0A:E4:AE:62:80:16:28:84:F9:63:EA
Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial: 38E1333FA0788EEBA6804BF1A90A94F25C7538AE
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa
Signing time: Wed 24 Jul 2024 14:00:00 +0000
ROA not before: Wed 24 Jul 2024 13:55:00 +0000
ROA not after: Wed 23 Jul 2025 14:00:00 +0000
asID: 38505
IP address blocks: 203.153.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e1:33:3f:a0:78:8e:eb:a6:80:4b:f1:a9:0a:94:f2:5c:75:38:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Validity
Not Before: Jul 24 13:55:00 2024 GMT
Not After : Jul 23 14:00:00 2025 GMT
Subject: CN=1559385D4A079144770AE4AE6280162884F963EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:ad:27:c5:f0:46:16:04:65:f0:fb:57:66:
c9:cd:b4:4b:82:af:7a:99:69:15:50:ad:48:45:9c:
ec:8a:80:6d:50:8d:de:6b:2f:20:15:fa:2b:b7:15:
b8:00:79:a9:b2:08:93:96:72:b6:e1:cf:32:a0:f1:
ba:73:ae:51:e9:e7:42:a3:5b:28:bd:58:e1:e2:14:
a1:52:23:25:f5:17:43:ff:63:cd:58:d5:97:7b:49:
77:70:8a:7a:4d:20:18:d7:fe:17:2b:a8:2b:09:de:
b6:df:03:20:bc:5d:b6:28:0b:77:83:9f:5e:f7:76:
14:21:30:d7:74:af:c1:2a:84:0f:f7:b5:8a:e9:20:
0f:1d:12:f6:67:bf:2f:0f:c4:8d:53:e4:06:dd:82:
7a:d6:33:bd:de:9a:e4:8e:af:dc:0d:1c:de:8d:ad:
6e:37:69:cf:c9:56:0f:c5:9a:22:fd:b1:04:e4:6e:
a3:ec:5e:38:90:4f:98:7c:d4:4c:a8:8c:49:80:e9:
0d:c5:d8:dd:58:3e:87:73:fc:2c:dd:a0:b0:08:5e:
03:ce:47:23:b0:87:ff:be:e5:ec:45:3f:4f:44:90:
0f:56:34:01:7d:65:1d:c3:b2:cf:d6:12:9b:c8:fb:
b6:b9:09:23:78:55:3d:a7:8d:26:a7:f9:f6:d2:60:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:59:38:5D:4A:07:91:44:77:0A:E4:AE:62:80:16:28:84:F9:63:EA
X509v3 Authority Key Identifier:
keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.153.126.0/23
Signature Algorithm: sha256WithRSAEncryption
52:56:8e:a3:88:df:74:81:04:b2:c4:1e:8f:ad:f7:9d:c4:0d:
99:3f:b9:59:55:ab:78:44:7b:a8:16:f7:2d:ef:62:8d:78:41:
4b:21:90:a9:ae:55:dc:88:83:2c:29:57:77:91:16:1f:20:1d:
89:a5:76:88:ea:1f:99:ec:b3:6f:f1:b0:9c:a6:21:84:d2:1c:
b9:e1:25:ed:23:7a:3e:cb:92:78:e8:fb:83:60:2c:67:aa:94:
a1:01:01:97:ca:af:80:34:47:ca:c5:3a:98:99:a7:a9:38:73:
a6:b1:d2:f9:7e:f9:6e:1e:bf:67:df:7d:b8:ac:5e:80:93:10:
d0:15:d4:71:65:65:2d:1f:78:75:75:78:41:1e:77:a2:61:59:
75:5a:4e:23:23:16:64:7a:00:5b:76:a3:8c:48:5d:bf:01:03:
28:e4:3e:ef:e5:6b:da:6a:e1:16:25:36:a5:60:2c:df:10:16:
60:d6:1a:5e:e8:03:2a:f6:84:14:ec:37:13:fe:6a:b5:ec:73:
29:2e:77:56:1a:33:8f:0f:e5:77:2b:dd:74:17:fd:d8:de:8f:
fd:89:ae:27:05:9f:1e:9f:a3:d4:96:fb:a9:37:4f:1f:8c:42:
9a:93:33:17:60:f8:4b:7f:6e:39:62:5a:11:a0:49:9a:5d:6e:
5e:5a:f1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:03 2025 by rpki-client