Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33342e302f32342d3234203d3e203338333230.roa
File: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=
Subject key identifier: 24:DC:C2:D1:9F:B9:86:EC:8A:5B:21:B0:1D:4B:08:CE:03:20:B1:98
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 163D19B57153D338CB7B7CF58AC4CB0C3A58CA0A
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33342e302f32342d3234203d3e203338333230.roa
Signing time: Mon 27 Jan 2025 07:00:00 +0000
ROA not before: Mon 27 Jan 2025 06:55:00 +0000
ROA not after: Mon 26 Jan 2026 07:00:00 +0000
asID: 38320
IP address blocks: 175.103.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3d:19:b5:71:53:d3:38:cb:7b:7c:f5:8a:c4:cb:0c:3a:58:ca:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jan 27 06:55:00 2025 GMT
Not After : Jan 26 07:00:00 2026 GMT
Subject: CN=24DCC2D19FB986EC8A5B21B01D4B08CE0320B198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b1:c0:49:85:99:40:8b:94:7e:e8:b8:42:b3:
18:c2:42:28:f2:11:c9:2c:82:c1:50:93:6b:3f:5f:
fb:13:2d:87:f7:02:68:96:03:34:8a:33:0a:76:f3:
19:90:76:ae:a6:ee:53:04:13:8b:e9:f9:31:8b:bc:
de:3b:64:a6:eb:d1:9a:c7:5d:a4:c4:42:b6:b2:fc:
c1:75:24:89:92:20:ff:e2:9e:bc:f5:91:ee:b2:0d:
4a:bb:14:b3:ab:d0:03:fa:97:0e:c7:1b:19:ab:e7:
d3:2f:67:dd:ef:c8:6e:00:f6:09:a4:8a:05:d7:75:
1e:a7:3a:24:17:ce:c9:8c:96:a2:39:ad:6f:8e:35:
31:7e:0b:ea:87:7a:32:f6:84:8a:5a:18:d7:0d:cb:
5c:a2:24:24:ac:29:e7:c2:ce:c1:34:4f:c7:53:05:
17:f4:7e:1f:ac:13:85:ef:8f:f2:95:ef:cc:5d:70:
d6:a0:a5:64:a4:b8:df:f0:b1:5e:5b:80:78:e5:34:
d1:b9:d3:4c:31:65:36:02:8f:74:de:8b:ac:ea:6f:
61:ae:4c:2a:7f:1c:52:62:3e:da:7a:5e:2e:8a:49:
ac:e7:b7:a4:3c:84:70:d0:aa:25:32:90:54:ec:10:
2c:b8:52:e5:67:c6:b3:ad:7d:e2:c7:5d:d3:1a:12:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:C2:D1:9F:B9:86:EC:8A:5B:21:B0:1D:4B:08:CE:03:20:B1:98
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33342e302f32342d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.103.34.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0b:f2:a5:18:b3:76:03:1a:c7:b6:2f:51:67:3f:b4:83:3c:
cf:a4:35:4b:ad:c9:63:7f:89:12:a6:f1:7e:c3:36:b1:e4:b5:
c8:c4:de:ab:f7:92:46:cb:5f:ca:9b:09:d3:c3:dd:3b:03:db:
07:a2:2b:62:f2:f4:9e:c9:b2:96:76:69:fd:b2:ae:0a:a5:39:
3b:47:87:f2:66:a2:5f:5a:71:b1:b5:e6:81:7b:8d:78:65:92:
2f:96:1a:c6:8d:4e:21:ce:d5:f5:e2:57:2c:69:69:07:28:c2:
ae:11:38:34:de:5f:59:8b:58:bf:fd:79:57:77:32:d9:79:6f:
ee:74:a8:ba:43:ff:67:1c:81:f4:5f:be:04:8f:1f:15:6b:74:
03:a4:3e:7a:c8:6f:e7:4b:1d:8b:22:7b:3d:b2:2c:82:2b:27:
18:ce:d1:77:6a:17:1c:d0:7a:8b:3c:96:c2:40:d9:85:f2:d8:
45:28:3a:88:b4:25:f8:3c:68:41:b4:cf:cf:81:aa:61:fb:79:
69:38:23:0f:00:4f:f0:a3:17:f4:d0:45:72:e3:4b:8a:b9:b0:
01:ce:5a:7c:4e:7e:21:77:01:66:23:1f:6f:29:86:e5:75:9d:
22:b4:5a:32:cd:da:3c:c7:98:f1:6d:4e:74:b2:6a:eb:35:24:
e9:96:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:32 2025 by rpki-client