Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
File: 3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa (raw, json)
Hash identifier: 7oUl9iKqkMUE4DZwz3gfp5iBzPjostQjs+kzo1+9Ijs=
Subject key identifier: 76:49:F6:95:93:41:B7:F7:35:D5:7A:B5:4E:85:03:9C:49:4D:73:B8
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 5DB3F5FC7A53013C6DE3CA0DF2137D3DB962C403
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
Signing time: Wed 08 Jan 2025 04:00:36 +0000
ROA not before: Wed 08 Jan 2025 03:55:36 +0000
ROA not after: Wed 07 Jan 2026 04:00:36 +0000
asID: 133798
IP address blocks: 203.128.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b3:f5:fc:7a:53:01:3c:6d:e3:ca:0d:f2:13:7d:3d:b9:62:c4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Jan 8 03:55:36 2025 GMT
Not After : Jan 7 04:00:36 2026 GMT
Subject: CN=7649F6959341B7F735D57AB54E85039C494D73B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:3a:a9:56:1f:06:d3:a4:88:7f:6c:88:4a:
93:fd:33:ae:9e:b9:3a:8e:9c:3d:fd:69:2b:1c:ea:
15:02:aa:62:2d:c3:5b:96:47:33:f7:2d:f8:8e:34:
04:38:07:12:a5:78:8d:14:69:10:e1:db:cb:38:1a:
6f:96:ed:80:48:1d:b5:ac:74:2a:94:9e:2c:05:16:
46:98:83:14:35:75:be:b0:e0:1e:d1:b0:ac:f0:0c:
03:74:84:41:30:bc:57:9b:44:83:1f:52:0d:d1:d7:
7d:8a:45:b8:8a:d4:a9:e2:91:b7:96:08:0c:a5:ee:
95:e7:d8:a4:3b:22:72:86:b1:68:f5:f7:63:f8:c2:
00:ba:7d:af:9d:81:99:ed:e5:3c:e3:0a:f0:db:c4:
28:03:6e:36:3d:cc:92:c0:ea:19:17:6f:31:20:d6:
53:4b:23:1b:4e:ab:01:00:ca:21:38:29:05:e5:cc:
63:42:33:50:81:48:ad:e3:e3:28:31:a4:ed:b7:95:
d1:fa:04:4b:c0:cd:00:8d:2b:e2:8f:4f:67:a2:29:
f6:39:b7:37:72:49:e7:bf:7b:35:15:a1:cc:43:b8:
9d:29:70:05:69:2f:d2:9f:a4:fd:2d:75:db:9d:6a:
95:52:34:cd:0c:62:98:f2:20:80:11:93:cb:9d:58:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:49:F6:95:93:41:B7:F7:35:D5:7A:B5:4E:85:03:9C:49:4D:73:B8
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.128.248.0/22
Signature Algorithm: sha256WithRSAEncryption
58:6c:f6:49:eb:45:d1:51:28:f9:df:c7:ba:c3:26:d5:16:96:
05:78:56:ba:cc:9e:1c:a1:b8:74:41:63:48:58:9c:c6:bb:cd:
d0:da:f9:84:cb:bd:75:77:79:a3:31:26:8a:d2:2a:ea:1a:09:
93:9c:7b:62:11:3e:2d:78:b9:f8:af:0e:e4:03:3c:9c:96:27:
b2:33:1d:40:15:b4:e4:76:0f:b9:7a:20:43:6a:f4:f8:2f:21:
02:1c:e3:c7:a3:35:80:91:03:66:f1:69:d0:49:f7:cf:57:f9:
b2:64:12:3d:0f:87:ae:f6:a0:89:fc:c1:87:c9:a7:19:0a:fa:
fb:10:04:db:ce:ac:b1:ab:78:e5:c3:d2:ba:94:29:c2:75:00:
58:84:80:b2:0f:db:7e:4e:49:e2:1f:c5:f1:17:de:07:ad:5b:
3b:14:02:ee:b6:04:00:fb:26:d6:d0:9a:c7:45:4b:b1:d5:63:
fb:d0:7e:6d:bf:66:1a:f9:00:f6:44:e8:0e:a7:f5:05:62:fc:
4f:b3:bf:33:83:46:c0:c8:38:af:a5:61:e5:8e:59:62:87:84:
ec:8b:42:69:c0:a5:d4:fe:76:f9:33:35:80:11:4d:ed:8d:48:
3b:dc:27:59:09:22:6f:c5:0f:fa:30:d0:b9:4f:91:35:42:71:
d8:8f:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:12 2025 by rpki-client