Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa
File: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (raw, json)
Hash identifier: dsk9oUmj2NcQkANMtOVLGJ4sGBjbKRE5eNrZlMTBCDc=
Subject key identifier: 68:9B:F7:88:FE:23:5E:2C:41:30:FB:78:93:0E:85:29:1E:B5:45:D9
Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial: 65D454227A7440EFBB2F7CA29452E000D05C4773
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa
Signing time: Sat 02 Mar 2024 11:02:03 +0000
ROA not before: Sat 02 Mar 2024 10:57:03 +0000
ROA not after: Sat 01 Mar 2025 11:02:03 +0000
asID: 58478
IP address blocks: 202.182.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d4:54:22:7a:74:40:ef:bb:2f:7c:a2:94:52:e0:00:d0:5c:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Validity
Not Before: Mar 2 10:57:03 2024 GMT
Not After : Mar 1 11:02:03 2025 GMT
Subject: CN=689BF788FE235E2C4130FB78930E85291EB545D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e8:23:ea:36:b3:83:a8:cc:29:75:de:fe:7a:
c8:72:19:ed:05:15:1c:90:ee:9e:3d:65:57:14:a3:
36:95:77:72:4a:3c:7b:51:51:a3:1c:ae:2c:65:6d:
01:d2:cc:13:e3:9e:ff:ee:62:0f:03:45:76:ea:4d:
5f:03:dc:da:35:b3:62:8a:dc:fd:7a:f4:73:64:a5:
13:0f:94:da:cf:8f:a2:76:b7:36:47:2f:e1:0a:0d:
07:6c:3d:d9:c9:de:cb:61:67:c3:15:a4:4e:c7:b4:
c1:87:f0:06:c5:a3:91:17:c0:84:d6:d4:d9:5a:c9:
2f:4f:b3:7f:92:9b:85:f2:34:39:1c:41:2d:c2:ed:
c2:18:25:0e:e1:3d:94:3f:b9:10:be:14:ec:93:93:
a1:34:b6:12:4c:30:b7:63:ab:99:2e:ab:16:4a:db:
73:48:c6:c9:5c:95:c0:dc:8b:06:27:e7:ef:19:c0:
e2:8b:da:51:71:dc:69:c2:44:85:91:a3:90:21:93:
3b:e8:1a:40:cf:27:3c:17:aa:77:bd:3a:59:47:77:
2a:48:40:8f:93:c2:b1:a0:68:04:ee:ef:57:c4:d3:
2c:04:31:64:f1:0f:95:ea:a6:61:9d:57:79:61:5e:
1a:70:34:5b:d1:0b:a1:70:8a:27:50:3f:50:0a:40:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:F7:88:FE:23:5E:2C:41:30:FB:78:93:0E:85:29:1E:B5:45:D9
X509v3 Authority Key Identifier:
keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.182.177.0/24
Signature Algorithm: sha256WithRSAEncryption
82:0c:b1:3d:be:2b:88:b2:d0:ca:b9:53:9d:92:6e:c1:82:33:
2b:48:08:9a:15:f4:2c:ac:bc:f6:5e:1c:d9:2e:85:81:d7:4a:
12:a4:70:83:6f:5a:25:71:39:f2:29:81:a5:f4:20:73:2d:89:
bb:c1:d6:54:69:06:d4:de:53:4c:03:13:09:c2:44:32:d9:0d:
dc:74:26:83:aa:45:58:11:fc:4e:6c:49:45:d3:66:5a:3d:43:
b3:18:05:d7:55:01:e8:31:ad:f8:f3:66:32:fd:4c:6d:0d:dd:
41:40:47:15:28:94:81:7f:3c:4b:87:d3:d2:3c:9e:c2:4a:05:
59:9b:5c:22:ba:f6:d5:c2:9d:96:0d:4a:9e:ba:44:0f:df:b3:
96:cd:fb:01:72:14:e3:c0:1e:ef:7e:15:02:77:4a:83:70:89:
f7:a6:99:8a:6f:50:1b:83:e0:40:22:e6:1a:b4:90:2b:75:43:
7a:90:31:a6:a7:86:88:2c:a1:32:78:37:f5:ab:89:64:3a:a3:
57:4a:3c:e6:fc:51:45:28:aa:0b:15:82:8c:dd:aa:ea:6a:ee:
e2:64:db:21:aa:20:4f:11:85:92:62:b4:87:ea:84:43:ce:da:
dd:84:c8:44:d9:17:cf:72:37:fb:b0:c5:56:4f:78:14:38:b7:
26:e9:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:20 2025 by rpki-client