Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa
File: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (raw, json)
Hash identifier: m3SFMK5sTyp5JRSjSaSerEeKhJKK6aQm3Z3k3tuCZsA=
Subject key identifier: 7A:69:44:0C:EF:76:98:2D:CD:AC:59:E5:83:38:3E:4C:EC:B3:C1:E9
Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial: 6E6E6359BAA7BEDB9BA151F4D263B8AA710C1E50
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa
Signing time: Fri 22 Nov 2024 06:29:27 +0000
ROA not before: Fri 22 Nov 2024 06:24:27 +0000
ROA not after: Fri 21 Nov 2025 06:29:27 +0000
asID: 58378
IP address blocks: 203.83.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6e:63:59:ba:a7:be:db:9b:a1:51:f4:d2:63:b8:aa:71:0c:1e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Validity
Not Before: Nov 22 06:24:27 2024 GMT
Not After : Nov 21 06:29:27 2025 GMT
Subject: CN=7A69440CEF76982DCDAC59E583383E4CECB3C1E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:59:3e:ee:cc:af:11:82:bb:f4:9a:80:76:
e4:77:05:27:93:81:5f:80:23:0a:16:be:ba:c6:f8:
94:e7:ac:1e:4f:f8:a4:f7:0c:dc:51:b2:91:ce:25:
86:a9:c5:6c:01:72:02:64:ef:36:a2:d0:5c:d9:60:
dd:89:9e:0e:be:88:2b:af:0f:ee:03:8b:e1:d1:94:
85:d0:72:15:c6:a8:9b:1c:0b:6f:57:e5:21:6f:2a:
cf:80:b6:ec:c2:3d:c9:75:e8:f9:33:b8:32:6f:7a:
2a:8b:5c:f6:6d:bc:b8:62:22:1a:67:ca:73:42:08:
2a:a8:15:70:ee:91:ea:59:69:da:db:82:76:8a:65:
1b:53:8b:d0:53:11:12:e4:ed:c9:17:18:1d:12:f4:
1a:6d:71:b1:7b:87:f9:ec:09:d4:54:89:a4:99:ab:
07:77:4c:66:a4:f7:06:6a:37:52:80:11:0a:7f:3c:
82:8c:6f:16:94:b4:ea:1f:88:72:35:18:f8:cd:ec:
0d:5b:9e:e3:df:02:ea:f3:35:0c:db:5c:7b:1c:18:
b5:52:98:48:fc:b6:f8:f0:7d:25:39:26:aa:cb:f7:
2e:59:13:d0:69:08:5c:18:b4:c5:d4:01:44:6d:81:
51:f2:9c:45:62:dd:29:7b:24:e6:46:ee:93:45:73:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:69:44:0C:EF:76:98:2D:CD:AC:59:E5:83:38:3E:4C:EC:B3:C1:E9
X509v3 Authority Key Identifier:
keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.83.26.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:d2:08:89:af:e0:9b:af:59:36:71:c2:97:6c:74:13:e9:02:
11:4d:8c:cb:00:89:6e:ee:3d:a8:7a:18:9e:4e:a7:ea:ea:b3:
25:5d:d2:9e:93:58:88:01:9f:c1:7a:36:7e:3c:55:08:1d:87:
92:80:8b:46:c9:13:76:c6:1b:75:01:18:a2:c4:55:63:2f:cb:
49:75:07:7b:7b:52:c3:fa:ff:34:a5:4a:71:46:b6:2a:4b:62:
13:aa:39:5b:a7:b6:9c:50:83:44:e8:71:02:14:4d:c2:a9:fe:
0e:7e:c5:ec:9e:02:42:3d:13:b3:36:b1:c8:16:a3:b7:16:48:
6e:a3:1e:e4:81:d6:33:45:7a:02:48:c9:ed:cd:eb:e6:ef:c6:
e2:5e:1c:b5:8e:9a:45:4f:ba:ac:ac:72:62:cc:ea:15:9c:dc:
44:0d:b4:6e:de:45:a6:47:49:f3:dc:e7:2d:ee:c5:3a:6a:07:
1b:24:59:c7:9e:88:0b:ca:43:01:01:b1:c5:b0:87:6f:23:f3:
6f:59:43:53:d6:f1:88:0a:a1:01:78:43:3f:37:76:01:db:b4:
a6:2d:63:ef:d3:34:ac:43:51:4d:ec:bb:1e:7b:20:c3:74:d1:
69:3f:19:e5:c9:bf:26:bf:e0:6f:62:5c:86:a5:85:03:ec:3f:
dc:36:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:33 2025 by rpki-client