Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa
File: 3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: 8/4xAgE1TWPoAy1WLrpkAIeCCgLUf4mVhjMapCZhhdo=
Subject key identifier: 8B:D2:E4:7A:76:BE:99:ED:11:10:A1:75:30:14:63:14:E6:96:B4:11
Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial: 4444B44EEA58130ECF63F57A3AAAA83C5DC0A120
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa
Signing time: Mon 01 Jul 2024 01:03:03 +0000
ROA not before: Mon 01 Jul 2024 00:58:03 +0000
ROA not after: Mon 30 Jun 2025 01:03:03 +0000
asID: 38778
IP address blocks: 203.201.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:44:b4:4e:ea:58:13:0e:cf:63:f5:7a:3a:aa:a8:3c:5d:c0:a1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Validity
Not Before: Jul 1 00:58:03 2024 GMT
Not After : Jun 30 01:03:03 2025 GMT
Subject: CN=8BD2E47A76BE99ED1110A17530146314E696B411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:ca:d2:78:a5:a2:f4:6b:b0:37:e5:40:46:
b0:05:2b:1e:a2:2e:5a:e0:66:6b:89:7e:cd:01:bb:
9d:d3:ba:ca:18:45:96:4c:40:cc:62:7b:4d:50:8f:
b5:48:dc:c0:29:be:fe:94:fc:da:74:00:fe:9a:23:
3d:d5:17:a9:bd:6c:5e:82:be:d1:ef:f5:bc:45:59:
1c:fb:5d:ac:92:1f:c7:7b:cf:e2:4c:5f:21:2b:55:
1e:e3:23:9a:0a:c0:28:05:9b:71:25:39:1e:68:5c:
e7:ce:db:aa:89:f6:39:ec:11:14:78:db:d9:84:9a:
96:1e:c5:03:42:1e:15:ff:73:e5:48:2d:b1:83:0a:
e2:c8:f8:20:68:27:6b:02:8e:db:cd:7a:a4:57:20:
c5:38:2c:73:bd:83:85:18:a5:81:a8:dc:04:d6:06:
e7:1d:87:d9:58:58:7d:24:95:47:cb:ca:d4:f1:5a:
05:fe:6e:9a:7e:da:9f:65:19:88:92:76:7f:ec:ee:
d5:de:da:45:b3:df:58:80:27:75:64:fa:66:76:8b:
55:ff:05:27:06:22:df:25:14:71:34:bd:48:c4:af:
8b:de:a6:24:d9:ea:98:74:02:53:4d:17:c2:4a:b9:
7d:2c:c3:50:3d:4a:f6:e1:ac:f8:d2:13:8c:05:8b:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D2:E4:7A:76:BE:99:ED:11:10:A1:75:30:14:63:14:E6:96:B4:11
X509v3 Authority Key Identifier:
keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.201.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:90:8a:00:35:55:3a:69:1c:d6:19:6a:22:8c:1a:22:49:2d:
7f:06:f6:27:72:d4:03:de:99:5d:b3:a8:7b:7f:28:90:56:fa:
ed:4d:1f:76:a2:fe:4b:9f:71:56:c2:74:bb:aa:c1:00:ba:43:
ed:68:d9:cb:64:ee:e4:1c:bc:14:07:45:0d:46:61:1d:d2:ec:
06:02:d9:2e:29:3c:d8:cb:09:a7:d8:40:ed:53:ee:f1:09:aa:
5b:48:21:5b:cf:bb:ff:e1:e4:34:21:b0:2c:22:13:16:61:ef:
c0:87:4e:5d:5f:2a:63:d7:59:89:94:8f:bc:86:18:a5:17:a8:
fc:2c:67:be:fe:bf:7b:ff:44:72:93:75:2b:16:f0:b5:94:99:
74:50:77:46:3b:ba:25:78:ad:cc:6a:4c:a9:bb:ac:b4:7a:b8:
ba:34:1d:fd:04:2f:1e:be:46:8c:a6:8a:6b:6c:77:fc:0f:11:
ed:dd:de:71:e8:a8:dd:d9:d2:30:11:01:be:a0:62:94:c8:d4:
12:d4:d3:58:ba:f5:3d:9e:0e:f0:60:ea:a6:84:f6:6e:81:3d:
8c:44:a7:24:a9:f3:3d:6e:04:cd:e5:46:5e:62:da:f4:78:a1:
72:cb:b6:43:91:5b:32:85:0e:bd:b0:db:d0:4b:3f:c4:48:f0:
29:ab:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:28:04 2025 by rpki-client