Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa
File: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (raw, json)
Hash identifier: 0aRyZhQGWsMKYXDlEnbQv2PzDN2c5f2fxr/kT9NKBik=
Subject key identifier: 57:9D:5D:CC:57:B7:5B:79:26:62:C5:16:D9:EF:28:85:BB:83:8A:F6
Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808
Certificate serial: 27BCA3B1E3E24DA9F3629D7B416F728319C46A7F
Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa
Signing time: Wed 27 Mar 2024 09:08:28 +0000
ROA not before: Wed 27 Mar 2024 09:03:28 +0000
ROA not after: Wed 26 Mar 2025 09:08:28 +0000
asID: 152014
IP address blocks: 203.175.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:bc:a3:b1:e3:e2:4d:a9:f3:62:9d:7b:41:6f:72:83:19:c4:6a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808
Validity
Not Before: Mar 27 09:03:28 2024 GMT
Not After : Mar 26 09:08:28 2025 GMT
Subject: CN=579D5DCC57B75B792662C516D9EF2885BB838AF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:bd:bc:00:4d:66:36:ea:d1:88:07:76:f8:
0f:26:3b:4b:c8:b5:8a:46:3e:55:90:b1:98:c6:54:
a6:fb:9d:20:a9:c3:f0:75:5b:c7:91:0b:ab:b4:e0:
1f:e5:a2:da:37:e6:f6:c5:f9:27:b2:c0:68:aa:30:
27:20:08:69:52:cb:7a:4f:c4:e1:e8:49:d0:88:db:
b6:c8:0a:48:29:52:89:81:61:56:2d:3c:7f:4a:9f:
25:1a:91:05:80:be:95:df:44:72:a1:1f:0d:e5:11:
bf:b1:b2:35:ab:ed:c2:6a:4a:ab:af:c9:d2:31:8f:
c2:e9:1d:b5:97:32:2e:c5:f2:4c:b3:84:53:fc:84:
a0:84:24:1a:ee:ae:d1:14:37:85:ab:1e:c4:60:f9:
a1:02:5b:89:b6:b6:66:e0:cf:53:cc:86:f1:b2:a4:
29:2b:f4:68:0d:02:cf:23:88:44:dc:e1:c6:f1:37:
a3:2e:bc:13:38:65:70:ac:ab:56:db:13:e3:4a:ef:
4a:24:8a:55:5c:7a:49:c2:76:ee:b1:6d:5e:fe:2c:
13:28:18:ca:a0:83:6e:89:f2:8d:ae:c5:11:6e:cf:
09:f0:ca:cd:13:cc:e9:43:ac:36:5c:f6:40:a1:62:
6b:85:92:d7:64:41:a1:7b:be:0e:4b:b3:3e:ff:87:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:5D:CC:57:B7:5B:79:26:62:C5:16:D9:EF:28:85:BB:83:8A:F6
X509v3 Authority Key Identifier:
keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.175.102.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:20:d1:f5:03:61:56:f6:4e:91:81:6c:ef:e2:13:f7:43:d6:
f7:9c:75:c0:20:e3:9c:4c:4b:dd:59:a3:f7:de:bd:3e:31:dc:
dc:b3:45:c3:2f:97:76:ee:21:a3:0d:ad:5e:e7:b3:78:15:de:
0c:73:64:20:88:8a:c4:07:ee:f2:c6:cc:aa:78:12:36:27:d6:
09:f7:9e:c3:3d:48:b1:19:fe:da:10:76:ad:d6:8a:cf:c3:e0:
04:66:6d:bf:f9:18:8d:d5:4f:d3:b4:56:20:cd:e6:39:a6:b5:
7d:71:8c:53:67:34:8f:38:18:f1:bb:7e:ab:4b:d1:1a:a6:9a:
ce:47:50:2c:4c:37:6b:df:91:78:3c:29:3f:75:96:83:9e:93:
30:b8:4a:38:d1:d2:8a:b1:5d:fe:2b:73:47:e3:93:ff:e6:fb:
39:3d:ce:11:b6:be:1c:10:9b:7f:40:87:8a:f9:56:b7:b6:75:
d1:08:c1:19:76:ef:f8:02:48:6d:2f:64:00:4f:56:99:89:84:
e7:5f:41:c5:74:d0:e7:86:86:be:94:b5:50:64:71:c4:5c:1c:
63:92:f2:de:c4:c6:89:4c:2a:c9:ad:1d:51:28:81:9e:a9:5c:
35:6b:ad:d2:79:ae:89:23:1c:e0:5c:08:7b:30:83:78:bc:b3:
9b:b5:88:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:32 2025 by rpki-client