Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa
File: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=
Subject key identifier: 6E:5E:A8:25:FB:76:C2:CA:78:CB:67:B0:1E:45:B1:F6:DD:8A:E5:85
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 16B8EE1A18E6D9890F36A7E01990D712DC4A2278
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa
Signing time: Mon 27 Jan 2025 07:00:00 +0000
ROA not before: Mon 27 Jan 2025 06:55:00 +0000
ROA not after: Mon 26 Jan 2026 07:00:00 +0000
asID: 38320
IP address blocks: 175.103.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b8:ee:1a:18:e6:d9:89:0f:36:a7:e0:19:90:d7:12:dc:4a:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jan 27 06:55:00 2025 GMT
Not After : Jan 26 07:00:00 2026 GMT
Subject: CN=6E5EA825FB76C2CA78CB67B01E45B1F6DD8AE585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:d5:ea:19:ab:12:f1:a9:58:a2:1e:f9:58:
15:66:d6:3e:80:41:5b:db:00:5b:8a:c7:90:35:ab:
b8:65:ec:db:74:18:ff:cc:26:01:4c:4a:b3:32:c7:
41:b6:a6:75:e9:33:d1:16:8b:d3:79:a2:b7:03:00:
c1:f9:88:42:0a:77:be:85:4a:a3:40:a4:a4:ab:41:
80:07:e9:22:2a:1c:21:94:2f:d5:8e:ba:9c:da:de:
2f:1b:c8:0e:7e:2d:c0:9a:b1:ae:11:39:8d:ce:a4:
d6:c0:f3:b7:fc:05:f2:cd:bf:96:3d:24:12:f5:87:
f7:75:94:e5:ee:d4:62:da:ec:c6:af:1e:d1:f7:04:
09:ea:58:5e:42:17:c3:22:d1:fa:21:07:5e:22:2c:
9d:61:32:31:6a:4b:07:6f:fa:e6:26:61:ef:af:eb:
85:32:14:36:fe:9e:b6:86:5e:39:51:d9:1c:08:7f:
e2:55:e2:6f:9b:08:5e:17:0e:2b:00:2f:33:dc:7a:
0c:a9:fd:98:fb:1c:84:98:94:52:cc:30:39:94:83:
ae:e8:9a:21:25:ed:73:f0:df:cf:f1:ad:13:7e:27:
e5:03:8d:c9:51:c3:23:e0:06:17:69:da:15:05:f4:
c7:0e:76:a9:44:7f:45:dc:52:a6:79:09:ff:0e:ad:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5E:A8:25:FB:76:C2:CA:78:CB:67:B0:1E:45:B1:F6:DD:8A:E5:85
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.103.32.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b0:e8:3b:b3:b0:8d:77:57:72:13:ac:66:55:fb:fb:26:6f:
61:71:a2:b9:9e:b3:36:ed:76:c4:d9:e0:b3:16:f6:df:9f:8a:
70:9e:2c:17:56:f5:c7:b2:b8:54:93:98:88:c6:df:2d:e6:d9:
8b:9c:a6:92:09:4e:80:26:33:b0:c1:29:75:67:32:f3:32:52:
71:b5:12:d8:12:79:d9:9a:08:db:76:86:50:f2:64:db:fa:f6:
12:38:21:e7:08:dd:da:e9:bd:72:48:b0:84:1f:2d:8a:6d:12:
a5:7d:62:7e:b4:ff:df:10:5b:2e:b0:5a:ee:a8:a9:54:64:f9:
40:9f:e8:36:00:bc:33:1b:91:7e:15:aa:a8:26:a8:46:29:b0:
5a:6b:d8:71:4e:25:09:8b:dc:7f:6c:e8:76:27:12:cf:1a:26:
64:54:92:45:fb:39:74:b4:cc:2d:98:c2:8a:82:83:20:08:22:
f2:6c:a8:47:2e:6c:36:0d:06:ed:6c:fa:3c:57:dd:71:1b:23:
2e:84:2a:5e:30:14:b7:2d:77:dc:4d:39:11:f8:2b:e4:df:4f:
cb:c1:13:11:f1:22:e4:21:53:a8:9c:4f:11:ce:e0:6a:99:a8:
4d:51:ee:e7:88:05:c9:c4:26:39:97:f5:71:dc:ac:76:dc:ed:
51:15:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:27:57 2025 by rpki-client