Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa
File: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=
Subject key identifier: 07:11:C6:72:3D:56:60:E5:C5:8C:03:61:33:61:90:6A:08:80:20:5A
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 603FF6350B0AFABEB4D6370D62EEAE1F90D12DFB
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa
Signing time: Mon 27 Jan 2025 07:00:00 +0000
ROA not before: Mon 27 Jan 2025 06:55:00 +0000
ROA not after: Mon 26 Jan 2026 07:00:00 +0000
asID: 38320
IP address blocks: 175.103.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3f:f6:35:0b:0a:fa:be:b4:d6:37:0d:62:ee:ae:1f:90:d1:2d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jan 27 06:55:00 2025 GMT
Not After : Jan 26 07:00:00 2026 GMT
Subject: CN=0711C6723D5660E5C58C03613361906A0880205A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:df:27:98:2c:02:40:be:7d:3a:71:fb:d2:
48:9a:04:12:26:d1:9e:70:46:51:e7:74:a9:e3:e6:
11:d4:0b:e4:05:3b:17:f4:70:e1:08:d6:53:52:8b:
ec:f4:5c:9d:f6:a2:c9:08:3f:bb:0b:26:fe:1d:8a:
3e:00:82:42:46:d4:7f:9d:1e:de:ec:cd:50:59:45:
c6:98:ae:cb:b9:64:96:36:5b:fc:e9:74:98:c8:f4:
96:c7:f5:be:e4:f2:ff:1d:a4:dd:4b:21:65:82:19:
35:45:d7:02:69:2e:8d:ad:9b:88:2a:7e:3a:34:30:
9f:3f:db:36:48:ec:7d:a0:6f:05:30:9b:2d:90:21:
b7:19:de:9e:ce:5e:33:66:a8:3e:52:22:2c:63:00:
b4:c9:70:dd:88:b7:e6:96:76:5e:d6:b0:32:53:4f:
82:a2:7a:f7:14:c4:2d:28:10:f7:21:dc:05:24:80:
82:9b:6e:a5:27:d0:c4:c4:bb:69:56:18:f1:89:41:
7e:50:6b:db:ef:13:9e:a9:0b:0b:a7:e1:d9:78:c2:
9e:b9:59:e7:ba:b0:ac:68:51:6a:78:0e:05:0b:96:
94:9f:64:8f:95:09:58:80:18:04:29:bf:e0:9c:c6:
95:bb:24:54:00:88:bd:38:7d:f2:d9:84:50:5e:90:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:11:C6:72:3D:56:60:E5:C5:8C:03:61:33:61:90:6A:08:80:20:5A
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.103.33.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f9:d0:32:8b:87:04:94:dc:3f:19:af:af:71:6b:53:00:78:
6e:85:a8:dc:3b:ac:e0:2f:4e:fc:34:ec:d4:c7:cc:ea:6a:2e:
0d:ba:26:98:a3:0a:e1:5d:d3:1d:f8:0d:18:82:62:37:e8:bf:
ee:4d:49:9f:f1:88:89:83:36:aa:3c:3e:58:0c:80:a8:ac:1c:
40:50:e8:10:4c:75:8c:8a:c0:ff:20:15:d5:3d:0b:ec:28:f2:
69:d2:fc:8e:5d:9a:28:e2:11:16:8f:33:af:55:73:e1:24:b7:
61:14:6f:e6:1e:04:18:51:e6:38:0d:88:5a:da:1c:89:a9:1c:
79:1d:6e:46:ef:8e:ce:be:3b:19:a3:4f:bb:81:ea:b7:15:be:
f0:6f:c1:81:55:24:b6:56:a9:ff:86:83:51:e4:53:bb:1a:c1:
8e:15:cc:72:5c:34:7c:ff:e1:c7:89:ef:26:4e:c1:13:86:8f:
30:b9:64:31:c3:7b:9a:26:57:9c:7e:46:c1:34:1d:93:5d:c3:
d7:bb:1a:a2:2c:66:64:43:fb:f1:ef:53:24:a0:b0:7d:f1:2e:
5a:2a:16:35:29:04:cf:18:a6:2b:32:45:5f:5b:1d:22:5d:34:
04:94:c6:29:fc:d2:b4:1f:05:fc:94:74:ec:13:4a:73:60:3f:
76:3c:db:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:31 2025 by rpki-client