Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e34352e302f32342d3234203d3e203338333230.roa
File: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=
Subject key identifier: 12:46:80:1E:20:22:31:B8:8E:18:36:74:7E:88:9A:F2:98:9F:48:EF
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 2D4DF0D436CF88C93DF1578B333146EB529C998D
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e34352e302f32342d3234203d3e203338333230.roa
Signing time: Mon 27 Jan 2025 07:00:01 +0000
ROA not before: Mon 27 Jan 2025 06:55:01 +0000
ROA not after: Mon 26 Jan 2026 07:00:01 +0000
asID: 38320
IP address blocks: 175.103.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4d:f0:d4:36:cf:88:c9:3d:f1:57:8b:33:31:46:eb:52:9c:99:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jan 27 06:55:01 2025 GMT
Not After : Jan 26 07:00:01 2026 GMT
Subject: CN=1246801E202231B88E1836747E889AF2989F48EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:89:12:23:ff:31:38:f8:b5:24:b0:4c:80:
07:34:41:d0:a6:b7:2c:6a:07:19:d2:74:c0:11:de:
b8:a0:5d:37:cd:fa:8c:50:f0:11:a1:d5:34:0c:5d:
8c:19:25:0e:5d:61:b9:77:f1:7e:68:99:eb:9d:bc:
57:0b:b2:41:b6:c0:5b:a8:02:9e:77:ee:73:76:66:
53:7d:4d:fc:e5:fb:d8:2c:20:17:ab:34:8f:95:f6:
a2:b9:0f:e9:ed:83:91:9b:bc:18:7c:9b:33:8d:49:
0e:d5:3d:3b:11:ed:12:b1:ba:94:46:2e:e5:cc:15:
f6:35:1d:fb:66:71:d5:8f:01:40:8c:74:d2:f0:b0:
a5:85:82:80:45:35:06:d7:3d:35:88:bb:69:8c:45:
f7:07:12:52:c5:ca:ae:f5:c0:0f:0d:af:5a:f3:fb:
92:47:ee:f1:fa:78:53:1c:52:fb:b4:ae:c0:9b:74:
1c:df:23:f0:ae:e5:f0:ca:33:08:a7:1c:8c:b7:be:
78:28:28:e4:38:d2:98:a5:02:60:24:33:38:82:43:
2a:2d:1a:d4:78:1a:e2:48:b4:2b:e7:34:25:3b:5e:
24:b9:0b:3e:1a:55:90:0d:a5:77:73:c5:59:2c:e3:
3c:64:f2:f2:91:b6:26:0c:1c:4e:91:f8:1f:1b:32:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:46:80:1E:20:22:31:B8:8E:18:36:74:7E:88:9A:F2:98:9F:48:EF
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e34352e302f32342d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.103.45.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:a5:da:f1:7b:0f:ad:ee:38:19:9e:53:15:d2:17:a1:44:3a:
10:5f:74:4d:ad:60:9f:db:ad:82:93:83:c5:9e:db:1c:8e:35:
13:4a:37:c9:42:5b:2b:45:22:11:3e:be:dd:cf:25:86:79:1e:
d3:a4:ff:e6:b6:57:b5:77:64:47:90:7e:c9:c7:7b:c5:1e:71:
56:b7:42:a0:11:55:9a:50:eb:a4:65:84:f3:2a:37:0d:ac:fe:
1c:cc:56:f0:e2:cb:11:ff:79:60:c2:74:b2:09:80:77:eb:3b:
44:a6:3a:8e:70:82:9a:e8:99:e7:9e:d0:3d:08:b7:c8:cf:37:
31:8d:f5:fe:b7:2d:2f:73:46:cb:de:7e:d9:0f:43:33:05:14:
5e:02:31:4d:81:42:ef:e1:9e:16:b7:6a:cb:08:9f:f8:49:54:
b4:e8:d4:a9:13:fd:8b:b6:66:f0:30:ef:92:35:62:a9:c9:84:
99:7d:02:22:27:60:3a:6a:93:d2:3e:00:45:19:4f:45:83:30:
83:27:3b:da:8b:c0:4c:3c:ac:fc:45:90:f7:57:d1:7a:7a:32:
48:f8:cf:fb:c2:2a:b2:90:f6:55:2a:95:3a:f3:77:23:1d:cc:
75:15:ad:7d:d4:34:30:4b:a3:f0:99:51:92:45:48:42:d6:45:
77:af:76:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:32 2025 by rpki-client