Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35372e302f32342d3234203d3e203338333230.roa
File: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=
Subject key identifier: 45:7C:A0:C9:61:6E:30:9B:F0:CF:13:F2:67:F2:81:D7:9C:56:74:4B
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 5A82A5573B95073A0F50E82E4DEDE18406325DA2
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35372e302f32342d3234203d3e203338333230.roa
Signing time: Mon 27 Jan 2025 07:00:00 +0000
ROA not before: Mon 27 Jan 2025 06:55:00 +0000
ROA not after: Mon 26 Jan 2026 07:00:00 +0000
asID: 38320
IP address blocks: 175.103.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:82:a5:57:3b:95:07:3a:0f:50:e8:2e:4d:ed:e1:84:06:32:5d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jan 27 06:55:00 2025 GMT
Not After : Jan 26 07:00:00 2026 GMT
Subject: CN=457CA0C9616E309BF0CF13F267F281D79C56744B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:58:6a:a6:37:d7:d5:83:a3:e5:f0:96:c6:
59:ff:04:52:d0:1d:9b:20:dc:21:03:da:a2:02:f0:
90:0c:a0:7e:19:6b:a7:61:16:fd:b8:47:9e:e4:20:
48:b3:d7:c4:4d:a6:02:c5:af:28:1f:9e:c6:40:c8:
72:19:d6:88:28:ae:93:f1:20:4f:8d:26:50:16:97:
d8:aa:a5:a7:a6:9e:59:93:95:b2:a5:eb:8f:35:67:
61:b6:fc:40:89:17:17:15:2d:0d:89:96:7e:d0:db:
03:93:06:6b:ae:f0:e5:78:fe:fe:5d:e1:13:41:1b:
e4:d4:5f:cf:c3:0e:a1:06:ce:11:a1:83:e4:5e:df:
e4:c5:d2:ea:75:24:3f:ce:a1:2f:3d:db:2d:c0:0a:
98:cd:6d:03:49:4f:ac:28:42:c7:58:a4:05:58:58:
ed:25:64:bc:41:3e:42:c8:61:bd:b0:38:45:2f:c5:
ba:01:63:c6:3c:8f:ae:6b:fc:ae:d2:07:85:11:3f:
0a:fc:a8:f4:32:8c:97:d5:a4:34:c5:01:be:c4:57:
ce:f7:13:72:e3:06:6e:e0:ca:7c:8e:a7:26:ee:b1:
88:42:18:27:77:54:6b:dd:41:b7:8c:ed:98:44:b0:
a2:91:76:4d:d4:42:fc:9d:2a:ff:a6:a5:ba:0e:0c:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7C:A0:C9:61:6E:30:9B:F0:CF:13:F2:67:F2:81:D7:9C:56:74:4B
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35372e302f32342d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.103.57.0/24
Signature Algorithm: sha256WithRSAEncryption
33:dd:06:c0:76:60:f4:0d:89:93:fc:ea:69:b7:57:f4:f6:7a:
be:21:c0:c8:d0:bb:17:6f:94:14:2e:20:b3:84:8d:fd:a3:2a:
0d:13:70:d3:44:cb:aa:92:87:aa:68:a0:15:56:24:1a:17:9e:
3d:06:81:b8:9d:93:77:77:81:46:17:59:00:00:dd:7a:f5:65:
54:89:05:87:9d:41:cc:b6:93:9c:87:d8:3d:85:72:ce:99:5e:
79:c9:35:84:fb:01:5c:81:2f:02:42:ed:01:b9:1d:66:39:3d:
41:a6:bd:2e:82:20:66:83:dc:ee:52:ff:e9:21:f9:ab:3d:3c:
4a:50:60:a4:71:17:26:b5:ca:d4:72:56:2c:ec:90:bf:f2:46:
24:14:f4:b2:20:c2:8c:d3:6d:0b:c9:f7:10:07:7c:ac:57:c0:
6c:4e:ee:23:3b:27:29:ca:92:ca:3a:d1:95:f3:13:8c:8f:c5:
7c:52:0e:dc:b1:a4:4b:f5:6f:23:55:51:61:9d:d3:9a:60:6f:
2a:06:95:83:a2:53:23:09:fc:af:ad:46:86:03:a6:b3:07:71:
cd:2b:43:54:a5:52:70:12:c4:6e:77:29:41:d9:14:8c:81:4b:
7d:9d:9f:7c:10:c4:22:21:33:b7:38:3a:9b:e6:f6:40:59:1d:
d7:87:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:23 2025 by rpki-client