Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35332e302f32342d3234203d3e203338333230.roa
File: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier: Q22OsVQGNiQHv7rsWq7HdXb5YFdsKjAZXlHpHoKvOag=
Subject key identifier: 5E:04:B2:A5:44:E7:76:01:F5:28:09:99:E7:51:44:2B:ED:14:19:14
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 699A8435572CA43B1F6AD3E8A93B16087F7CB477
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35332e302f32342d3234203d3e203338333230.roa
Signing time: Thu 23 Jan 2025 02:51:01 +0000
ROA not before: Thu 23 Jan 2025 02:46:01 +0000
ROA not after: Thu 22 Jan 2026 02:51:01 +0000
asID: 38320
IP address blocks: 175.103.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:9a:84:35:57:2c:a4:3b:1f:6a:d3:e8:a9:3b:16:08:7f:7c:b4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jan 23 02:46:01 2025 GMT
Not After : Jan 22 02:51:01 2026 GMT
Subject: CN=5E04B2A544E77601F5280999E751442BED141914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:ed:e6:30:50:c3:ec:cc:44:9a:f6:e2:e9:
31:c9:fc:5c:8f:5f:83:ad:33:9f:be:b2:8e:e8:1b:
51:c2:98:84:e3:d2:14:d0:65:d0:4f:e7:9d:8b:51:
0f:26:da:3f:99:50:21:10:f8:66:bb:2a:d1:28:96:
78:1f:35:f5:d4:b6:45:47:08:c5:39:c9:d7:dc:b3:
d4:96:42:6b:f4:dd:c8:e7:d4:d9:d8:44:65:8f:21:
14:ae:0e:08:25:a8:91:76:69:bb:32:00:4e:60:43:
c8:c5:ca:d1:01:a8:19:75:e3:77:45:b4:86:45:f9:
b7:0d:4e:43:8d:c3:3a:ba:e5:f1:fe:ba:70:dd:a3:
e6:27:ab:f5:58:33:3e:33:6d:1c:e3:e8:b5:5d:09:
aa:04:a8:37:6b:20:10:9e:2e:c9:48:7f:23:84:e1:
15:fd:8e:e0:ad:d5:92:ae:ee:00:52:98:9d:9f:11:
36:e4:01:7c:26:62:66:d8:8b:81:19:58:68:04:82:
16:c7:28:ed:73:b3:e5:82:97:1c:a2:04:2b:9a:c2:
75:fd:a0:65:38:0a:8b:0e:27:2c:7a:a1:6a:2a:54:
3f:9c:26:44:6a:36:ec:d5:78:55:09:80:e5:dc:4d:
c0:99:fd:14:15:7f:f8:bd:f0:2b:f7:5d:e7:b4:67:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:B2:A5:44:E7:76:01:F5:28:09:99:E7:51:44:2B:ED:14:19:14
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35332e302f32342d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.103.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d9:17:c1:0b:1e:3b:37:b7:48:e0:9f:4a:1f:97:ec:41:79:
7f:a3:15:af:76:22:96:50:8e:b8:ee:60:1e:be:29:6d:8c:78:
48:44:bd:3a:06:57:d4:57:f9:9b:75:c8:b1:43:ba:d1:89:a4:
76:9f:09:17:55:8e:c4:1e:95:fb:25:c1:3b:69:e1:90:c5:89:
57:13:a4:2a:46:c7:76:ea:4b:24:32:54:cd:48:63:74:9b:73:
28:8b:96:fa:cd:46:00:5d:c6:c3:b4:dd:34:4c:54:e8:d3:b2:
25:bd:6e:df:f6:10:b0:d0:8e:6d:dd:6a:3b:6e:19:90:c1:ab:
59:f2:eb:37:c3:9d:3d:ae:06:8d:ca:48:f0:8a:e7:56:3e:45:
1e:c4:0e:5f:10:3f:78:28:a0:1e:48:4c:0f:01:90:98:d3:c3:
fc:a1:ba:e3:17:7e:c3:db:f6:60:4c:1a:a2:c2:d7:14:5d:9d:
75:56:5f:24:85:bc:da:05:26:69:2a:25:2d:dd:54:71:2e:3c:
b2:9e:77:67:47:a8:99:0e:f9:e5:e7:69:d4:04:f1:ce:f3:c7:
e2:8f:dc:39:0f:1a:38:22:0a:ae:96:ed:d3:5e:4a:7e:10:ab:
47:dc:0a:8a:f3:aa:99:88:a9:21:11:66:c7:59:ec:6f:0c:bb:
f5:41:f1:54
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaZqENVcspDsfatPoqTsWCH98tHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz
MUY4MDJFMTAeFw0yNTAxMjMwMjQ2MDFaFw0yNjAxMjIwMjUxMDFaMDMxMTAvBgNV
BAMTKDVFMDRCMkE1NDRFNzc2MDFGNTI4MDk5OUU3NTE0NDJCRUQxNDE5MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj7e3mMFDD7MxEmvbi6THJ/FyP
X4OtM5++so7oG1HCmITj0hTQZdBP552LUQ8m2j+ZUCEQ+Ga7KtEolngfNfXUtkVH
CMU5ydfcs9SWQmv03cjn1NnYRGWPIRSuDgglqJF2absyAE5gQ8jFytEBqBl143dF
tIZF+bcNTkONwzq65fH+unDdo+Ynq/VYMz4zbRzj6LVdCaoEqDdrIBCeLslIfyOE
4RX9juCt1ZKu7gBSmJ2fETbkAXwmYmbYi4EZWGgEghbHKO1zs+WClxyiBCuawnX9
oGU4CosOJyx6oWoqVD+cJkRqNuzVeFUJgOXcTcCZ/RQVf/i98Cv3Xee0Z/IJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUXgSypUTndgH1KAmZ51FEK+0UGRQwHwYDVR0j
BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB
RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4
MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h
NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzczNTJlMzEzMDMzMmUzNTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK9nNTANBgkqhkiG
9w0BAQsFAAOCAQEAXdkXwQseOze3SOCfSh+X7EF5f6MVr3YillCOuO5gHr4pbYx4
SES9OgZX1Ff5m3XIsUO60Ymkdp8JF1WOxB6V+yXBO2nhkMWJVxOkKkbHdupLJDJU
zUhjdJtzKIuW+s1GAF3Gw7TdNExU6NOyJb1u3/YQsNCObd1qO24ZkMGrWfLrN8Od
Pa4GjcpI8IrnVj5FHsQOXxA/eCigHkhMDwGQmNPD/KG64xd+w9v2YEwaosLXFF2d
dVZfJIW82gUmaSolLd1UcS48sp53Z0eomQ755edp1ATxzvPH4o/cOQ8aOCIKrpbt
015KfhCrR9wKivOqmYipIRFmx1nsbwy79UHxVA==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:13 2025 by rpki-client