Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32322d3234203d3e203338333230.roa
File: 3230332e3137332e38382e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier: RoYYN5xDIn7sF9t8qdKS1VuH63dNrvelmSIMHNzv2F8=
Subject key identifier: 10:2B:EB:4E:F3:F1:78:A4:2B:79:D9:D9:F0:A9:DC:C1:6A:7A:A0:A2
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 0CD2A475770C98F72E14CE1481E69FB596104074
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32322d3234203d3e203338333230.roa
Signing time: Sat 29 Jan 2022 05:00:06 +0000
ROA not before: Sat 29 Jan 2022 04:55:06 +0000
ROA not after: Sun 29 Jan 2023 05:00:06 +0000
asID: 38320
IP address blocks: 203.173.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d2:a4:75:77:0c:98:f7:2e:14:ce:14:81:e6:9f:b5:96:10:40:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jan 29 04:55:06 2022 GMT
Not After : Jan 29 05:00:06 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:4a:4a:77:43:4c:fa:61:0e:13:51:19:2e:
88:d0:80:b9:4a:48:ab:f9:05:ce:35:2b:92:0a:a4:
43:19:96:b0:68:3b:c5:c2:e9:83:65:01:b9:3b:4b:
7e:15:3c:39:98:9b:26:b3:4a:a3:04:cc:6e:a3:a9:
fb:78:9d:23:9e:52:c6:68:59:a0:e6:24:62:7a:1a:
eb:93:53:9e:dd:98:6d:ea:35:0f:45:9b:8d:ef:25:
a5:6d:18:cf:14:32:62:8b:5c:86:b5:98:0d:52:91:
9e:01:1b:30:d6:87:43:36:1b:8c:23:a1:ab:d5:f5:
9e:a9:07:26:e0:2c:66:f8:99:55:35:f2:b9:52:77:
a0:a6:96:7c:5c:84:49:00:de:fd:ce:88:51:85:ea:
05:05:1e:6c:11:a5:be:9e:7b:92:37:6b:21:bd:b7:
19:84:18:90:e0:3d:5e:40:22:36:70:f0:d6:8f:52:
15:28:49:72:9b:a5:a8:fe:40:37:07:c4:f4:c3:ca:
66:41:cb:5d:34:6e:7e:69:1c:33:de:61:62:54:97:
b0:62:88:bc:e3:c4:83:a9:d4:99:ef:99:84:e4:a8:
84:5e:ae:45:68:f8:1a:cd:64:c9:73:03:52:d8:f7:
33:ec:ba:cf:89:7a:7f:94:ed:34:54:9e:56:7c:26:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:EB:4E:F3:F1:78:A4:2B:79:D9:D9:F0:A9:DC:C1:6A:7A:A0:A2
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32322d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.173.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:23:1a:b7:7f:7f:3c:b8:66:51:3b:e8:68:39:8f:e5:28:bf:
b6:c2:92:e3:6d:e2:5e:ab:de:66:36:aa:a3:1f:91:7d:82:e4:
4c:7e:46:12:9b:ca:a0:51:42:b0:1f:e8:f9:11:e7:99:c5:7c:
81:b9:72:60:f8:ed:a7:bb:d9:92:5f:74:37:a5:5d:ad:26:92:
41:53:b5:c3:27:4c:72:c1:95:cf:bd:bd:51:2f:e5:4d:3a:07:
e7:f3:a6:01:36:76:84:98:7a:2a:c8:05:ce:9f:38:81:db:b5:
56:6e:35:75:4e:11:87:0e:9c:b5:f7:30:26:fa:11:8a:b3:df:
fa:f1:03:22:d3:d9:f7:8e:57:55:9e:da:86:0a:b3:83:67:c0:
42:d9:9b:7a:8b:b8:29:03:4d:3b:98:4c:4d:8c:c4:c4:df:56:
0f:3c:b7:93:0d:85:38:f5:43:2d:51:30:75:0c:5f:8b:4e:b1:
28:27:1d:d8:9d:f1:f4:62:d9:6f:f9:c4:c8:58:16:a1:f6:6d:
b3:16:db:51:5e:a0:70:ac:8b:28:cd:db:1a:e3:16:9c:d6:5a:
db:cd:36:c0:dc:04:1c:27:3f:c3:57:ac:6f:ea:c8:7a:25:a2:
ce:08:9c:71:82:ce:27:ad:b4:04:66:bc:7e:b1:43:49:36:40:
0c:af:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:04 2025 by rpki-client