Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32332d3234203d3e20313339343630.roa
File: 3230332e3137332e38382e302f32332d3234203d3e20313339343630.roa (raw, json)
Hash identifier: YoLa6hVPHtaao2gHkqryIPY4cnmKoBGofNDJYCi7shc=
Subject key identifier: EC:8A:65:A5:38:B5:45:CC:D2:58:08:29:11:CC:7F:60:C1:50:59:4B
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 2399D7F0B447BE5013ABB7B7E3DFF59002311B07
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32332d3234203d3e20313339343630.roa
Signing time: Mon 18 Jul 2022 07:18:53 +0000
ROA not before: Mon 18 Jul 2022 07:13:53 +0000
ROA not after: Mon 17 Jul 2023 07:18:53 +0000
asID: 139460
IP address blocks: 203.173.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:99:d7:f0:b4:47:be:50:13:ab:b7:b7:e3:df:f5:90:02:31:1b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jul 18 07:13:53 2022 GMT
Not After : Jul 17 07:18:53 2023 GMT
Subject: CN=EC8A65A538B545CCD258082911CC7F60C150594B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:a1:b0:ce:b3:78:ca:7d:01:b9:c6:12:13:
78:41:8e:f8:54:07:48:5f:85:20:2a:2e:6f:6e:7f:
7e:c9:20:10:2c:06:74:1e:4b:a5:a6:6d:0c:d4:c2:
53:94:5d:e6:73:b0:27:8b:da:1d:5b:bd:2d:be:5d:
1a:ac:5a:f8:6f:c4:1c:69:74:f9:f5:b7:84:f2:7a:
1b:b4:b2:48:89:61:f8:17:07:c7:48:1a:59:59:5b:
ca:6c:7f:ae:c3:06:ad:5b:13:32:b9:db:47:c3:6e:
18:69:7a:42:fa:e5:ec:04:7e:e2:93:09:6d:f7:d8:
b1:d9:50:19:15:ff:72:ef:f1:a5:fb:71:c4:1a:6c:
e3:78:17:f3:8c:5c:3c:55:84:d5:12:2b:84:4b:11:
e5:29:f9:21:1d:30:3d:38:dc:38:0a:ea:62:67:c8:
d7:2a:b1:12:4c:a2:66:6b:14:c3:3d:ba:fb:fc:0b:
5c:e8:57:9f:f7:b8:ac:e9:48:61:b6:3d:8b:fc:0a:
7f:f1:48:78:56:29:ca:c7:e1:64:c3:04:10:3b:3c:
30:fb:27:0f:c2:3b:f7:19:2b:f6:b6:c9:b7:e0:1f:
1e:76:10:d6:e5:0c:e7:d5:65:e0:3b:74:94:8f:fa:
11:89:5c:39:4b:37:5d:cf:f0:cf:c5:49:37:57:ec:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8A:65:A5:38:B5:45:CC:D2:58:08:29:11:CC:7F:60:C1:50:59:4B
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32332d3234203d3e20313339343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.173.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:e1:fc:85:b0:6e:c0:19:5f:8a:02:9f:cd:e8:1e:1b:dc:0c:
e1:10:39:b6:1b:9e:ec:4b:d0:d1:63:eb:a3:1b:7a:c3:76:15:
63:31:5f:0a:bc:35:5f:5a:fa:05:d3:8e:b3:e9:60:ef:5b:5b:
69:70:21:79:7a:2f:8d:1f:e5:c2:49:05:a0:03:8f:07:fd:2e:
3d:8a:44:8e:ce:78:6b:ca:33:ae:6d:8e:63:87:3a:84:66:2a:
6d:f4:89:e9:92:23:d0:c6:c8:d2:88:3b:f1:f4:8d:50:06:29:
d7:7c:78:14:df:fc:cb:1c:db:c6:0c:77:ab:bb:f5:61:62:18:
bc:4b:cc:27:85:08:67:68:95:bb:ca:2b:47:96:29:07:f6:bc:
80:19:42:db:82:1a:5c:0b:9f:a4:11:2b:61:a8:a6:1f:84:09:
e5:9b:b6:00:0c:27:57:6a:38:e7:54:7e:99:d4:13:f3:48:cd:
2f:3a:77:cb:cf:24:9a:f7:49:8e:64:b6:5a:30:41:55:06:4c:
e0:55:fa:bf:8c:3f:02:9f:57:77:bc:26:65:36:14:24:69:64:
ed:dc:0e:05:ad:3d:45:09:e5:a3:08:42:de:70:e1:16:95:6b:
cb:ce:74:60:59:94:6e:25:45:40:69:27:a7:ea:06:6d:33:b9:
05:b7:d2:ad
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUI5nX8LRHvlATq7e349/1kAIxGwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz
MUY4MDJFMTAeFw0yMjA3MTgwNzEzNTNaFw0yMzA3MTcwNzE4NTNaMDMxMTAvBgNV
BAMTKEVDOEE2NUE1MzhCNTQ1Q0NEMjU4MDgyOTExQ0M3RjYwQzE1MDU5NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmS6GwzrN4yn0BucYSE3hBjvhU
B0hfhSAqLm9uf37JIBAsBnQeS6WmbQzUwlOUXeZzsCeL2h1bvS2+XRqsWvhvxBxp
dPn1t4Tyehu0skiJYfgXB8dIGllZW8psf67DBq1bEzK520fDbhhpekL65ewEfuKT
CW332LHZUBkV/3Lv8aX7ccQabON4F/OMXDxVhNUSK4RLEeUp+SEdMD043DgK6mJn
yNcqsRJMomZrFMM9uvv8C1zoV5/3uKzpSGG2PYv8Cn/xSHhWKcrH4WTDBBA7PDD7
Jw/CO/cZK/a2ybfgHx52ENblDOfVZeA7dJSP+hGJXDlLN13P8M/FSTdX7AAHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU7IplpTi1RczSWAgpEcx/YMFQWUswHwYDVR0j
BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB
RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4
MDJFMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h
NzdjLWEwNmNlMTRlMjQzYy8wLzMyMzAzMzJlMzEzNzMzMmUzODM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy61YMA0GCSqG
SIb3DQEBCwUAA4IBAQCn4fyFsG7AGV+KAp/N6B4b3AzhEDm2G57sS9DRY+ujG3rD
dhVjMV8KvDVfWvoF046z6WDvW1tpcCF5ei+NH+XCSQWgA48H/S49ikSOznhryjOu
bY5jhzqEZipt9InpkiPQxsjSiDvx9I1QBinXfHgU3/zLHNvGDHeru/VhYhi8S8wn
hQhnaJW7yitHlikH9ryAGULbghpcC5+kESthqKYfhAnlm7YADCdXajjnVH6Z1BPz
SM0vOnfLzySa90mOZLZaMEFVBkzgVfq/jD8Cn1d3vCZlNhQkaWTt3A4FrT1FCeWj
CELecOEWlWvLznRgWZRuJUVAaSen6gZtM7kFt9Kt
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:23 2025 by rpki-client