Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32322d3234203d3e203138303539.roa
File: 3230332e3137332e39322e302f32322d3234203d3e203138303539.roa (raw, json)
Hash identifier: e32tLCzWwaEaDC99spxe9azyd2vqOJTmLKE+NAxYJKk=
Subject key identifier: 0C:4E:18:EA:80:CC:3B:A2:56:B5:92:2A:C6:65:B1:97:19:0C:A0:74
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 026D84509505B1B1F7074AF9271FD387045A22B7
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32322d3234203d3e203138303539.roa
Signing time: Fri 21 Mar 2025 09:02:24 +0000
ROA not before: Fri 21 Mar 2025 08:57:24 +0000
ROA not after: Fri 20 Mar 2026 09:02:24 +0000
asID: 18059
IP address blocks: 203.173.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6d:84:50:95:05:b1:b1:f7:07:4a:f9:27:1f:d3:87:04:5a:22:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Mar 21 08:57:24 2025 GMT
Not After : Mar 20 09:02:24 2026 GMT
Subject: CN=0C4E18EA80CC3BA256B5922AC665B197190CA074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:2b:ca:b3:bd:56:ca:ca:df:42:b2:ae:1e:
ff:b6:f2:e3:6b:bd:50:4c:c3:70:b0:f2:c5:13:14:
75:c8:5f:52:7c:83:4e:83:35:ab:08:5f:07:8d:a2:
07:73:8a:bd:7c:bb:78:4c:6e:ef:56:9a:10:fa:79:
98:f9:e5:49:16:24:b5:b7:5d:90:9a:d7:a8:ea:04:
7f:c3:41:95:cc:b4:f6:bb:72:fb:1b:7f:a0:1d:0c:
ce:69:05:14:91:d7:fa:6a:60:27:a3:f2:a3:2c:c4:
1d:2b:39:b7:bf:35:ee:bf:b4:e4:81:1d:23:05:62:
80:d7:49:29:bc:15:dd:5d:c2:65:4e:f0:d4:8b:12:
90:fd:dc:fc:e5:48:d2:68:8e:04:9f:98:9a:09:57:
39:dc:aa:16:48:9a:c6:e3:46:e5:f6:be:a6:7a:99:
8a:25:13:ad:64:c5:7e:a1:7e:c8:4b:93:d8:ce:46:
29:5d:bc:c8:8f:88:ba:b4:5f:38:72:4f:7a:02:4b:
70:22:6f:ec:7e:b2:80:7e:9f:1c:25:a0:df:eb:cb:
1c:fa:4a:22:8f:18:16:4a:9d:57:f8:53:66:8a:de:
c9:04:4a:5a:92:b9:05:76:49:f4:bf:5c:73:6d:e7:
ef:b4:d4:87:91:78:9e:f1:b7:34:f7:ee:0b:27:66:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4E:18:EA:80:CC:3B:A2:56:B5:92:2A:C6:65:B1:97:19:0C:A0:74
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32322d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.173.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:bd:0f:8e:41:9f:fe:d3:7e:ec:fd:be:5c:fe:1b:a2:c0:a0:
7a:e6:15:56:9d:30:10:9e:08:82:d4:cc:d0:e0:00:50:af:b6:
4b:e0:a3:48:14:06:c8:e0:46:a1:27:a2:cf:8f:16:e0:de:70:
e4:7c:57:54:55:7c:33:a5:69:87:7d:a7:40:f8:cc:3b:a8:e1:
5a:56:8d:5a:17:ca:ec:12:ef:e2:60:4b:a0:f3:ad:ea:10:36:
62:b0:e5:2c:0d:b7:19:9f:0a:91:9f:10:6f:c9:95:03:c5:d9:
da:b0:93:e1:ca:e6:d0:70:cd:9c:49:67:3e:b3:39:3c:ab:ca:
2a:29:ba:05:e0:39:7b:27:90:46:33:a2:f7:f7:5f:a9:e9:eb:
81:64:d8:31:4a:b5:04:86:31:7c:5b:ea:74:88:8c:ed:f5:c8:
8b:f3:10:ff:5e:93:0a:1e:31:1b:9f:69:8d:ed:2f:1e:3d:42:
cf:24:75:31:38:9c:73:69:fb:36:88:ef:5e:d5:8c:70:9b:89:
92:39:de:7e:c9:23:1d:77:9c:2c:e4:0b:7c:02:54:6c:e5:1b:
64:99:a1:1d:7d:71:a2:43:0f:0c:c4:26:a3:07:62:ad:20:29:
07:df:c3:b5:d7:1b:75:d0:3b:27:bd:4f:db:be:6f:2e:af:4a:
cf:a0:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:56 2025 by rpki-client