Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3137342e352e302f32342d3234203d3e20313333373938.roa
File: 3230332e3137342e352e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier: dI/ANUVClRXpJBL1pUjwyrL1Z7rWvyQd7mF2WE9A2YY=
Subject key identifier: E2:AE:9B:54:07:2B:66:FE:F9:D0:A0:F6:F7:47:35:5E:2B:89:41:AF
Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial: 7AC49C750A11BD960572315FF5D4A46A910E6EDF
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3137342e352e302f32342d3234203d3e20313333373938.roa
Signing time: Tue 07 Jan 2025 09:00:00 +0000
ROA not before: Tue 07 Jan 2025 08:55:00 +0000
ROA not after: Tue 06 Jan 2026 09:00:00 +0000
asID: 133798
IP address blocks: 203.174.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c4:9c:75:0a:11:bd:96:05:72:31:5f:f5:d4:a4:6a:91:0e:6e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Validity
Not Before: Jan 7 08:55:00 2025 GMT
Not After : Jan 6 09:00:00 2026 GMT
Subject: CN=E2AE9B54072B66FEF9D0A0F6F747355E2B8941AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:c6:13:5e:75:e4:08:f3:5a:9a:12:15:55:
ec:02:23:f3:e0:fb:4d:b2:e6:9d:c9:99:0c:6e:b2:
5e:79:c9:b7:13:58:d8:36:dc:b9:97:45:5d:dd:a2:
63:8b:66:52:fd:7b:7b:97:15:90:56:cc:bc:a5:20:
8d:35:47:55:0c:c7:af:ac:63:0b:0f:60:81:7d:92:
d9:94:21:0a:f8:36:c8:0c:f0:ed:91:67:c2:16:33:
85:39:48:b2:ac:87:04:ac:55:a1:1e:c8:db:cd:37:
08:e1:4e:7c:b3:b7:3f:d9:c9:fe:89:d0:52:6a:18:
8f:c8:32:b3:16:b8:6c:65:51:46:4a:97:34:8a:ec:
2f:35:67:f7:77:f6:91:91:07:2a:78:0f:31:8d:8d:
63:ae:13:eb:e6:f7:f9:23:be:01:98:4d:12:63:53:
1d:49:e3:b4:9e:79:f9:67:8c:d0:45:0b:75:b0:1e:
3b:cd:6e:d4:3e:40:4e:2a:45:c7:13:10:08:c5:e2:
df:b1:58:f6:5e:7b:6c:b9:49:e2:28:22:0d:5a:94:
b2:a3:1b:cc:12:ff:36:59:78:ad:a4:5d:98:51:0a:
6b:6a:c2:1b:32:0a:c4:46:e4:8a:15:8b:da:26:4a:
32:5b:77:a9:65:13:ce:cf:a1:04:41:b4:61:ba:3e:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AE:9B:54:07:2B:66:FE:F9:D0:A0:F6:F7:47:35:5E:2B:89:41:AF
X509v3 Authority Key Identifier:
keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3137342e352e302f32342d3234203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.174.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fb:0c:d4:8d:92:15:92:16:21:69:a7:08:b6:7f:0c:86:0a:
a7:22:b6:ab:ce:d7:20:ff:66:79:de:6b:43:81:e8:0f:d6:d3:
8d:71:bd:5d:83:ad:38:0f:f1:39:c8:87:25:2c:8b:4e:aa:7a:
62:40:41:8d:a2:6c:a7:67:ae:79:da:ee:1b:d7:74:34:66:b7:
15:fe:1b:a7:2e:f2:15:69:96:d1:51:58:52:2b:57:42:06:f9:
6c:54:46:fe:e7:ea:ce:44:39:a7:d5:6b:46:4b:56:dd:95:1d:
3c:f6:64:6a:0b:89:d0:af:ab:e3:60:81:b5:5d:09:29:7d:62:
d5:9f:de:de:18:20:e4:21:11:7a:72:9d:ef:b4:e8:e3:01:5c:
1b:11:73:67:bb:85:c0:fd:f4:70:1f:3a:2a:53:9b:53:4e:7f:
a1:34:c9:a9:01:44:26:5a:d4:83:d9:ad:ce:f4:a5:3f:f2:e5:
a8:35:04:44:ea:28:7f:75:c8:42:b5:ef:c3:86:bb:3c:ae:0a:
03:85:45:7e:ad:44:bc:74:fe:b9:f6:cc:82:b7:b8:a3:13:65:
bd:08:d1:57:b2:9e:24:f7:d7:c4:f6:ee:78:eb:07:c0:e4:e2:
b1:c3:bc:0f:31:b7:73:c5:38:2c:00:ce:74:9d:b2:6b:54:d7:
73:c2:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:00:05 2025 by rpki-client