Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32392e302f32342d3234203d3e203234353235.roa
File: 3230332e3135332e32392e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: oh9ooPLc3jSvVK4We0mHafExWiVL9lPXgHhAzfJtgI8=
Subject key identifier: 2C:70:A6:38:A1:19:0E:1F:E4:3B:1A:C5:07:0F:D8:2F:4A:07:19:02
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 4ADB16C089BD585932C0D65888731242A42263EE
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32392e302f32342d3234203d3e203234353235.roa
Signing time: Sat 01 Jun 2024 07:00:01 +0000
ROA not before: Sat 01 Jun 2024 06:55:01 +0000
ROA not after: Sat 31 May 2025 07:00:01 +0000
asID: 24525
IP address blocks: 203.153.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:db:16:c0:89:bd:58:59:32:c0:d6:58:88:73:12:42:a4:22:63:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: Jun 1 06:55:01 2024 GMT
Not After : May 31 07:00:01 2025 GMT
Subject: CN=2C70A638A1190E1FE43B1AC5070FD82F4A071902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:84:34:c5:ad:bf:39:0b:a1:6d:dc:65:48:
90:5c:db:16:65:02:cf:a5:51:16:37:dc:cb:92:3b:
29:87:81:80:24:1d:f8:a1:19:c8:af:8b:7c:0e:e7:
3f:e4:f2:ba:e9:a9:06:ee:5b:0c:d9:c7:4b:38:d4:
c8:5f:56:00:98:56:56:26:0e:72:30:b1:de:13:af:
1a:d1:58:0d:b6:4f:e2:62:47:6b:b9:21:ea:6c:ab:
b7:e3:c2:7a:91:19:f4:c2:da:92:61:2f:6c:b7:83:
28:28:d4:65:8e:90:41:06:1e:e7:f5:02:1a:3a:3d:
a9:65:2d:d6:8b:a7:60:ab:ce:73:be:80:65:72:ca:
60:90:2d:51:c9:ee:1d:d3:fc:b9:b8:0b:a9:d3:e2:
19:9f:03:20:51:b1:13:9b:48:21:31:29:f3:3a:46:
23:32:6b:eb:fc:0f:db:37:5b:b8:c6:40:06:24:ff:
5c:e7:d9:f8:f1:e9:e4:3e:ad:b5:c6:a8:9b:b8:df:
22:e7:03:01:7a:d8:c4:6c:03:5a:57:81:86:49:bc:
e3:3c:63:e2:22:e8:42:1b:87:4b:8b:28:24:af:b4:
5f:e3:cf:77:29:99:98:d4:30:23:88:5e:48:89:d6:
26:b7:17:49:f3:14:e8:0f:51:42:97:5b:f2:61:a1:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:A6:38:A1:19:0E:1F:E4:3B:1A:C5:07:0F:D8:2F:4A:07:19:02
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32392e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.153.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:db:a9:e2:46:2e:f4:e3:d5:1e:42:12:18:84:f0:79:67:6e:
4d:0b:04:db:d6:de:99:a8:2d:cf:43:87:5d:18:88:73:77:dc:
f0:d9:75:95:66:db:83:d6:67:86:97:83:3a:9d:db:c2:ed:ac:
bc:3b:43:f0:ae:27:78:7d:ef:30:4a:27:f3:37:91:db:30:67:
48:73:69:74:5b:6d:62:d0:1b:d0:64:29:cb:a0:3b:62:7a:a5:
79:f9:e4:4d:d3:c9:27:e1:42:61:a3:34:96:0e:1d:be:34:9b:
54:c2:2b:77:e6:df:5b:22:d5:fe:3f:5f:5b:f9:07:48:cc:49:
c7:b9:21:b7:b4:e8:d2:f9:b1:d8:2c:58:f8:3f:57:5d:66:eb:
b9:27:9f:e1:ae:47:89:98:07:64:76:4f:fb:6e:33:53:fd:2b:
50:90:ac:ea:16:f5:ac:f0:d3:0f:42:37:0e:25:dc:4a:79:12:
e7:4d:53:16:3b:5b:8a:ce:a4:18:54:30:4e:77:80:7a:78:07:
93:29:9c:7b:f0:28:2d:df:fe:e8:03:9c:93:46:1a:fa:30:01:
60:cf:09:66:b2:11:2c:40:48:84:11:4a:79:95:49:14:c3:95:
c5:ff:1e:49:fb:fd:2c:e2:a1:df:ad:53:4b:c0:3c:4b:b2:f8:
5c:f0:6a:3c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUStsWwIm9WFkywNZYiHMSQqQiY+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0
NkE4MzcwMjAeFw0yNDA2MDEwNjU1MDFaFw0yNTA1MzEwNzAwMDFaMDMxMTAvBgNV
BAMTKDJDNzBBNjM4QTExOTBFMUZFNDNCMUFDNTA3MEZEODJGNEEwNzE5MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Q4Q0xa2/OQuhbdxlSJBc2xZl
As+lURY33MuSOymHgYAkHfihGcivi3wO5z/k8rrpqQbuWwzZx0s41MhfVgCYVlYm
DnIwsd4TrxrRWA22T+JiR2u5Iepsq7fjwnqRGfTC2pJhL2y3gygo1GWOkEEGHuf1
Aho6PallLdaLp2CrznO+gGVyymCQLVHJ7h3T/Lm4C6nT4hmfAyBRsRObSCExKfM6
RiMya+v8D9s3W7jGQAYk/1zn2fjx6eQ+rbXGqJu43yLnAwF62MRsA1pXgYZJvOM8
Y+Ii6EIbh0uLKCSvtF/jz3cpmZjUMCOIXkiJ1ia3F0nzFOgPUUKXW/JhoZ0HAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQULHCmOKEZDh/kOxrFBw/YL0oHGQIwHwYDVR0j
BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1
NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4
MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMyMzAzMzJlMzEzNTMzMmUzMjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuZHTANBgkqhkiG
9w0BAQsFAAOCAQEAX9up4kYu9OPVHkISGITweWduTQsE29bemagtz0OHXRiIc3fc
8Nl1lWbbg9ZnhpeDOp3bwu2svDtD8K4neH3vMEon8zeR2zBnSHNpdFttYtAb0GQp
y6A7YnqlefnkTdPJJ+FCYaM0lg4dvjSbVMIrd+bfWyLV/j9fW/kHSMxJx7kht7To
0vmx2CxY+D9XXWbruSef4a5HiZgHZHZP+24zU/0rUJCs6hb1rPDTD0I3DiXcSnkS
501TFjtbis6kGFQwTneAengHkymce/AoLd/+6AOck0Ya+jABYM8JZrIRLEBIhBFK
eZVJFMOVxf8eSfv9LOKh361TS8A8S7L4XPBqPA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:03:42 2025 by rpki-client