Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa
File: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (raw, json)
Hash identifier: TZ45IaHiDcklYnYgaDPwrwSUbUctA3Q/NXqUbigRnzs=
Subject key identifier: A7:77:F4:BA:B9:13:BE:20:0B:78:B3:6D:8C:51:82:07:2C:44:B0:ED
Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial: 67B46703737B9A0EEDD0B1615975EA019CB72D5B
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa
Signing time: Sat 01 Feb 2025 12:02:21 +0000
ROA not before: Sat 01 Feb 2025 11:57:21 +0000
ROA not after: Sat 31 Jan 2026 12:02:21 +0000
asID: 58478
IP address blocks: 202.182.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b4:67:03:73:7b:9a:0e:ed:d0:b1:61:59:75:ea:01:9c:b7:2d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Validity
Not Before: Feb 1 11:57:21 2025 GMT
Not After : Jan 31 12:02:21 2026 GMT
Subject: CN=A777F4BAB913BE200B78B36D8C5182072C44B0ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:4b:bf:df:c3:72:b8:f2:df:75:94:a9:3e:
7b:ef:e8:7f:85:07:21:22:68:d7:36:53:e0:46:d0:
4b:c4:04:1d:b1:60:43:cc:8c:94:03:4b:fe:ba:91:
35:98:a8:57:bc:99:82:f6:47:63:5f:02:74:d3:ce:
e2:ca:96:e7:e0:bf:6d:d8:84:50:bf:6d:66:35:7e:
16:86:ec:cd:cc:7e:7a:3f:65:28:e1:24:4a:66:de:
0c:6c:ba:48:96:1d:cf:a1:07:2e:f7:34:26:ee:a5:
52:47:70:92:e7:fb:bb:c2:7d:c0:ac:6b:f0:72:fd:
90:67:44:03:5e:d7:f9:c8:79:ec:e4:28:ca:65:e4:
89:a6:80:6e:66:10:c2:3b:b0:f8:8e:45:b7:18:c7:
53:d1:ab:cb:71:34:a9:3e:1f:fb:16:08:f7:4e:d6:
0c:1c:2a:54:00:f8:2b:a1:36:e4:e9:c8:1a:66:34:
d3:cb:0f:ca:ef:2b:d7:98:48:25:58:d1:62:08:a3:
97:1a:62:7c:55:19:0a:87:b3:c3:43:82:97:ca:c4:
45:cb:c2:eb:e3:0f:c9:94:e6:04:b2:61:b1:db:55:
3d:b8:0f:4a:28:66:43:b4:42:7f:61:a8:8d:ee:73:
ff:66:41:da:57:23:fc:b2:a3:24:2d:a7:3a:f2:fc:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:77:F4:BA:B9:13:BE:20:0B:78:B3:6D:8C:51:82:07:2C:44:B0:ED
X509v3 Authority Key Identifier:
keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.182.177.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:f7:11:01:6d:19:01:b1:cb:56:f3:d4:98:db:d6:f5:8c:68:
7b:25:03:a4:89:78:5b:36:b4:0b:9d:5f:f0:cf:b6:ab:cd:cb:
a3:b4:50:b3:47:d4:c0:2e:56:7d:19:cb:3e:26:0a:76:e2:e5:
39:86:fd:43:d1:c3:0d:17:be:17:06:1c:07:35:2b:35:e1:0c:
7a:d6:29:4c:90:f2:57:a7:f9:13:a0:35:4c:df:81:28:ba:58:
6e:1d:59:04:a3:d0:6b:b7:93:c0:9e:78:1a:55:40:d8:99:d9:
7e:50:f0:4f:75:df:03:e0:5e:9f:df:80:4d:7e:56:cf:d8:c4:
e9:83:00:f2:07:a0:07:80:98:bb:99:22:c6:da:a6:a1:6e:ad:
a9:b2:32:d1:be:e5:a0:88:d4:79:19:f0:f0:77:77:dd:33:a4:
9a:03:ef:42:cf:48:60:59:08:52:fb:20:f9:98:94:ae:cd:36:
f5:3c:7f:aa:e3:85:d7:05:44:73:5b:02:0a:cb:ea:96:c9:da:
e8:c7:7b:93:74:22:11:31:06:6d:6b:b2:2f:92:ca:64:93:a0:
bb:a7:13:f6:23:37:5b:5d:2c:8a:c8:bd:57:de:1e:5a:41:ae:
e8:e1:10:08:b3:25:66:c0:d0:f4:f1:1f:26:5d:b4:79:6d:75:
b9:1a:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:27:48 2025 by rpki-client