Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa
File: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (raw, json)
Hash identifier: gRftjSQQEs2HA/M7jkf+ozLtCrIoawfYsZxOb3X4kBI=
Subject key identifier: 13:11:E2:C6:7C:E8:62:C9:6F:A2:A9:29:75:73:38:A9:0A:BA:24:60
Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial: 1C05FF61A33A460E66024963FF39E3849DC93F8A
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa
Signing time: Tue 14 Jan 2025 07:24:56 +0000
ROA not before: Tue 14 Jan 2025 07:19:56 +0000
ROA not after: Tue 13 Jan 2026 07:24:56 +0000
asID: 58378
IP address blocks: 203.83.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:05:ff:61:a3:3a:46:0e:66:02:49:63:ff:39:e3:84:9d:c9:3f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Validity
Not Before: Jan 14 07:19:56 2025 GMT
Not After : Jan 13 07:24:56 2026 GMT
Subject: CN=1311E2C67CE862C96FA2A929757338A90ABA2460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:ac:54:e7:7f:63:98:ce:21:c8:92:91:fb:
14:e0:72:d6:c8:bc:12:11:91:f1:e3:71:68:f5:2e:
81:2e:68:96:69:5b:45:fd:72:2a:8d:ed:f8:de:6f:
d5:82:b4:4f:69:0e:95:8c:e2:41:d9:c9:e9:59:99:
37:2b:e1:d7:1d:ae:23:18:8e:ed:0e:8c:69:d1:61:
3e:6f:e8:e3:97:b2:8c:5c:18:bd:3d:96:1d:de:91:
e0:f2:91:5b:8f:25:60:6c:54:75:67:54:e3:4d:82:
92:e8:f3:54:f9:2a:21:84:89:01:25:bb:2a:2f:79:
84:74:30:da:c7:9a:5b:de:4e:d4:a8:df:b3:32:a1:
3d:fa:b5:7a:fe:2b:33:d6:64:c5:35:ab:e8:5a:b9:
e4:d9:4a:b1:a3:58:4d:10:90:db:7a:8b:1c:8e:28:
5f:aa:e1:f7:ef:76:4d:79:8b:68:6a:de:80:1b:65:
cb:73:cd:5f:01:88:a9:89:d3:ab:45:96:eb:89:25:
82:06:78:0e:4b:b6:c4:43:9e:a3:b7:d3:a0:b5:05:
dc:ee:e3:85:ec:b8:d2:40:96:e4:af:30:05:92:82:
36:86:69:42:fd:dd:cf:e5:44:f1:8c:fb:d5:12:66:
f7:e5:bb:07:04:de:f0:86:6e:16:a0:3f:af:20:c3:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:E2:C6:7C:E8:62:C9:6F:A2:A9:29:75:73:38:A9:0A:BA:24:60
X509v3 Authority Key Identifier:
keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.83.28.0/23
Signature Algorithm: sha256WithRSAEncryption
85:ca:6f:30:08:5f:04:1d:e8:c5:cd:94:44:4f:83:f2:97:05:
24:b4:b6:fe:5d:54:f4:61:4b:84:41:99:f4:ff:56:19:69:75:
36:0b:94:f9:c3:8f:35:1c:51:61:eb:50:98:2e:23:bf:a0:93:
f5:df:13:f0:6c:a0:b0:d9:b3:bb:e4:5d:e1:59:e8:8e:86:1c:
27:8a:24:2d:1f:b1:04:00:08:d0:4b:d7:9b:80:56:0c:e1:2b:
ba:35:bf:ed:5d:11:0e:87:f7:6b:49:b4:c1:af:c9:ab:9e:fe:
79:f2:2e:61:d5:1e:ca:ea:f0:dc:c6:ff:a2:95:de:eb:13:00:
87:f8:f7:db:68:bc:71:c7:90:23:c6:32:33:da:b3:15:61:f1:
2b:e1:e6:c1:69:e3:a7:a3:57:1b:9f:68:20:38:71:f6:57:5c:
12:ce:41:26:f9:97:c1:21:85:83:72:42:37:51:6f:b3:49:e6:
3a:4e:f7:2a:ac:41:4c:84:4d:da:c8:3b:95:d5:97:95:ec:ce:
db:6a:23:68:6e:4b:03:20:4c:32:59:65:10:a4:e6:bc:ae:cd:
46:9b:1c:dc:63:05:12:b0:e2:18:94:02:e4:d2:08:2f:39:d6:
80:bb:90:f2:49:53:09:36:f0:2f:ba:c3:2a:13:76:a6:dd:03:
7e:02:3f:7a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUHAX/YaM6Rg5mAklj/znjhJ3JP4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG
MjhGODA2NjAeFw0yNTAxMTQwNzE5NTZaFw0yNjAxMTMwNzI0NTZaMDMxMTAvBgNV
BAMTKDEzMTFFMkM2N0NFODYyQzk2RkEyQTkyOTc1NzMzOEE5MEFCQTI0NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbKxU539jmM4hyJKR+xTgctbI
vBIRkfHjcWj1LoEuaJZpW0X9ciqN7fjeb9WCtE9pDpWM4kHZyelZmTcr4dcdriMY
ju0OjGnRYT5v6OOXsoxcGL09lh3ekeDykVuPJWBsVHVnVONNgpLo81T5KiGEiQEl
uyoveYR0MNrHmlveTtSo37MyoT36tXr+KzPWZMU1q+haueTZSrGjWE0QkNt6ixyO
KF+q4ffvdk15i2hq3oAbZctzzV8BiKmJ06tFluuJJYIGeA5LtsRDnqO306C1Bdzu
44XsuNJAluSvMAWSgjaGaUL93c/lRPGM+9USZvfluwcE3vCGbhagP68gw7hFAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUExHixnzoYslvoqkpdXM4qQq6JGAwHwYDVR0j
BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1
MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG
ODA2Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i
ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMzJlMzgzMzJlMzIzODJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLUxwwDQYJKoZIhvcN
AQELBQADggEBAIXKbzAIXwQd6MXNlERPg/KXBSS0tv5dVPRhS4RBmfT/VhlpdTYL
lPnDjzUcUWHrUJguI7+gk/XfE/BsoLDZs7vkXeFZ6I6GHCeKJC0fsQQACNBL15uA
VgzhK7o1v+1dEQ6H92tJtMGvyaue/nnyLmHVHsrq8NzG/6KV3usTAIf499tovHHH
kCPGMjPasxVh8Svh5sFp46ejVxufaCA4cfZXXBLOQSb5l8EhhYNyQjdRb7NJ5jpO
9yqsQUyETdrIO5XVl5XszttqI2huSwMgTDJZZRCk5ryuzUabHNxjBRKw4hiUAuTS
CC851oC7kPJJUwk28C+6wyoTdqbdA34CP3o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:46 2025 by rpki-client