Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32342d3234203d3e203436303631.roa
File: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (raw, json)
Hash identifier: bxs7h997RIiZF6c39aYCG2w95CeY51sHbMaUnM9gLUg=
Subject key identifier: 6A:C3:83:D6:B2:79:D6:4E:5F:2C:FD:4A:5A:30:8A:B0:EB:F6:8C:F7
Certificate issuer: /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial: 1BC234F6CDCEFA7817297179B4FFBCCFAF85A2B2
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32342d3234203d3e203436303631.roa
Signing time: Wed 02 Oct 2024 15:00:03 +0000
ROA not before: Wed 02 Oct 2024 14:55:03 +0000
ROA not after: Wed 01 Oct 2025 15:00:03 +0000
asID: 46061
IP address blocks: 202.52.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c2:34:f6:cd:ce:fa:78:17:29:71:79:b4:ff:bc:cf:af:85:a2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
Validity
Not Before: Oct 2 14:55:03 2024 GMT
Not After : Oct 1 15:00:03 2025 GMT
Subject: CN=6AC383D6B279D64E5F2CFD4A5A308AB0EBF68CF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:4b:7f:1c:5a:fd:db:f1:35:30:f7:6e:dc:
0f:87:e0:31:a4:97:f0:c5:22:f2:e2:11:fe:2e:3c:
af:2f:29:5e:b3:a7:13:02:d3:1a:07:7d:15:61:0a:
6e:b4:a6:68:14:79:b9:dd:6e:4f:3d:ee:ed:41:37:
c7:1b:14:f2:87:0c:c9:15:49:80:42:72:b2:4c:71:
d6:1e:cc:40:2d:09:66:7f:fe:5a:5a:04:d8:a6:9b:
19:a3:48:a6:e1:76:4f:48:a8:de:40:22:45:e8:1e:
24:21:9c:55:76:c5:5b:cd:c9:f3:df:96:82:a2:ab:
ec:96:84:61:9d:e3:4a:0e:fd:29:01:b8:db:29:85:
60:53:da:99:c5:8a:03:11:8d:2f:5b:72:cf:31:60:
3b:0b:48:44:95:f8:22:a2:59:67:03:7d:d4:89:36:
c1:be:94:88:c9:8e:29:48:fd:b1:b5:ba:ef:94:f0:
d3:ea:18:0b:58:6c:f0:8e:45:0e:ba:48:47:b2:3e:
ab:a5:b3:cd:49:4d:aa:c6:c3:5e:91:d0:1a:ef:e4:
54:0d:77:d6:fa:2e:56:41:69:4d:2e:e2:7e:37:88:
19:02:70:4a:ef:bc:81:5a:2a:c4:5a:b9:06:82:49:
9c:9d:02:a8:ac:ff:eb:60:41:6d:34:5d:8a:91:0c:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:83:D6:B2:79:D6:4E:5F:2C:FD:4A:5A:30:8A:B0:EB:F6:8C:F7
X509v3 Authority Key Identifier:
keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32342d3234203d3e203436303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.52.140.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f4:4a:b0:e1:e2:c1:9f:ba:8c:d6:ae:25:80:51:9d:7a:28:
c6:b6:de:78:e3:96:f1:dc:40:30:4e:41:e2:3d:6d:17:2e:42:
c5:7f:d2:6b:99:cf:0e:ac:bf:9a:67:70:8c:98:fa:a5:fb:ac:
16:a1:b0:06:65:cb:66:eb:8c:da:a0:5c:68:8f:d2:7b:8c:ac:
40:93:a9:cd:ee:75:6e:cc:65:2d:7d:32:da:68:7e:e3:c2:7c:
97:a3:c0:7d:6e:a8:9a:91:bd:d9:51:4b:26:a5:f8:a8:4c:13:
30:1d:82:cb:a1:63:58:d2:b0:db:cb:a6:db:da:0f:1f:fc:d2:
e7:fa:88:ef:82:14:47:21:40:d8:34:7c:f4:df:a5:6c:0b:58:
10:15:aa:41:f3:47:44:35:02:38:c7:f0:b2:5a:93:63:ed:8d:
b7:7f:bc:9e:76:ed:54:ff:8a:dd:b4:71:9e:70:8a:a1:84:24:
3d:93:0d:a2:bb:89:59:c9:c9:0a:23:82:de:f5:dd:ac:8b:d3:
2e:54:64:e7:ac:35:46:00:12:0c:5c:48:59:e3:e1:95:ad:37:
4b:1e:28:17:67:5d:09:6b:57:b9:39:8e:a0:7c:4d:75:90:d7:
44:09:d7:28:77:d9:e1:dc:19:04:1a:d5:0c:f3:a4:02:74:44:
20:53:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:20 2025 by rpki-client