Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e33372e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: RRlgM5GZuht/nGE/+DFzjaHPD8bIMvuiP77rIoFiVw4=
Subject key identifier: F2:AE:2F:CF:6C:50:C0:56:D4:82:17:8E:98:81:07:E7:9B:83:CE:D1
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 6106EC9C45BF856C47DF7F5477569FE7F0AACB83
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa
Signing time: Thu 11 Apr 2024 10:02:02 +0000
ROA not before: Thu 11 Apr 2024 09:57:02 +0000
ROA not after: Thu 10 Apr 2025 10:02:02 +0000
asID: 58487
IP address blocks: 202.10.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:06:ec:9c:45:bf:85:6c:47:df:7f:54:77:56:9f:e7:f0:aa:cb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Apr 11 09:57:02 2024 GMT
Not After : Apr 10 10:02:02 2025 GMT
Subject: CN=F2AE2FCF6C50C056D482178E988107E79B83CED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:21:39:be:d8:3e:1c:a6:f0:d8:14:05:ab:
e2:49:07:bf:7f:2f:a2:b3:01:40:0c:55:e7:0e:30:
5a:84:32:b9:28:e4:29:2b:9d:26:c7:9f:fa:df:f9:
41:78:4a:73:0a:d0:2c:bf:45:23:54:c8:64:06:09:
74:19:bc:de:b9:b9:40:82:9f:f4:28:7c:9a:cf:7d:
08:f5:44:2a:bf:1f:b5:c6:8f:82:1d:c1:4a:f6:52:
66:80:3b:cd:f6:0c:b8:cd:3a:44:03:81:de:89:84:
f0:b8:c4:55:18:1f:47:da:92:89:f4:66:1a:40:8b:
33:1d:d9:b6:fe:b5:63:7f:9c:33:95:d3:61:7d:c2:
f3:5c:28:84:b1:98:d9:49:0d:53:4b:45:f1:60:ce:
92:ab:58:12:7a:75:3a:00:c3:13:5c:de:d4:7a:9c:
ed:01:6d:66:08:22:35:f8:7c:20:5d:29:0e:ee:82:
63:ad:bf:d6:15:24:c0:6e:ad:aa:09:37:ac:0a:47:
6e:94:a3:d7:a8:26:59:19:04:f2:d5:93:19:64:70:
d8:31:53:e9:d6:ff:8d:cb:1e:78:e1:7e:e1:92:df:
c4:23:0b:b3:87:49:da:8b:df:76:e4:94:8a:da:47:
f8:85:cc:33:ac:6b:a6:67:c1:60:0d:16:4c:00:a2:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:2F:CF:6C:50:C0:56:D4:82:17:8E:98:81:07:E7:9B:83:CE:D1
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f2:f6:94:2a:50:5e:95:36:3d:a6:5e:e8:31:2a:ba:79:03:
e5:c6:d6:b8:90:64:54:31:70:83:fb:1c:c3:6e:59:c8:ac:18:
ad:09:47:72:a3:96:bb:d8:3c:1c:3f:c1:d0:bd:0f:23:2e:8b:
2d:ea:34:ec:0f:3e:5e:83:3f:3b:53:a8:cd:a4:b7:bd:99:61:
79:2b:71:b9:8a:b7:c5:1b:c3:5e:b8:90:8d:38:24:f8:bb:aa:
34:cf:69:a6:b7:81:3d:20:c8:59:16:ec:97:c1:42:82:b4:af:
49:9f:5e:71:fc:2e:10:1c:f6:df:47:b1:d7:01:47:df:5e:0a:
fe:49:95:93:c3:fe:95:04:fd:36:7d:06:8d:34:c0:46:0a:36:
f4:10:3f:e7:5c:b0:df:f8:12:4c:ea:20:73:e5:78:99:cd:47:
e9:00:fc:22:30:23:cc:b5:d5:41:4a:33:93:16:53:21:1f:11:
b5:df:22:cd:7e:29:d2:63:8b:ae:b9:a4:02:6b:62:a3:bd:81:
bb:31:42:99:6b:67:f3:07:cf:69:f7:14:6c:30:c7:23:db:86:
04:c5:b3:83:07:f0:a9:0c:be:80:d7:d8:2c:05:a1:90:fc:1a:
4d:7a:67:4e:a7:ec:fa:39:b4:a6:fe:86:03:fe:69:83:06:9b:
6f:3f:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:57 2025 by rpki-client