Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e33392e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: n84+FihYleQMfQDJ1IrxWTQnkNtDMEW/JQDTtsl5Kt4=
Subject key identifier: 8C:ED:71:5D:CB:2A:03:E3:9B:AB:E9:F2:16:5D:5B:20:B1:1C:55:7D
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 1039DF5FE20CAA18B9979166C71CDD36723658E5
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa
Signing time: Thu 11 Apr 2024 10:02:02 +0000
ROA not before: Thu 11 Apr 2024 09:57:02 +0000
ROA not after: Thu 10 Apr 2025 10:02:02 +0000
asID: 58487
IP address blocks: 202.10.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:39:df:5f:e2:0c:aa:18:b9:97:91:66:c7:1c:dd:36:72:36:58:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Apr 11 09:57:02 2024 GMT
Not After : Apr 10 10:02:02 2025 GMT
Subject: CN=8CED715DCB2A03E39BABE9F2165D5B20B11C557D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:54:93:20:97:a5:d1:ba:47:e8:d6:84:f2:
0b:87:62:1e:1f:ad:17:ff:82:45:8d:5c:3f:74:79:
ed:9d:71:e5:42:87:05:a6:dc:ac:d4:c6:82:cf:2c:
39:6a:15:28:60:8f:56:24:0d:40:1f:3e:38:f4:55:
bc:04:9a:48:ca:c8:72:74:43:ed:0e:ce:d0:63:a3:
a3:4d:90:f6:1b:f5:68:94:93:92:a0:e0:89:b2:42:
fe:e7:ae:56:32:3e:76:d5:f4:02:05:70:d0:75:53:
03:e3:51:91:fc:7d:dd:18:22:5c:ae:34:cf:a6:66:
2c:20:10:83:82:c0:31:f0:92:d9:d3:4c:cc:7d:21:
5d:3c:2c:b2:a4:d9:9c:27:a1:21:0a:37:22:ed:46:
d2:cf:d2:4d:cf:6a:0f:1a:50:6c:67:e9:08:4f:f5:
80:e9:51:5e:c7:c1:87:75:0d:35:71:ba:e4:71:03:
6a:63:22:39:a3:62:97:13:17:1d:74:96:a0:d3:b7:
3b:bb:be:17:a5:e8:a4:c3:c5:98:07:0a:42:59:7d:
f4:78:88:ad:81:47:5a:17:c4:2f:78:05:c5:c7:79:
77:ca:cd:be:0b:27:1b:41:4c:9e:62:5b:78:5e:4c:
e7:aa:16:92:58:b1:4d:f9:44:d6:8c:81:bb:04:6e:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:ED:71:5D:CB:2A:03:E3:9B:AB:E9:F2:16:5D:5B:20:B1:1C:55:7D
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.39.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1e:d5:ca:d9:32:02:4b:e7:b3:a5:d5:5a:74:65:7e:c6:af:
ce:0b:c9:fe:38:7c:a5:d0:64:db:5f:d4:f1:c6:73:77:33:8e:
70:c7:2d:99:bf:19:77:3e:5f:45:7e:ce:dd:84:22:45:68:8e:
47:ca:cc:ed:a4:d1:ad:2e:54:f7:52:0c:e5:0d:89:28:15:62:
c5:5a:c7:54:f1:63:22:b1:da:80:e8:40:99:8e:82:f2:95:97:
56:81:16:8f:e9:5a:57:d9:f2:13:57:94:dd:0e:a3:01:ee:56:
29:9d:6c:cb:59:35:a2:2e:43:0a:3f:08:c3:b9:12:1a:b2:88:
1d:31:25:e7:21:73:54:c7:0a:58:95:05:12:c7:b2:9a:99:60:
67:03:ef:24:1f:af:12:0b:a4:d8:17:94:4d:0c:fc:78:0f:95:
73:96:59:cd:1b:7e:48:5b:18:aa:d7:ad:85:5b:15:95:dd:3b:
7b:8d:60:da:da:1a:fa:69:44:12:72:70:89:27:42:01:ff:ad:
87:ef:dc:6a:2b:a8:1e:8c:c2:01:b6:73:2a:eb:f0:ca:99:38:
82:60:ca:29:1f:eb:fc:d9:f8:d4:89:ee:61:3a:bc:5e:f6:8b:
ed:4e:cc:46:87:46:1f:8b:60:18:2d:01:6b:17:a1:ee:ba:31:
64:79:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:55 2025 by rpki-client