Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e34302e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: 3vQ3zMiMSMYMMp0i+xtOvu0Yx5WNBvRsYKdyI3BSbMk=
Subject key identifier: 0B:3F:60:AD:EC:3A:CC:59:23:CD:91:84:17:E6:E7:FF:B2:8E:0B:C7
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 407CA5CEB067BAC8C16AFD22B108BB628D26A698
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32342d3234203d3e203538343837.roa
Signing time: Thu 11 Apr 2024 10:02:02 +0000
ROA not before: Thu 11 Apr 2024 09:57:02 +0000
ROA not after: Thu 10 Apr 2025 10:02:02 +0000
asID: 58487
IP address blocks: 202.10.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:7c:a5:ce:b0:67:ba:c8:c1:6a:fd:22:b1:08:bb:62:8d:26:a6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Apr 11 09:57:02 2024 GMT
Not After : Apr 10 10:02:02 2025 GMT
Subject: CN=0B3F60ADEC3ACC5923CD918417E6E7FFB28E0BC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:f2:6b:82:a9:6b:fb:0e:64:79:eb:cb:25:
a9:77:d6:5b:a7:ac:42:79:34:5b:ac:57:13:8e:af:
51:77:93:b0:1d:fe:50:57:ea:b4:00:e7:b7:63:96:
34:20:8f:38:ff:7b:c3:c5:08:61:c3:4c:79:8d:61:
81:d7:e8:ff:32:a8:12:84:0c:69:14:9e:22:36:de:
a4:63:e7:f3:27:50:83:c1:50:b7:1c:08:0a:9d:f4:
9f:c5:aa:cd:b6:e2:48:a7:09:8f:2d:dd:c9:a6:57:
f4:76:fa:50:a6:f0:5a:92:a8:df:4d:c9:2f:c9:05:
9b:22:42:40:f8:df:f7:eb:54:98:71:38:56:dc:be:
b8:f7:ee:50:cc:84:4c:11:8c:ab:a5:a9:4f:21:74:
2e:7f:18:b0:e0:ba:52:8c:2d:9f:c6:78:9d:6d:84:
69:8b:74:2c:48:6f:52:d6:71:1b:59:4d:7e:52:db:
e6:46:38:44:3f:ed:ac:b9:e0:8d:33:71:ee:94:a1:
a5:98:e7:ac:8d:31:1d:25:45:38:dc:04:3d:b0:59:
a0:0a:0d:82:28:45:0c:9b:86:61:1e:20:eb:5a:b7:
84:ce:8a:36:58:73:5b:21:1b:48:9c:25:24:cb:2f:
08:c8:9c:16:bd:dc:2b:39:f8:28:e8:03:30:3e:69:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3F:60:AD:EC:3A:CC:59:23:CD:91:84:17:E6:E7:FF:B2:8E:0B:C7
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.40.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:93:fe:9c:93:ed:05:f2:f5:cd:1f:b8:cf:76:0f:61:7d:f4:
82:a8:b8:b5:8a:33:a6:29:5d:f6:46:bc:06:72:be:e2:5e:b9:
b7:74:83:38:a2:05:0c:99:8a:5a:ea:13:fc:0c:da:f1:8b:48:
1c:30:3c:4d:d9:57:a4:df:9d:56:8e:46:70:97:ef:2f:cd:03:
64:0d:42:3b:09:28:27:d6:a8:97:76:6e:e1:2a:50:5e:be:c5:
2f:13:77:72:87:2b:c0:15:3b:04:f0:a5:c7:5e:84:a2:ca:c1:
24:72:b7:97:03:3f:c3:93:27:8b:6f:07:96:12:47:02:18:e0:
3f:f5:b5:60:e0:64:62:20:9f:c9:2f:3f:31:2a:18:ab:b7:78:
9c:b0:f5:32:2c:81:ac:c9:43:16:90:f9:71:6c:84:66:83:f1:
36:84:20:c3:4f:ca:af:5c:c6:68:5a:c9:e1:c2:0f:49:c2:15:
1c:67:e3:b1:6e:14:b0:df:e9:0c:22:83:96:52:2b:a5:fe:a9:
a4:15:5d:97:35:ea:ec:b7:a9:94:c7:3c:b7:18:a1:32:68:eb:
9c:60:8d:7e:5a:f7:13:2b:ee:19:85:4d:a8:6d:d7:27:5f:58:
2e:09:5b:ce:fc:74:bd:cd:84:64:6a:ad:5c:40:1a:9a:a1:2c:
1b:ee:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:56 2025 by rpki-client