Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e34322e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: 1jAQ+aiv0TmEjLjx4exRddNvXc3fsBwTCafIwz/oaXI=
Subject key identifier: DF:25:B1:28:B8:65:BF:76:E9:3A:81:BA:96:7A:4F:15:E0:E4:FB:39
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 5548BB0176BA78DCFB03780D7B07A01DB806ABA5
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32342d3234203d3e203538343837.roa
Signing time: Thu 11 Apr 2024 10:02:03 +0000
ROA not before: Thu 11 Apr 2024 09:57:03 +0000
ROA not after: Thu 10 Apr 2025 10:02:03 +0000
asID: 58487
IP address blocks: 202.10.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:48:bb:01:76:ba:78:dc:fb:03:78:0d:7b:07:a0:1d:b8:06:ab:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Apr 11 09:57:03 2024 GMT
Not After : Apr 10 10:02:03 2025 GMT
Subject: CN=DF25B128B865BF76E93A81BA967A4F15E0E4FB39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:77:28:87:a0:16:fc:4d:e5:d9:c1:5e:aa:
7f:f7:a6:e0:37:b7:0d:41:60:84:a0:4f:00:41:fb:
72:ac:4d:a9:ea:9b:92:5b:b6:40:17:af:f7:4c:ba:
4a:1e:55:e5:01:25:92:53:98:6b:b4:c3:41:97:4e:
c3:10:a8:04:7d:c5:4c:ce:82:b9:16:12:5f:a8:00:
fd:f5:54:05:26:e8:db:ed:51:b3:7d:53:20:32:ee:
3f:e2:bc:b5:79:9d:91:f1:80:2e:fb:de:21:fa:82:
1a:2f:a7:b3:af:34:ce:7a:80:d0:ec:c3:34:2b:30:
9d:92:9a:fe:d4:3f:fc:28:aa:b6:14:7a:a2:26:4a:
94:24:a8:68:89:e7:05:76:81:ee:0f:66:0a:75:ba:
e1:47:5d:0e:66:08:99:8e:5f:f7:07:12:ed:f3:ef:
93:dd:e7:17:e1:bf:ca:72:4c:a1:51:0d:f2:76:4a:
6d:c2:d1:a1:68:de:97:e6:64:83:7b:5a:54:67:0f:
28:1c:9d:3d:c5:95:45:20:b6:44:da:be:b3:5a:4f:
80:05:3c:4f:2e:a3:68:06:9a:ab:0b:1e:ea:25:5d:
ed:4f:bd:e9:84:f5:9c:bb:ac:e3:f3:d1:01:c4:86:
47:52:cf:69:a0:2e:a8:34:5e:86:05:4a:cf:45:4d:
b4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:25:B1:28:B8:65:BF:76:E9:3A:81:BA:96:7A:4F:15:E0:E4:FB:39
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.42.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2c:10:c3:c2:78:4f:90:77:ac:81:86:fa:3b:e3:f6:d8:d9:
5f:6b:10:8e:3e:28:82:1a:88:13:aa:17:09:c2:bd:b4:b9:9e:
bc:59:82:d1:9e:e1:59:ad:f9:6e:08:e0:e5:5e:fa:b9:73:9c:
33:ca:ea:f4:f9:39:0a:d0:93:3a:73:47:4e:04:aa:6b:6c:56:
82:26:06:95:2f:f6:c5:8e:dc:48:a6:40:47:e5:8b:12:69:1e:
52:4a:44:ea:79:42:fb:47:04:a9:56:24:a2:54:70:e5:57:9d:
85:ae:cc:fe:49:3a:87:f3:6e:00:a9:99:6c:9a:83:71:22:ab:
88:e2:1b:b3:6f:c2:e0:a2:70:d6:48:a2:df:34:01:83:41:20:
c9:f1:3c:a6:6f:fd:7d:f4:ab:8f:f3:39:ef:97:6c:8c:48:92:
20:46:9c:ae:42:fe:6c:9e:0d:71:be:bb:fb:ee:b7:33:9d:fb:
0e:22:e8:a7:7c:4e:ba:93:e2:61:18:1f:9d:ab:4f:a8:30:d9:
43:6c:72:54:ab:19:a4:24:c4:fa:e1:a5:f1:3b:6d:34:a8:eb:
76:7e:2f:27:09:1b:12:1f:fa:9c:2c:1b:dc:8d:b8:c3:9e:91:
b1:86:f7:c3:23:b2:82:92:83:12:c1:a5:d3:64:60:32:30:06:
db:d0:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:55 2025 by rpki-client