Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e34332e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: YkRyUtc2KD1Ef2RgD8pgBsUuNvCrg7SLY6jCM/uukPs=
Subject key identifier: 31:03:23:CD:74:DB:D4:5D:03:D5:5A:E8:5A:F2:5F:B0:60:BD:F7:E3
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 2F7932F9898D052B00AB3224C9742BB51B3DA391
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa
Signing time: Thu 11 Apr 2024 10:02:02 +0000
ROA not before: Thu 11 Apr 2024 09:57:02 +0000
ROA not after: Thu 10 Apr 2025 10:02:02 +0000
asID: 58487
IP address blocks: 202.10.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:79:32:f9:89:8d:05:2b:00:ab:32:24:c9:74:2b:b5:1b:3d:a3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Apr 11 09:57:02 2024 GMT
Not After : Apr 10 10:02:02 2025 GMT
Subject: CN=310323CD74DBD45D03D55AE85AF25FB060BDF7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:db:18:ad:ee:2d:3b:a9:58:b5:bc:6f:81:
e4:32:ce:0c:30:7b:84:ad:e3:e0:c3:74:2f:c8:ce:
e5:64:9e:f6:cf:cb:cd:28:5c:f6:dd:70:11:32:47:
17:08:6c:57:d1:29:41:66:91:e2:4e:64:3d:70:42:
3c:3c:50:55:3c:f9:d7:b7:c2:e4:be:b7:10:2e:eb:
be:0b:76:54:95:9d:7e:a4:dd:b8:8b:69:41:94:a5:
a4:1f:be:61:a2:99:1a:51:27:61:80:f0:6f:6d:eb:
05:44:79:e9:e9:d3:da:c8:1e:46:28:3b:2a:23:a6:
f8:60:3e:aa:b0:fd:97:76:bb:b7:8e:ed:f9:5b:bf:
93:c4:c1:00:f6:7b:9b:ee:96:87:a6:aa:53:cc:54:
18:7a:4a:b2:40:a2:73:ea:5d:22:d2:81:f9:75:0a:
5b:a0:0b:1e:7d:51:74:28:5f:03:25:b5:c1:2e:75:
36:b4:30:a4:83:0c:11:e8:12:b8:1d:58:c2:c4:98:
28:03:a4:f1:59:01:d5:08:f9:f1:16:61:63:3a:e6:
ec:ca:3d:59:8d:72:ab:52:37:99:00:d3:e3:ac:3d:
91:e2:a1:5c:c5:c5:af:d7:8f:81:92:be:5a:da:a8:
bb:f0:5a:36:cf:73:3e:12:de:04:f1:15:02:34:6f:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:03:23:CD:74:DB:D4:5D:03:D5:5A:E8:5A:F2:5F:B0:60:BD:F7:E3
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.43.0/24
Signature Algorithm: sha256WithRSAEncryption
93:44:5e:98:0d:c0:14:ba:a7:2c:fb:32:b6:d1:07:ca:5f:fa:
a7:58:b3:7f:05:c1:17:d0:9f:09:6d:6d:a4:f1:4b:c9:37:c5:
9d:47:c4:f2:00:8b:11:75:f6:88:a8:f8:bb:23:46:2c:2d:3e:
1f:b4:3d:a8:68:b9:2d:85:d9:05:59:9f:0d:1a:f7:af:e8:d2:
4d:03:81:3d:c9:e1:15:52:66:5a:55:e8:cd:7f:1e:7e:31:9d:
88:90:e7:f8:75:1c:2c:a8:20:de:38:ea:6b:6d:17:01:df:7a:
85:ed:b9:1b:e9:8f:e6:bc:41:cd:ae:e8:8a:eb:f2:7c:a7:5a:
2a:75:fa:93:4d:85:01:09:6d:41:50:f4:9d:6f:4b:44:df:05:
ea:fe:5d:c8:ef:87:8c:12:7f:06:88:91:1f:34:28:a4:46:fe:
8b:1e:2e:db:f1:ca:3c:eb:56:53:38:a3:e8:5d:04:05:16:d2:
f0:77:c4:27:81:69:c2:3c:f4:b5:ba:4e:91:dc:76:67:db:44:
75:5d:ee:6b:5b:43:b2:48:3f:5f:4a:4d:65:05:6e:88:cd:38:
13:83:91:84:ec:2c:51:95:05:8d:32:19:cf:50:85:94:3b:a5:
61:77:56:54:09:73:3e:52:4d:e8:1a:83:e2:10:1a:97:c2:65:
47:90:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:57 2025 by rpki-client