Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32332d3233203d3e203538343837.roa
File: 3230322e31302e34342e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier: fjZuZkbwwuSw+kk/lRAcYHZefnoRGhYFK1bTK+DnngI=
Subject key identifier: C0:EA:EF:21:0E:00:D7:5B:DD:A4:B5:BA:EF:53:F3:11:B8:BD:12:F9
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 77419DA81E13B003D7556CE22C2B1EC86B175493
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32332d3233203d3e203538343837.roa
Signing time: Thu 11 Apr 2024 10:02:02 +0000
ROA not before: Thu 11 Apr 2024 09:57:02 +0000
ROA not after: Thu 10 Apr 2025 10:02:02 +0000
asID: 58487
IP address blocks: 202.10.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:41:9d:a8:1e:13:b0:03:d7:55:6c:e2:2c:2b:1e:c8:6b:17:54:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Apr 11 09:57:02 2024 GMT
Not After : Apr 10 10:02:02 2025 GMT
Subject: CN=C0EAEF210E00D75BDDA4B5BAEF53F311B8BD12F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:9f:8e:5d:4f:e2:26:ac:81:d9:20:2d:ae:
d8:9d:48:b4:c4:7f:5d:e0:a5:f5:f4:ce:17:e5:f7:
8b:e3:a2:5b:07:cb:0e:de:e1:ea:b4:01:6d:4d:b0:
5f:8b:f1:40:c1:99:0f:83:8e:7c:8a:2e:14:bb:20:
6f:01:bf:1f:82:f5:0a:a0:bb:b3:84:fb:7d:3a:47:
91:65:f8:dc:e8:ff:9e:53:66:4a:32:6d:93:24:78:
0c:a8:a7:e2:eb:a3:ac:2b:d3:13:2f:37:09:a8:a0:
aa:6e:be:20:ed:c4:85:60:c4:7c:bb:d0:c9:7c:03:
df:80:a9:a4:8c:64:b2:78:71:c1:99:fc:d9:99:4e:
85:e8:18:fc:06:0f:36:18:f3:40:37:7a:c2:0c:31:
c9:aa:a7:43:29:89:9c:f9:16:63:df:9e:11:ed:24:
cf:c6:62:83:70:87:97:d8:89:68:17:0b:48:a6:78:
38:31:58:60:36:d2:e8:1e:ab:1c:68:16:49:3e:5c:
35:9a:10:9d:b3:83:55:6d:61:2d:80:b3:b8:6b:55:
5a:6d:aa:4a:7c:e6:da:6b:18:e8:ba:45:f3:64:6b:
51:27:7f:cb:60:11:8c:61:39:70:0d:7d:2e:da:88:
fb:19:14:3b:04:51:b3:2c:a2:4a:87:65:40:60:b6:
77:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EA:EF:21:0E:00:D7:5B:DD:A4:B5:BA:EF:53:F3:11:B8:BD:12:F9
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32332d3233203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:2b:9e:76:7f:0d:1c:b9:34:4e:4d:5b:88:a1:7a:1d:29:49:
b2:2f:2c:23:63:b1:17:94:37:14:6c:95:bf:e2:77:f8:be:03:
9c:0f:34:f2:4c:69:06:e4:5a:23:df:fa:7f:1e:db:41:ec:40:
89:9e:d3:4a:07:2f:6b:66:4a:c8:28:21:b5:35:ea:ca:fe:4a:
3e:7b:80:23:58:fa:1e:ed:3d:a0:f9:c9:71:0f:c1:a8:a0:7c:
21:2a:8a:18:de:a8:b7:bb:e0:1c:fe:40:d7:bd:d2:00:dc:5e:
67:48:57:73:2b:f7:34:20:60:b9:53:6e:f2:b8:47:b8:18:79:
46:42:ad:17:32:a1:b8:42:88:ba:87:dd:38:f1:b3:05:2f:39:
9c:fc:d3:14:7e:5b:7b:5c:1a:15:84:75:9d:1a:00:7e:66:f5:
41:da:8d:fa:c4:5e:d9:04:e6:00:1b:51:e5:fd:42:14:16:50:
98:47:f2:ce:4b:5e:eb:6c:2a:e5:80:c9:3b:41:c9:f3:c3:ce:
55:f9:fe:29:c9:06:b4:37:e7:9f:23:71:ac:8d:f4:9b:d8:a2:
4d:1b:6b:21:92:6e:52:45:5b:f7:9e:f1:ef:c2:06:25:2e:14:
9f:e1:d2:83:d1:1d:6b:7c:bc:3a:f0:23:ab:64:ba:94:73:b4:
b2:4d:c7:7f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUd0GdqB4TsAPXVWziLCseyGsXVJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5
MkFBQkU2RTAeFw0yNDA0MTEwOTU3MDJaFw0yNTA0MTAxMDAyMDJaMDMxMTAvBgNV
BAMTKEMwRUFFRjIxMEUwMEQ3NUJEREE0QjVCQUVGNTNGMzExQjhCRDEyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTp+OXU/iJqyB2SAtrtidSLTE
f13gpfX0zhfl94vjolsHyw7e4eq0AW1NsF+L8UDBmQ+DjnyKLhS7IG8Bvx+C9Qqg
u7OE+306R5Fl+Nzo/55TZkoybZMkeAyop+Lro6wr0xMvNwmooKpuviDtxIVgxHy7
0Ml8A9+AqaSMZLJ4ccGZ/NmZToXoGPwGDzYY80A3esIMMcmqp0MpiZz5FmPfnhHt
JM/GYoNwh5fYiWgXC0imeDgxWGA20ugeqxxoFkk+XDWaEJ2zg1VtYS2As7hrVVpt
qkp85tprGOi6RfNka1Enf8tgEYxhOXANfS7aiPsZFDsEUbMsokqHZUBgtndNAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUwOrvIQ4A11vdpLW671PzEbi9EvkwHwYDVR0j
BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx
NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB
QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05
N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzNDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKCiwwDQYJKoZIhvcN
AQELBQADggEBAIsrnnZ/DRy5NE5NW4iheh0pSbIvLCNjsReUNxRslb/id/i+A5wP
NPJMaQbkWiPf+n8e20HsQIme00oHL2tmSsgoIbU16sr+Sj57gCNY+h7tPaD5yXEP
waigfCEqihjeqLe74Bz+QNe90gDcXmdIV3Mr9zQgYLlTbvK4R7gYeUZCrRcyobhC
iLqH3TjxswUvOZz80xR+W3tcGhWEdZ0aAH5m9UHajfrEXtkE5gAbUeX9QhQWUJhH
8s5LXutsKuWAyTtByfPDzlX5/inJBrQ3558jcayN9JvYok0bayGSblJFW/ee8e/C
BiUuFJ/h0oPRHWt8vDrwI6tkupRztLJNx38=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:56 2025 by rpki-client