Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e34352e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: esVyrU535rmhYhnc7b4ddPvC1VCQH+vZ4Tj5OxpVk38=
Subject key identifier: 06:C0:7D:E4:68:00:DA:3A:8A:B0:06:45:88:7F:BC:C9:E9:AA:83:BE
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 2C653F003403352F4E91678EC5D076E65B8DD113
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa
Signing time: Thu 11 Apr 2024 10:02:03 +0000
ROA not before: Thu 11 Apr 2024 09:57:03 +0000
ROA not after: Thu 10 Apr 2025 10:02:03 +0000
asID: 58487
IP address blocks: 202.10.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:65:3f:00:34:03:35:2f:4e:91:67:8e:c5:d0:76:e6:5b:8d:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Apr 11 09:57:03 2024 GMT
Not After : Apr 10 10:02:03 2025 GMT
Subject: CN=06C07DE46800DA3A8AB00645887FBCC9E9AA83BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:33:21:77:2b:f3:77:f0:e8:bc:c5:eb:27:
3a:0f:a1:94:0c:68:23:71:f1:27:af:8e:81:8c:20:
51:04:97:6c:c4:06:ef:9e:9e:8a:6b:93:49:92:c3:
ec:34:cf:1a:ab:8c:44:c9:86:e9:43:d9:9b:e2:ee:
e9:8c:9b:3b:15:23:63:fe:3b:c9:bb:35:0e:ff:1c:
7e:f4:87:c5:ef:5d:d6:b5:d6:44:6f:ce:51:66:4d:
ca:01:a5:af:c0:0f:e1:64:96:a9:e6:61:7f:c2:08:
1e:94:7b:45:6a:52:32:cb:9d:8d:85:12:6a:f3:a5:
54:ff:87:21:18:94:75:da:d9:ee:ce:8c:85:f6:6b:
75:61:53:3b:b4:67:2e:61:2d:c6:0c:0e:b4:95:76:
f5:63:69:4f:3a:48:52:54:29:e8:e7:c9:0a:3f:a6:
40:32:8f:61:c0:46:d7:b0:1c:8d:fd:60:5a:25:23:
29:56:9e:8c:4e:fa:a7:35:e7:36:53:f9:6a:35:f6:
15:55:3d:d0:7c:12:59:e5:82:a2:bf:26:04:bd:be:
c2:e8:4e:cd:4a:5e:c4:52:99:b0:64:02:79:eb:da:
4d:94:fc:83:90:14:fe:86:b0:ca:13:af:94:fc:c8:
f9:c5:02:c2:ff:e0:be:97:16:6f:99:67:a7:52:43:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C0:7D:E4:68:00:DA:3A:8A:B0:06:45:88:7F:BC:C9:E9:AA:83:BE
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.45.0/24
Signature Algorithm: sha256WithRSAEncryption
77:49:80:41:c7:73:a2:3c:27:41:15:ac:a6:d1:b3:5e:2a:10:
55:33:bb:6d:64:a5:2b:32:db:c6:9f:2c:ec:ed:5c:60:96:f2:
75:f1:7a:5a:bd:b1:8f:b7:25:11:b5:c4:d9:c6:d4:0f:04:b4:
2a:68:56:ee:37:21:cd:b6:ca:65:be:b2:5e:13:d0:6c:45:0d:
bc:74:d0:75:9d:c8:f6:43:b1:e7:09:6d:3a:19:64:0f:98:9f:
40:3a:6a:1d:b5:0b:fe:b6:36:af:a5:1c:2a:45:57:cf:60:50:
e1:41:d6:20:21:da:98:d6:0d:c6:69:76:4e:50:ef:8c:d8:dd:
a0:b8:a5:0a:56:d9:3d:87:40:d0:43:21:2e:cf:20:81:5c:8a:
e7:ea:ea:5a:5d:5a:b8:00:2a:77:57:87:ab:fb:99:dc:33:4a:
40:7e:8b:1f:d2:b8:1d:8e:6e:8b:78:b8:03:79:9a:8d:6a:4e:
da:32:13:2b:48:62:24:de:72:38:4a:b7:97:50:95:3c:fc:7f:
ba:14:65:63:bc:18:37:0e:d0:7a:4b:60:74:df:20:3b:d9:54:
03:a7:35:01:56:7b:f4:3b:c7:00:ee:a3:4e:57:8b:c5:c9:f2:
98:b0:c2:e5:bd:e2:e3:48:90:7a:ca:87:26:17:f9:d2:8a:f1:
25:8a:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:56 2025 by rpki-client