Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3230322e34362e3134342e302f32322d3234203d3e203138303536.roa
File: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (raw, json)
Hash identifier: Ldlc7VFQJBTu0wUNSLLhBA2sjvGn3t93qpLaO/2C0Jk=
Subject key identifier: D8:7B:86:6A:03:35:4D:F1:E7:9F:DE:6C:76:EE:4D:AE:42:E6:BD:CD
Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB
Certificate serial: 4D79B18DF426CA8DA237673EC832D1A94A9732AF
Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3230322e34362e3134342e302f32322d3234203d3e203138303536.roa
Signing time: Thu 28 Mar 2024 15:00:00 +0000
ROA not before: Thu 28 Mar 2024 14:55:00 +0000
ROA not after: Thu 27 Mar 2025 15:00:00 +0000
asID: 18056
IP address blocks: 202.46.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:79:b1:8d:f4:26:ca:8d:a2:37:67:3e:c8:32:d1:a9:4a:97:32:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB
Validity
Not Before: Mar 28 14:55:00 2024 GMT
Not After : Mar 27 15:00:00 2025 GMT
Subject: CN=D87B866A03354DF1E79FDE6C76EE4DAE42E6BDCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:0c:17:a5:4c:1e:17:57:1f:50:83:60:3c:
96:8d:61:42:08:13:af:b4:69:42:57:35:82:67:3a:
b7:ec:7f:e2:de:16:a0:c7:73:fd:79:92:5e:0b:1f:
30:04:a1:f8:ba:7d:c3:42:2b:68:80:34:e7:3c:97:
bc:1f:3d:d7:ea:3c:a5:70:72:f0:bb:82:1b:24:73:
e9:bf:38:32:72:79:67:0d:9f:17:65:57:7b:c9:ac:
11:ab:fa:a2:53:20:39:18:c0:cf:0a:6d:b9:24:06:
1a:b4:80:10:22:33:07:78:53:f8:c5:be:c5:84:ea:
87:7d:73:00:f0:30:12:53:11:72:cd:15:44:ca:74:
15:a6:66:d9:92:48:de:7d:6f:1d:c7:9a:2d:a0:1c:
b5:08:bf:54:1c:84:a7:8b:e4:66:c7:3d:9e:f9:9c:
a7:21:7c:1d:a9:a6:28:cf:d4:da:14:d1:25:5d:6f:
65:df:0e:88:5d:29:6e:80:ff:0e:0d:80:73:ec:63:
95:dd:f2:36:09:58:7b:d9:ce:c4:cf:36:d2:f9:6d:
6b:52:6e:e6:b6:02:9d:e2:c7:1b:a6:b7:57:99:61:
5e:7d:40:1a:70:75:41:8f:f4:a7:c5:ed:e3:1a:80:
e7:7e:bb:9b:41:98:7d:76:00:d0:43:57:eb:4b:3c:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:86:6A:03:35:4D:F1:E7:9F:DE:6C:76:EE:4D:AE:42:E6:BD:CD
X509v3 Authority Key Identifier:
keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3230322e34362e3134342e302f32322d3234203d3e203138303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.46.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:fe:cc:cf:95:ed:b8:d6:88:8f:da:cf:65:f4:22:2c:7a:84:
1d:2d:75:4d:72:99:80:d8:5a:aa:05:98:d8:e5:36:04:42:c5:
f9:26:b4:b2:39:e3:c9:17:43:10:ab:4d:0b:7a:b6:b0:35:eb:
6c:a2:0b:da:b9:f2:99:37:01:ea:bc:64:69:48:5d:24:cc:de:
0f:a4:6a:01:94:0a:04:da:21:7d:67:0d:83:fc:24:80:cf:ea:
4d:11:ef:11:df:5a:2c:25:e1:b4:7b:56:e6:c9:69:bb:82:2d:
79:3f:6b:56:87:1b:f4:10:0e:18:72:ba:e4:ab:0c:80:36:bb:
52:01:fb:d9:05:26:09:f3:06:80:b1:ea:05:0c:5b:e9:ff:ad:
0c:2e:60:b5:e3:cb:4e:f4:99:33:25:91:44:a9:ae:9b:7c:e2:
18:a0:cf:6e:d0:43:d3:d3:75:86:1c:31:8b:13:e6:b3:4a:10:
b3:42:2d:37:12:01:38:3d:88:07:f2:7d:df:40:c0:77:c0:44:
29:2b:ee:a1:4a:96:7c:11:08:25:86:8e:cc:ed:ab:3e:ec:75:
7e:45:4f:7d:b0:68:68:4e:c3:8a:2a:93:0a:2e:04:a5:a3:b1:
4d:5f:ac:df:7b:90:9d:ef:5a:65:b1:68:9e:c8:40:ca:fb:7c:
5f:38:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:12 2025 by rpki-client