Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa
File: 3230322e3134352e382e302f32312d3234203d3e203535363835.roa (raw, json)
Hash identifier: wIP2BKu07tWGNIX7AcLczGYizsqjkslJD62OJXPd7Qw=
Subject key identifier: 4D:FB:65:A1:70:BB:3B:A3:84:52:A7:2E:57:51:84:B7:B9:F3:1A:22
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 6F9140F03418ED539EB1477C4FE93605DF1A398A
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa
Signing time: Mon 01 Jul 2024 01:05:49 +0000
ROA not before: Mon 01 Jul 2024 01:00:49 +0000
ROA not after: Mon 30 Jun 2025 01:05:49 +0000
asID: 55685
IP address blocks: 202.145.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:91:40:f0:34:18:ed:53:9e:b1:47:7c:4f:e9:36:05:df:1a:39:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Jul 1 01:00:49 2024 GMT
Not After : Jun 30 01:05:49 2025 GMT
Subject: CN=4DFB65A170BB3BA38452A72E575184B7B9F31A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:d6:c9:2d:a3:f3:7c:3e:39:06:85:1b:c8:
fb:5f:30:29:21:3b:e2:01:e0:d8:a8:eb:ba:1c:fe:
90:8f:ad:a6:aa:f2:a2:61:bd:83:2c:c6:9f:4c:b0:
76:e2:5c:a6:47:0d:f2:46:a0:c9:a8:c6:a4:e8:09:
3b:4c:21:df:2d:32:4e:7b:f1:72:12:00:1d:fa:0a:
c6:5d:ad:83:2e:38:94:65:2b:6b:2e:b1:cf:c0:4d:
1e:5b:a6:c4:da:86:8e:c6:27:c7:6b:7c:6b:9b:85:
0b:c4:52:24:fc:72:a2:4f:c5:76:b2:5b:64:81:a0:
6d:ae:bb:e4:76:b5:8d:83:a8:aa:9b:83:63:92:ab:
ef:88:dc:37:8d:82:4e:ed:5a:6c:38:38:85:15:7a:
ca:2e:a3:c2:fa:35:50:c1:23:89:b0:a6:4b:41:ec:
c9:e4:30:1e:35:4d:70:ba:7a:44:77:52:e6:ae:6f:
50:2c:4a:80:d6:f7:7c:6a:91:7e:2d:0a:36:f1:a0:
45:bb:11:b3:7c:77:f3:e8:81:86:e2:80:b2:2a:5f:
0a:a2:2f:4a:c6:8c:e3:3c:3d:44:0a:69:55:1a:98:
ab:f3:6a:9a:c8:e1:02:c1:f2:48:e9:cb:d1:f1:1e:
5c:4f:a1:b6:67:dc:91:ec:e2:46:ce:22:74:73:02:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:65:A1:70:BB:3B:A3:84:52:A7:2E:57:51:84:B7:B9:F3:1A:22
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.145.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:9d:97:5f:72:3e:c7:4c:c7:78:3c:27:5e:b9:0f:9c:08:70:
13:fd:d1:19:3d:21:da:c4:0a:64:9e:3f:34:77:8e:f9:59:28:
24:77:13:7a:44:01:13:00:dc:c6:bc:b4:34:a0:e5:bd:96:95:
15:ed:03:b4:c5:93:37:e2:82:2b:64:f1:e3:75:1c:85:28:b5:
91:73:4d:28:65:36:7e:b9:6a:98:07:80:aa:1c:5c:8e:11:41:
c5:9b:7f:d9:d2:5c:5b:f2:d8:79:3b:69:50:4a:9a:20:7f:67:
be:37:66:0e:d9:66:f8:e7:22:b6:e5:0e:82:99:6c:42:54:fa:
e4:08:fc:69:70:66:26:5c:17:4f:76:1d:33:4e:8d:2c:ed:84:
87:8e:6d:4d:e2:81:28:48:d2:2d:3e:5c:d6:7c:68:ce:4b:7c:
2a:ab:e6:63:03:01:9a:48:c9:fc:01:31:2e:3e:c9:84:cb:36:
81:a2:95:ab:18:f0:7a:1f:e8:e1:64:37:41:ac:47:8a:96:64:
98:7a:95:13:f9:2c:8d:07:e9:d7:eb:42:52:0c:b6:3b:6b:5c:
95:6b:f8:e1:92:d9:d3:29:73:10:d2:44:1b:11:ee:a9:44:02:
68:f8:3e:e5:c3:07:7a:0d:5e:83:62:37:9f:38:5d:d1:0d:58:
04:e5:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:54 2025 by rpki-client