Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa
File: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: etaBPciFEwBhaJvis2tVUGBI+EfK6LR3Mmz7DfvWUkY=
Subject key identifier: A4:88:C2:55:D2:ED:B0:A3:8A:2B:DE:A8:6C:FF:85:DF:43:60:24:98
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 578BAB2709220B2FE0B8E0FCA510FE41FC1F0477
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa
Signing time: Wed 24 Apr 2024 06:00:02 +0000
ROA not before: Wed 24 Apr 2024 05:55:02 +0000
ROA not after: Wed 23 Apr 2025 06:00:02 +0000
asID: 201341
IP address blocks: 202.51.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:8b:ab:27:09:22:0b:2f:e0:b8:e0:fc:a5:10:fe:41:fc:1f:04:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Apr 24 05:55:02 2024 GMT
Not After : Apr 23 06:00:02 2025 GMT
Subject: CN=A488C255D2EDB0A38A2BDEA86CFF85DF43602498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:99:1f:e0:d4:fc:94:e7:54:23:10:50:5c:
66:80:6b:d0:a2:03:c4:1f:5d:29:ea:21:c3:07:23:
88:ee:37:94:95:ad:58:65:1f:d2:e1:60:22:9d:5b:
8e:db:5b:62:f5:2c:d3:d2:88:63:be:41:84:d3:23:
32:89:f1:71:7b:1e:95:cf:fd:4d:02:4e:8b:53:5a:
cd:f7:74:5b:d6:5a:59:af:f5:3d:4b:fe:25:64:35:
b9:34:50:d1:0d:72:f3:fc:c4:8f:13:14:97:ac:66:
45:ae:88:22:72:20:4f:11:d9:ac:91:99:d2:0d:bd:
7c:9c:88:6d:1f:20:ff:c6:1a:92:a0:6b:f8:a3:67:
90:e4:ac:83:56:79:4e:d1:32:85:cf:50:bf:1e:94:
93:2b:70:47:3a:fc:b2:34:8d:87:55:56:31:cc:24:
a3:72:04:d0:eb:00:34:4c:f7:c1:0a:ba:8b:cc:37:
38:61:7c:bd:b6:49:b9:ae:83:8f:69:fd:4e:60:7f:
3b:02:46:cc:30:b9:c6:1f:d6:12:45:ed:cf:4f:12:
7f:ef:e1:af:ae:0b:65:7a:22:92:60:e8:ca:53:24:
fc:f3:75:ae:45:9a:49:ad:8b:6e:c5:69:b0:7e:92:
21:da:f6:89:07:3c:be:10:4a:8a:21:8a:09:a5:85:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:C2:55:D2:ED:B0:A3:8A:2B:DE:A8:6C:FF:85:DF:43:60:24:98
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.60.0/22
Signature Algorithm: sha256WithRSAEncryption
68:aa:dd:96:15:8c:b8:af:4a:9c:98:05:7a:51:3f:36:13:a8:
11:4b:36:47:ff:29:67:b6:c6:aa:02:69:ec:04:e1:d5:ba:17:
93:67:b7:49:f5:2b:a1:8e:78:8d:e1:3e:3f:be:01:67:dd:d8:
7d:51:08:9c:80:38:11:c2:ed:ad:01:52:76:b3:2c:58:e0:61:
77:c0:d0:ec:bd:be:ab:40:54:16:9b:e2:a1:ea:d9:54:9e:63:
e3:16:66:f4:ab:12:68:57:ab:13:a3:25:fa:90:73:63:7c:bc:
0c:9e:58:2c:8e:bc:f2:2b:35:2f:57:9b:fe:96:33:e3:81:c9:
3c:e5:39:e6:ff:8a:66:b9:42:87:61:a6:2b:e2:41:89:91:70:
0b:52:9f:36:75:9f:b7:da:a3:71:ac:9d:f5:04:c6:fb:90:0b:
8b:3e:81:80:19:46:71:a0:01:4f:dc:91:a1:4d:fe:97:4b:af:
54:0e:45:d0:51:26:48:b5:46:dc:ec:59:52:4a:44:2b:f3:c3:
89:34:3f:56:b1:f0:ce:5b:63:a3:10:2e:86:39:99:d8:14:30:
0d:0c:d2:f0:6b:e6:32:3a:29:ce:66:23:fb:08:ea:5c:ea:7d:
bd:05:e5:db:a2:be:db:02:bd:6a:7d:99:2e:43:6e:cd:5a:0b:
14:6b:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:39 2025 by rpki-client