Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32332d3233203d3e20323031333431.roa
File: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (raw, json)
Hash identifier: N1py/UmfH5qu4YQZhj2saYLPpWLMYrpOtfBIgfSfLLE=
Subject key identifier: 4D:45:74:62:92:18:93:87:74:6D:FA:D5:58:96:8B:01:B9:4D:F1:CC
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 3FDB6979A4CF748BF72136EA6E16977406214F37
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32332d3233203d3e20323031333431.roa
Signing time: Wed 24 Apr 2024 06:00:02 +0000
ROA not before: Wed 24 Apr 2024 05:55:02 +0000
ROA not after: Wed 23 Apr 2025 06:00:02 +0000
asID: 201341
IP address blocks: 202.51.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:db:69:79:a4:cf:74:8b:f7:21:36:ea:6e:16:97:74:06:21:4f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Apr 24 05:55:02 2024 GMT
Not After : Apr 23 06:00:02 2025 GMT
Subject: CN=4D45746292189387746DFAD558968B01B94DF1CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:a3:c5:be:b7:68:26:6c:81:eb:14:0c:cb:
dc:bc:d3:e3:8b:98:15:3d:a1:9f:64:08:46:4c:e4:
4b:1b:c3:4d:b6:c7:11:28:e6:d9:2b:bf:62:16:b3:
cd:98:2e:e4:35:9f:43:b2:76:ec:97:a7:9c:02:13:
83:40:cf:10:5f:ab:87:61:38:e8:f7:cc:aa:58:47:
c3:ca:a6:3f:66:bd:13:c1:49:d2:aa:31:00:74:88:
91:b1:74:54:5c:20:33:ac:a9:78:d7:3c:d5:47:c1:
42:14:45:8b:b3:58:a6:b8:0a:26:eb:c1:8f:c0:9b:
98:40:10:0c:89:d1:17:c6:38:55:71:9e:08:73:50:
d5:23:7b:67:33:ae:e0:ef:d8:71:2e:16:c1:09:29:
a6:2a:28:40:fc:cf:dd:6c:72:66:88:f9:a6:81:39:
d2:7d:74:b9:11:bb:e4:2f:fc:a9:d0:2d:64:51:a9:
6d:d7:3f:fd:ae:8b:f2:da:68:ff:04:54:22:85:88:
42:fb:a7:89:0d:fb:d6:20:55:84:b6:34:cf:07:ad:
67:71:0d:19:5f:ba:27:f7:92:07:f6:18:91:3a:9d:
d3:71:35:ba:f2:01:a2:fb:b8:a1:17:5d:95:8b:4f:
aa:99:70:a7:fb:11:23:3a:bc:01:a9:f9:09:9c:2b:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:45:74:62:92:18:93:87:74:6D:FA:D5:58:96:8B:01:B9:4D:F1:CC
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32332d3233203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.60.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:19:1d:8a:5d:ac:c3:71:15:09:6f:8b:59:b8:1c:0a:b1:1f:
94:5f:d3:38:38:fc:f2:80:ad:e8:db:55:b1:ae:a8:6f:0b:b8:
e7:44:a4:fb:7d:96:4a:08:cb:0e:38:58:c9:b3:c1:be:33:38:
da:14:4b:8f:96:46:55:4a:a2:aa:12:43:94:88:4e:dd:c6:50:
49:3e:f0:73:f6:87:99:2a:8b:2d:9f:01:04:99:ca:09:10:d6:
6d:ff:91:af:7c:44:a0:28:a9:31:0e:11:7a:9e:f0:7f:68:3e:
22:01:d6:81:20:aa:fe:42:b1:d3:5c:8b:70:16:d2:92:3a:d9:
46:6a:13:89:c6:f2:5d:f8:75:d2:b9:52:fd:9b:7e:0c:1d:92:
98:72:65:6f:eb:a6:20:8f:24:2c:72:19:9d:25:e6:90:f0:4b:
8f:1d:c8:11:95:e3:cc:b9:f3:26:d3:28:49:a7:16:fa:4c:ef:
7b:0a:26:a9:d1:aa:af:be:5f:53:fa:43:75:5e:6c:27:2b:27:
6d:bb:6e:3b:6c:db:35:06:1f:87:b1:67:e1:c9:92:3f:bb:c7:
13:b9:a4:15:c2:05:9c:94:3a:e9:86:7c:47:e1:45:18:a7:24:
4c:77:1c:1e:2d:ac:0e:78:00:1f:2d:56:48:78:8a:38:ef:84:
4b:cf:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:54 2025 by rpki-client