Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36312e302f32342d3234203d3e20323031333431.roa
File: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: bYBSmiXHENZ5+D4aLwRMCseg/Jz198HvpjZSlRQRk/A=
Subject key identifier: C8:82:30:6A:53:3A:2E:37:83:5B:CA:FE:89:94:7F:33:4F:3D:7A:59
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 554BF8010327AE25395E4C73A66055EADAD998F2
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36312e302f32342d3234203d3e20323031333431.roa
Signing time: Wed 24 Apr 2024 06:00:02 +0000
ROA not before: Wed 24 Apr 2024 05:55:02 +0000
ROA not after: Wed 23 Apr 2025 06:00:02 +0000
asID: 201341
IP address blocks: 202.51.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4b:f8:01:03:27:ae:25:39:5e:4c:73:a6:60:55:ea:da:d9:98:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Apr 24 05:55:02 2024 GMT
Not After : Apr 23 06:00:02 2025 GMT
Subject: CN=C882306A533A2E37835BCAFE89947F334F3D7A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:cc:19:7a:f3:aa:02:6b:de:5f:74:ab:60:
a9:3c:55:2c:4c:6a:f0:5e:b5:93:d1:2e:f3:22:3d:
e2:eb:dc:02:a3:74:73:de:a1:ad:f2:92:b9:65:fe:
f2:ff:5e:db:4e:c1:0c:b8:ab:e6:58:cd:7d:b1:a3:
79:ae:aa:49:91:1d:75:21:60:e1:ca:c3:93:87:ef:
33:51:de:d0:46:ec:12:aa:b4:0c:72:0f:aa:b8:3d:
5c:5a:b1:bb:bd:4d:ef:24:d0:d1:a4:2e:57:e2:56:
c1:1b:37:ed:ea:0e:22:3b:76:82:86:86:60:c8:d6:
a1:cd:82:6a:5e:79:f4:01:03:34:fa:8a:f9:71:b1:
92:39:8c:46:72:7a:bf:8c:17:c7:95:62:13:af:e8:
35:5f:a9:6d:78:f2:d8:89:96:a8:fa:34:52:40:d5:
dc:9d:e4:66:59:ef:29:83:5f:3e:5d:00:6c:f4:ea:
06:f1:f0:1c:da:6b:61:dd:e7:40:be:81:8e:2f:d6:
ce:f9:66:62:28:f4:66:d5:4a:d6:23:3e:e8:de:9b:
27:d3:07:ed:59:70:7c:a9:4c:e2:51:e9:ab:b0:18:
7b:e5:58:8e:f0:ca:ec:aa:46:0f:e3:17:40:6c:40:
eb:aa:05:75:0c:79:1f:ea:be:c4:a5:74:ac:b0:aa:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:82:30:6A:53:3A:2E:37:83:5B:CA:FE:89:94:7F:33:4F:3D:7A:59
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36312e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:8c:94:cb:f5:da:56:ac:78:4e:86:df:c8:4d:12:9c:fa:1a:
e1:c4:8a:30:56:cf:2f:dd:61:ff:8d:6a:f6:6c:33:5a:64:03:
c3:27:c0:b1:3e:18:95:0c:15:63:2e:8f:f1:e5:a8:94:4f:6d:
16:f9:9b:6c:2d:8d:ba:6c:33:d5:77:31:83:6c:6e:7a:b3:26:
03:ae:37:3b:cb:f2:b3:96:9d:a7:df:55:d6:83:62:55:0a:74:
88:bc:5e:65:49:fa:15:a4:c7:5f:4b:c1:d0:7b:4b:d7:9a:71:
08:fb:47:0d:f7:63:c7:d4:16:7c:54:8b:50:c2:ec:cb:b7:e1:
9d:c4:db:ee:d9:95:30:f3:fe:d7:65:f9:d6:02:6c:75:3b:41:
79:49:28:31:4e:5f:c4:93:6d:e6:d8:4d:50:87:59:f1:fd:be:
d2:43:e2:bc:4c:dc:11:11:08:de:54:63:36:52:9d:3f:05:6a:
56:78:46:44:73:62:6d:56:b5:6b:71:0f:4b:ce:9a:3e:d3:7a:
88:e9:e7:6d:2a:39:14:51:0f:a9:67:47:47:06:28:c1:d0:0f:
54:44:09:42:cd:d0:82:d9:9c:e8:b8:12:0d:ba:ff:07:47:db:
97:76:51:8f:f1:dc:16:cd:65:92:5d:cc:02:af:68:10:fb:00:
bf:03:e3:59
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVUv4AQMnriU5XkxzpmBV6trZmPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3
QUM2NkE4QzAeFw0yNDA0MjQwNTU1MDJaFw0yNTA0MjMwNjAwMDJaMDMxMTAvBgNV
BAMTKEM4ODIzMDZBNTMzQTJFMzc4MzVCQ0FGRTg5OTQ3RjMzNEYzRDdBNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhkcwZevOqAmveX3SrYKk8VSxM
avBetZPRLvMiPeLr3AKjdHPeoa3ykrll/vL/XttOwQy4q+ZYzX2xo3muqkmRHXUh
YOHKw5OH7zNR3tBG7BKqtAxyD6q4PVxasbu9Te8k0NGkLlfiVsEbN+3qDiI7doKG
hmDI1qHNgmpeefQBAzT6ivlxsZI5jEZyer+MF8eVYhOv6DVfqW148tiJlqj6NFJA
1dyd5GZZ7ymDXz5dAGz06gbx8Bzaa2Hd50C+gY4v1s75ZmIo9GbVStYjPujemyfT
B+1ZcHypTOJR6auwGHvlWI7wyuyqRg/jF0BsQOuqBXUMeR/qvsSldKywqqbnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUyIIwalM6LjeDW8r+iZR/M089elkwHwYDVR0j
BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx
RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2
NkE4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i
ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzYzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMozPTANBgkqhkiG
9w0BAQsFAAOCAQEAuIyUy/XaVqx4TobfyE0SnPoa4cSKMFbPL91h/41q9mwzWmQD
wyfAsT4YlQwVYy6P8eWolE9tFvmbbC2Numwz1Xcxg2xuerMmA643O8vys5adp99V
1oNiVQp0iLxeZUn6FaTHX0vB0HtL15pxCPtHDfdjx9QWfFSLUMLsy7fhncTb7tmV
MPP+12X51gJsdTtBeUkoMU5fxJNt5thNUIdZ8f2+0kPivEzcEREI3lRjNlKdPwVq
VnhGRHNibVa1a3EPS86aPtN6iOnnbSo5FFEPqWdHRwYowdAPVEQJQs3Qgtmc6LgS
Dbr/B0fbl3ZRj/HcFs1lkl3MAq9oEPsAvwPjWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:48 2025 by rpki-client