Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32332d3233203d3e20323031333431.roa
File: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (raw, json)
Hash identifier: 9JhEsf7Rfj1/1sGwyn9vXBFLhDThBdCundD/yJmVoGk=
Subject key identifier: A6:6B:70:6D:18:F7:AA:A0:D1:68:1F:E9:5C:49:0C:70:5F:A8:15:EA
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 600364F9C6DDFA0154FB416B549B338C54E98BC3
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32332d3233203d3e20323031333431.roa
Signing time: Wed 24 Apr 2024 06:00:02 +0000
ROA not before: Wed 24 Apr 2024 05:55:02 +0000
ROA not after: Wed 23 Apr 2025 06:00:02 +0000
asID: 201341
IP address blocks: 202.51.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:03:64:f9:c6:dd:fa:01:54:fb:41:6b:54:9b:33:8c:54:e9:8b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Apr 24 05:55:02 2024 GMT
Not After : Apr 23 06:00:02 2025 GMT
Subject: CN=A66B706D18F7AAA0D1681FE95C490C705FA815EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:ea:82:5e:58:84:42:84:23:e2:93:c6:54:
0c:44:70:a6:10:7b:71:be:e9:94:06:2a:85:70:c9:
b3:a0:23:a3:06:b1:36:af:21:5b:f3:64:8f:e8:86:
85:31:89:cc:55:da:88:5a:0c:18:9d:63:e8:58:cd:
01:a4:6b:d1:84:50:a5:f3:4c:3f:4c:1c:15:98:fc:
3a:3a:a4:6a:73:02:9f:e8:1a:bf:48:a6:22:e7:8b:
dc:29:a3:7f:55:9a:55:f4:2d:aa:b7:d8:f0:c9:c8:
0e:3e:5f:74:aa:ac:d0:d6:81:c3:5e:61:3d:8d:07:
c2:77:51:db:18:f7:ad:59:8e:5e:83:ff:7f:06:5a:
4b:8a:9f:70:40:ef:b5:00:85:99:20:65:f6:4a:cf:
81:b4:87:d9:d2:87:0c:43:d6:cc:21:1a:36:a8:73:
c2:38:0c:6d:f4:ed:c0:fd:fa:69:78:0f:8e:30:14:
5e:54:d9:e5:87:a5:f9:d5:5a:f4:db:d7:0a:74:57:
04:97:cb:ff:4f:45:0f:05:79:d6:9e:eb:8c:fd:1f:
17:71:35:e0:3e:46:e8:a5:90:46:ed:c6:e9:7e:51:
6e:ca:06:32:f1:71:a7:ca:b7:f1:04:4e:fe:18:d3:
b7:1d:81:7e:b1:e6:e7:18:d9:d6:3f:d6:ce:5a:fa:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:70:6D:18:F7:AA:A0:D1:68:1F:E9:5C:49:0C:70:5F:A8:15:EA
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32332d3233203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.62.0/23
Signature Algorithm: sha256WithRSAEncryption
33:88:1a:19:6e:e3:de:eb:fc:c9:52:19:1d:9a:36:7c:8e:eb:
72:70:55:f0:97:cf:90:ad:1c:19:6d:19:63:ef:50:0e:b1:a6:
05:47:71:a0:57:2e:0a:c8:f5:3e:a7:ca:70:e9:9a:e1:b5:1a:
07:73:45:c8:2b:a4:ca:62:aa:fb:63:60:2a:38:a6:ed:47:34:
c0:94:f3:7d:c1:86:91:9c:c0:ad:8d:91:cf:2b:a9:4c:de:36:
a5:84:b9:29:90:ae:cb:63:ac:7d:33:f3:f9:e1:81:f4:87:99:
c6:02:c4:54:03:d4:af:08:2d:16:d5:d8:01:7b:a6:38:ea:4d:
f6:63:fb:03:18:c8:49:ef:d6:d2:e4:ef:00:bb:a8:28:10:d1:
2c:17:4b:6f:f2:1b:54:7b:46:b7:c0:1e:30:ee:be:c7:e3:21:
ec:52:d5:af:a2:53:75:dc:ab:f5:0d:63:a7:d8:d8:19:a5:6b:
3e:99:76:e3:3d:0d:a5:a2:2a:60:d4:c9:5f:71:b7:63:e0:f0:
c3:fc:ef:48:83:0b:b7:bf:f3:26:f7:a2:52:aa:57:72:12:07:
e8:af:06:95:bf:ff:4a:ee:35:f6:e3:53:fe:cb:dd:12:4c:0b:
7b:bd:ad:c8:2e:a5:eb:23:c5:c4:eb:69:52:cc:2f:fd:d9:da:
0e:76:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:32 2025 by rpki-client