Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230362e302f32342d3234203d3e203338343936.roa
File: 3131362e36362e3230362e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: h1tcAgK6oOJY3qDwa7gnL4q4rLf1HdwD1DHiokn0Gr8=
Subject key identifier: 5E:68:A1:E3:FD:96:56:4D:CE:22:0B:FD:4A:A0:28:94:90:44:7A:F6
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 1CE537DB9F5A72A187F7B2338E81ADE771AC11D3
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230362e302f32342d3234203d3e203338343936.roa
Signing time: Fri 24 May 2024 05:02:18 +0000
ROA not before: Fri 24 May 2024 04:57:18 +0000
ROA not after: Fri 23 May 2025 05:02:18 +0000
asID: 38496
IP address blocks: 116.66.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e5:37:db:9f:5a:72:a1:87:f7:b2:33:8e:81:ad:e7:71:ac:11:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: May 24 04:57:18 2024 GMT
Not After : May 23 05:02:18 2025 GMT
Subject: CN=5E68A1E3FD96564DCE220BFD4AA0289490447AF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:11:4e:dc:eb:49:8d:ea:16:54:82:47:b4:
ba:d5:fa:aa:b0:32:2b:91:e7:78:1f:e9:cd:ac:5c:
96:6b:00:4f:bd:14:48:f6:be:cf:ff:b7:de:5c:c7:
97:78:a3:f0:b3:7a:05:c3:98:78:7f:71:c9:13:c9:
01:59:e7:66:aa:9c:07:5b:72:36:36:18:e7:9e:69:
5d:fa:a2:b1:66:db:6b:3b:8e:8c:d3:27:c2:4f:af:
07:09:65:55:3f:fe:8f:df:5f:0a:6c:97:53:99:ec:
85:64:b4:65:1f:29:5d:a3:73:97:d7:95:b0:29:a0:
21:f0:c2:d1:6c:64:03:73:5f:46:8b:f5:d7:cf:bc:
7a:66:54:fb:61:a7:90:bc:88:51:99:37:46:6e:72:
f4:d6:d6:15:46:73:fb:e7:ae:a2:9b:be:72:74:cc:
8a:bb:ad:7a:5d:54:65:11:85:7a:e4:16:d7:a8:47:
64:60:6e:32:52:a8:41:8e:0b:59:82:32:6c:dc:29:
8f:a7:03:b1:9d:fa:f6:3b:2a:65:98:17:79:2b:0a:
10:6b:34:56:f4:f4:cb:48:51:d4:10:90:91:3c:fa:
e1:04:10:5b:c8:74:4c:97:b9:a2:05:81:68:df:7f:
93:66:89:eb:26:fd:c3:03:21:19:96:99:9b:93:50:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:A1:E3:FD:96:56:4D:CE:22:0B:FD:4A:A0:28:94:90:44:7A:F6
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230362e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.66.206.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ec:42:a7:94:85:c7:de:57:e3:df:f1:f7:e2:4d:57:3b:a4:
ec:c2:5f:a0:d4:07:7c:b1:68:ad:b7:c2:1b:8b:37:55:9a:01:
a4:10:c9:87:66:71:ae:60:38:78:be:86:8c:35:a3:91:82:44:
35:2d:d4:eb:2c:25:5c:59:0e:b7:85:71:17:ce:01:3a:00:9b:
a4:50:01:d3:71:39:44:a4:96:1b:43:20:d4:67:2f:4d:9e:61:
32:e2:46:b8:8a:87:cd:e2:79:4e:0a:bd:11:44:b6:01:c1:f8:
fe:d4:38:90:fd:07:43:c6:18:60:bb:83:c8:ac:58:3a:47:c4:
16:59:3f:56:a3:11:e1:a9:16:09:a9:4f:0b:ed:2b:c4:14:7d:
58:8a:72:74:4d:47:7f:3c:f4:d9:e8:55:5b:1c:8a:d7:f0:57:
ce:18:c7:57:4b:01:a0:e2:32:c5:7a:11:f5:3d:b8:3a:85:99:
8c:25:f5:50:04:1e:bc:bc:34:ae:c2:60:61:59:7d:1a:8e:cd:
a1:38:f3:43:84:25:95:71:31:10:f0:9b:27:7f:7e:5b:7e:d4:
1f:ab:6f:60:4f:0f:62:ab:3a:3e:74:78:ea:05:aa:6d:c5:34:
b0:53:bb:c4:4e:b9:e8:85:73:ca:ac:fa:a4:ef:03:05:2a:1b:
16:6c:46:7c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHOU3259acqGH97IzjoGt53GsEdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA1MjQwNDU3MThaFw0yNTA1MjMwNTAyMThaMDMxMTAvBgNV
BAMTKDVFNjhBMUUzRkQ5NjU2NERDRTIyMEJGRDRBQTAyODk0OTA0NDdBRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fhFO3OtJjeoWVIJHtLrV+qqw
MiuR53gf6c2sXJZrAE+9FEj2vs//t95cx5d4o/CzegXDmHh/cckTyQFZ52aqnAdb
cjY2GOeeaV36orFm22s7jozTJ8JPrwcJZVU//o/fXwpsl1OZ7IVktGUfKV2jc5fX
lbApoCHwwtFsZANzX0aL9dfPvHpmVPthp5C8iFGZN0ZucvTW1hVGc/vnrqKbvnJ0
zIq7rXpdVGURhXrkFteoR2RgbjJSqEGOC1mCMmzcKY+nA7Gd+vY7KmWYF3krChBr
NFb09MtIUdQQkJE8+uEEEFvIdEyXuaIFgWjff5Nmiesm/cMDIRmWmZuTUHjPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUXmih4/2WVk3OIgv9SqAolJBEevYwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNjJlMzYzNjJlMzIzMDM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRCzjANBgkqhkiG
9w0BAQsFAAOCAQEAXuxCp5SFx95X49/x9+JNVzuk7MJfoNQHfLForbfCG4s3VZoB
pBDJh2ZxrmA4eL6GjDWjkYJENS3U6ywlXFkOt4VxF84BOgCbpFAB03E5RKSWG0Mg
1GcvTZ5hMuJGuIqHzeJ5Tgq9EUS2AcH4/tQ4kP0HQ8YYYLuDyKxYOkfEFlk/VqMR
4akWCalPC+0rxBR9WIpydE1Hfzz02ehVWxyK1/BXzhjHV0sBoOIyxXoR9T24OoWZ
jCX1UAQevLw0rsJgYVl9Go7NoTjzQ4QllXExEPCbJ39+W37UH6tvYE8PYqs6PnR4
6gWqbcU0sFO7xE656IVzyqz6pO8DBSobFmxGfA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:15 2025 by rpki-client