Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137362e302f32342d3234203d3e203338343936.roa
File: 3230322e38372e3137362e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: SfZ0jhebI2afsQBDl6pO+bpG1z5mBTqD6mWtupdGEdA=
Subject key identifier: 73:CA:56:AD:A0:C6:CA:29:96:30:9C:C7:70:37:42:AD:D1:95:07:86
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 67377124CD78AFB3ACDFB3BEEC3D6ED8E9AE7BAD
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137362e302f32342d3234203d3e203338343936.roa
Signing time: Sat 06 Apr 2024 04:02:03 +0000
ROA not before: Sat 06 Apr 2024 03:57:03 +0000
ROA not after: Sat 05 Apr 2025 04:02:03 +0000
asID: 38496
IP address blocks: 202.87.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:37:71:24:cd:78:af:b3:ac:df:b3:be:ec:3d:6e:d8:e9:ae:7b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Apr 6 03:57:03 2024 GMT
Not After : Apr 5 04:02:03 2025 GMT
Subject: CN=73CA56ADA0C6CA2996309CC7703742ADD1950786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:c5:65:45:38:50:78:08:cc:fc:17:ab:b6:
77:7e:0a:df:2c:81:d5:92:c8:ba:81:49:77:4d:12:
c7:c1:35:18:f2:3f:64:73:86:e9:14:20:a1:40:f6:
a1:cc:1c:aa:83:1f:45:1d:94:7a:53:54:d3:1a:25:
a8:b3:5d:81:38:1e:e7:1e:77:13:5a:9c:31:0e:0d:
0f:e0:12:17:2c:93:c2:6f:9b:a3:be:9e:23:cd:fe:
5a:cc:7b:6a:fc:45:6d:5a:0a:40:57:d1:2e:75:90:
b4:0d:0f:d4:11:59:56:39:0e:47:d3:3b:40:62:8a:
41:e7:c5:21:fb:79:2f:c9:66:42:29:f4:82:d2:28:
88:72:b6:92:cc:ca:26:44:4c:7e:71:b8:23:43:a0:
2c:7e:63:1e:b1:27:d5:fc:34:02:c1:1b:df:b7:03:
cc:ef:7d:24:8c:5f:fd:e2:47:b4:d7:31:30:74:ab:
56:93:a8:be:2c:68:6d:9d:cc:bd:45:95:d4:7a:a3:
a3:61:e8:bc:85:8f:2a:0d:47:f5:d3:94:3b:d7:f5:
6e:86:f6:ef:13:51:b9:27:78:26:62:13:a9:6e:df:
81:0e:c6:54:d1:75:7c:d7:e5:0b:dc:64:70:4e:09:
fb:1e:40:29:f9:71:9d:38:81:d1:61:c0:b2:d4:c1:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CA:56:AD:A0:C6:CA:29:96:30:9C:C7:70:37:42:AD:D1:95:07:86
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137362e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.176.0/24
Signature Algorithm: sha256WithRSAEncryption
42:28:98:e1:60:25:84:33:36:ee:3e:3d:7f:ce:33:c6:b8:be:
36:d2:c8:63:a7:15:16:a4:bc:0a:a5:65:d7:b4:29:9d:0f:41:
60:67:ad:ca:ce:4a:a1:6a:95:e1:15:3d:13:26:f6:e1:5e:72:
68:10:7f:1c:dc:bb:61:4c:b1:ed:b9:58:ae:f8:d6:47:45:74:
a4:20:05:36:ba:46:26:2e:09:c3:32:10:7e:7e:df:f2:b7:17:
10:0e:f5:14:7a:8a:c4:8f:85:01:2c:fb:64:58:c7:44:6b:89:
75:68:ec:94:f7:a5:e3:20:50:de:c0:0f:2d:95:ee:b0:0c:16:
a6:20:49:01:cd:fd:64:ae:f8:b2:6e:79:2d:23:91:c1:b7:f7:
01:6d:27:87:a7:91:2f:89:8f:3a:eb:42:72:39:8c:6e:b5:a2:
31:62:15:4c:4b:84:ce:c0:9f:2c:14:19:11:3a:29:f3:68:18:
be:a7:48:12:de:26:1e:c0:71:83:1a:64:c6:5f:4a:f6:f6:e6:
94:1a:8c:3e:b0:88:f8:71:50:8f:ca:1e:77:f2:4b:90:cf:ff:
34:54:da:c5:89:b1:0a:30:11:dd:f0:30:0a:59:d8:f1:39:69:
63:0d:d9:ea:c3:35:72:1a:6e:2e:28:1e:14:ec:a9:76:20:6b:
39:93:f0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:15 2025 by rpki-client