Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e33362e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: efs981ogro8h93ghsSqXa4HVYpXNDK+HWci+XUB1i1s=
Subject key identifier: C5:08:EB:73:DF:88:8F:90:2C:F2:EB:93:1A:BA:7D:12:7D:D8:D4:10
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 05D9F189BD9BD414525604E226E6E1CE3028A5C5
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32342d3234203d3e203538343837.roa
Signing time: Thu 13 Mar 2025 11:02:23 +0000
ROA not before: Thu 13 Mar 2025 10:57:23 +0000
ROA not after: Thu 12 Mar 2026 11:02:23 +0000
asID: 58487
IP address blocks: 202.10.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d9:f1:89:bd:9b:d4:14:52:56:04:e2:26:e6:e1:ce:30:28:a5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Mar 13 10:57:23 2025 GMT
Not After : Mar 12 11:02:23 2026 GMT
Subject: CN=C508EB73DF888F902CF2EB931ABA7D127DD8D410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:d1:aa:e9:36:78:d1:bd:92:c3:4d:62:a2:
44:10:23:48:73:af:54:53:74:aa:1f:70:e6:c5:a2:
64:42:a2:af:ba:10:63:dd:9a:fc:31:99:b2:ed:43:
98:73:90:f2:a7:36:ed:64:c8:ca:82:ee:f7:ee:3d:
34:29:3b:0d:7f:f7:dd:17:cc:00:8a:d6:7c:54:98:
42:25:07:cd:ce:e2:a4:df:db:17:16:74:61:0a:07:
de:01:e3:5a:4a:d5:b5:5d:f9:4a:b4:47:37:5c:10:
fc:a2:21:c9:0b:db:a9:8b:eb:2c:be:5f:3b:41:e6:
3b:ce:52:b7:e8:d8:89:8a:98:4d:9e:ea:6e:12:cc:
96:4e:44:16:a9:1a:c8:37:e8:f8:54:31:be:38:fa:
47:cb:92:ed:22:2f:9f:ed:ab:c6:41:ae:66:82:70:
4b:6f:ba:c4:01:73:0a:d7:80:97:cd:83:c1:df:9a:
a6:95:0e:d0:62:38:2b:9e:55:fb:c4:6d:0e:26:dd:
50:21:64:fe:3e:cb:ed:f2:7e:b4:7e:fe:e1:a2:d5:
7e:cd:4d:ed:73:c8:9c:84:8f:cb:af:06:27:37:e6:
14:5f:90:d8:57:c9:de:f2:50:a2:2a:12:c0:fd:4c:
2f:b1:a8:44:d5:bb:92:58:3a:e3:46:c0:a8:77:7a:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:08:EB:73:DF:88:8F:90:2C:F2:EB:93:1A:BA:7D:12:7D:D8:D4:10
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:35:83:fa:3f:4d:a9:f5:b7:70:5d:33:e7:13:d7:6e:7f:11:
41:73:fb:17:2d:9f:f0:16:ad:2f:2a:2e:55:02:0f:a9:7c:df:
7c:8d:ba:6c:dd:26:43:5e:4d:e8:e7:44:33:41:8c:9e:41:52:
e3:d3:36:89:b7:6c:3b:e5:6f:e4:1e:3b:5d:d3:ad:68:76:8b:
e5:aa:26:2b:6b:a9:69:44:4e:94:09:24:a1:69:00:62:70:3a:
37:20:27:03:23:0e:0e:33:57:e1:a6:cd:43:b4:67:a4:5b:6e:
7f:61:64:20:8d:70:3a:04:bc:40:0d:48:e2:a4:f8:25:f2:e3:
49:b4:9c:35:f1:2d:4f:9f:41:71:3f:a3:ba:0e:f7:89:9b:f8:
e4:41:6d:ca:bd:04:4c:9d:8b:58:42:75:20:06:a1:ab:c7:9e:
1e:8e:c9:17:65:71:f8:07:04:f2:0a:02:3a:4e:cf:99:19:f4:
dc:db:6c:2d:e8:05:cb:9c:88:e4:88:00:de:a0:94:f4:5a:9c:
4a:3c:a4:a7:0a:45:a1:09:34:c1:a6:0d:48:88:c3:01:f5:90:
6f:ae:93:35:a0:6e:2a:3c:fe:81:75:99:a0:55:84:64:86:a4:
f1:a5:82:f5:50:c0:90:49:f6:27:e2:34:80:2b:c2:0a:d5:fa:
d5:95:13:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:07:36 2025 by rpki-client