Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e33372e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: Gd+XobvX/fy/Mh2XkDqNxhWNk3QnX1w7MS4RWmVMXCk=
Subject key identifier: 48:D6:22:C3:E2:E1:F9:B6:03:D7:28:B4:61:4B:E2:C8:22:F0:70:6E
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 627B8AA9940ECCA8E45845250D0E718CF2B9AEFE
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa
Signing time: Thu 13 Mar 2025 11:02:23 +0000
ROA not before: Thu 13 Mar 2025 10:57:23 +0000
ROA not after: Thu 12 Mar 2026 11:02:23 +0000
asID: 58487
IP address blocks: 202.10.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:7b:8a:a9:94:0e:cc:a8:e4:58:45:25:0d:0e:71:8c:f2:b9:ae:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Mar 13 10:57:23 2025 GMT
Not After : Mar 12 11:02:23 2026 GMT
Subject: CN=48D622C3E2E1F9B603D728B4614BE2C822F0706E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:75:cb:ac:29:24:ce:e9:53:57:cc:1c:1c:
07:c6:72:88:67:4c:8f:87:8a:92:a8:25:4c:24:37:
ff:ed:b4:6c:97:94:95:19:65:06:fb:4b:db:31:de:
62:8b:6f:92:0c:19:90:a8:35:45:6d:2c:ab:0e:e9:
12:9c:30:28:20:8c:15:8c:ef:89:95:b3:2b:7b:c8:
34:93:12:79:fa:e9:81:33:f3:7f:80:2e:c0:29:ac:
eb:6f:ff:a7:5e:79:ba:79:1d:c5:54:66:b3:c2:f7:
7a:0d:4f:1d:0b:7d:25:1c:4c:2b:25:10:e4:bb:94:
95:b8:63:68:90:4d:f1:15:c3:7a:8d:14:09:a1:29:
7d:fb:95:55:a0:8d:a2:d3:4e:cd:53:88:2a:6a:ba:
d9:80:68:b6:6b:69:60:23:e9:dd:66:aa:65:ac:fa:
4d:32:75:67:a7:28:df:1b:43:22:54:d4:a2:dc:db:
11:9f:72:08:57:c2:13:69:56:64:6e:7c:4a:15:60:
eb:b4:44:e5:78:72:ee:f4:a9:e5:a6:26:bd:2b:98:
ed:6f:de:05:f0:c5:c1:75:de:b1:91:90:fd:06:ad:
ac:8c:97:a4:c7:f2:de:90:2d:ce:b5:b8:ea:a1:88:
b6:9d:07:a2:28:b2:37:c1:5e:58:7c:d9:16:84:99:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D6:22:C3:E2:E1:F9:B6:03:D7:28:B4:61:4B:E2:C8:22:F0:70:6E
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33372e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.37.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e7:0a:ba:4f:1c:76:1e:7c:37:1c:c1:fd:a5:7d:d5:70:97:
2d:7d:33:33:60:df:2a:4e:96:ee:0a:39:66:13:c5:43:d8:94:
33:66:34:8b:49:66:78:81:1a:91:ec:a2:30:92:3f:f4:f9:f7:
27:23:38:c2:cb:6b:c8:0b:68:e0:fc:f6:bb:51:08:ef:23:dd:
31:ca:27:0b:d8:73:10:29:89:fd:2a:5f:c2:dc:61:02:12:08:
d8:9f:27:04:cf:58:98:73:a6:98:89:ce:04:d6:c3:9f:9b:d4:
10:da:6d:14:55:8b:f5:90:23:8a:0b:59:3b:93:16:38:08:8f:
03:e2:23:f0:82:52:9e:83:ed:93:7d:46:41:af:d4:61:00:e4:
ec:19:6e:3f:d4:d9:a8:b0:2f:37:b0:39:e6:80:e9:cf:ed:34:
5d:e9:6a:3d:83:6e:a0:4b:c7:5d:de:41:55:53:22:08:a6:84:
28:7b:55:c8:01:e3:b1:a1:45:2b:3b:61:e0:52:cf:5e:73:7a:
a3:fc:ed:68:c3:89:51:54:fb:cc:19:07:c2:f1:2b:a8:f2:6a:
b9:97:b6:68:b2:ea:9b:c3:81:53:d7:ea:09:2a:b5:26:32:42:
9c:e9:ee:97:9d:e8:b5:86:ba:0c:13:88:43:9a:f0:d2:b3:8e:
08:07:a1:18
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUYnuKqZQOzKjkWEUlDQ5xjPK5rv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5
MkFBQkU2RTAeFw0yNTAzMTMxMDU3MjNaFw0yNjAzMTIxMTAyMjNaMDMxMTAvBgNV
BAMTKDQ4RDYyMkMzRTJFMUY5QjYwM0Q3MjhCNDYxNEJFMkM4MjJGMDcwNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/3XLrCkkzulTV8wcHAfGcohn
TI+HipKoJUwkN//ttGyXlJUZZQb7S9sx3mKLb5IMGZCoNUVtLKsO6RKcMCggjBWM
74mVsyt7yDSTEnn66YEz83+ALsAprOtv/6deebp5HcVUZrPC93oNTx0LfSUcTCsl
EOS7lJW4Y2iQTfEVw3qNFAmhKX37lVWgjaLTTs1TiCpqutmAaLZraWAj6d1mqmWs
+k0ydWenKN8bQyJU1KLc2xGfcghXwhNpVmRufEoVYOu0ROV4cu70qeWmJr0rmO1v
3gXwxcF13rGRkP0GrayMl6TH8t6QLc61uOqhiLadB6IosjfBXlh82RaEmVDLAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUSNYiw+Lh+bYD1yi0YUviyCLwcG4wHwYDVR0j
BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx
NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB
QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05
N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiUwDQYJKoZIhvcN
AQELBQADggEBAETnCrpPHHYefDccwf2lfdVwly19MzNg3ypOlu4KOWYTxUPYlDNm
NItJZniBGpHsojCSP/T59ycjOMLLa8gLaOD89rtRCO8j3THKJwvYcxApif0qX8Lc
YQISCNifJwTPWJhzppiJzgTWw5+b1BDabRRVi/WQI4oLWTuTFjgIjwPiI/CCUp6D
7ZN9RkGv1GEA5OwZbj/U2aiwLzewOeaA6c/tNF3paj2DbqBLx13eQVVTIgimhCh7
VcgB47GhRSs7YeBSz15zeqP87WjDiVFU+8wZB8LxK6jyarmXtmiy6pvDgVPX6gkq
tSYyQpzp7ped6LWGugwTiEOa8NKzjggHoRg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:39:44 2025 by rpki-client