Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e33382e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: i2cfHNp7ELXHkG32amjDVO13rtFH9PXQxmlERj1fotw=
Subject key identifier: 36:DA:09:5E:AC:13:DD:1E:F3:07:B9:66:D1:0B:48:3E:5E:7D:D7:FB
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 56D6881BABAA5FEC49D46E26886ABF689172731B
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa
Signing time: Thu 13 Mar 2025 11:02:24 +0000
ROA not before: Thu 13 Mar 2025 10:57:24 +0000
ROA not after: Thu 12 Mar 2026 11:02:24 +0000
asID: 58487
IP address blocks: 202.10.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d6:88:1b:ab:aa:5f:ec:49:d4:6e:26:88:6a:bf:68:91:72:73:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Mar 13 10:57:24 2025 GMT
Not After : Mar 12 11:02:24 2026 GMT
Subject: CN=36DA095EAC13DD1EF307B966D10B483E5E7DD7FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:91:47:a4:5a:0c:da:96:e0:bf:65:4b:91:
a6:60:34:73:4f:b6:70:60:65:6c:c9:33:c3:66:12:
5d:6c:41:8d:76:c4:fa:c4:53:72:08:4d:67:32:61:
8d:e7:9a:82:33:29:ee:01:88:44:5c:fa:2f:56:26:
99:3b:82:27:a7:51:8e:18:dd:b7:e5:bc:30:97:13:
b9:e0:db:38:bf:e7:06:c6:1e:be:44:3b:2b:05:fc:
a0:54:68:e9:a7:df:20:de:63:55:6a:00:8e:6e:b8:
3b:44:a3:cc:67:05:43:bc:fa:37:ec:f2:27:b8:d8:
7f:3b:88:07:76:31:a7:89:a0:5a:37:d3:67:59:fe:
55:93:6b:13:16:dd:a5:1f:f9:d7:18:60:4e:28:20:
cf:7e:80:ad:00:c7:ca:81:be:37:5d:fb:52:65:3c:
02:99:0a:f2:d7:2d:eb:d1:39:b7:0f:a9:76:2e:5d:
2d:5a:9a:4a:2c:e2:1b:f4:a8:20:09:a3:fb:1f:ba:
a5:d6:e8:90:03:28:12:fa:5a:d9:41:1c:8b:3b:5f:
ee:1b:4f:34:22:f4:5b:e3:ce:9a:2b:03:08:37:d3:
10:0b:e5:76:2a:b9:52:fd:78:2d:53:7f:ed:80:22:
ac:65:4b:73:38:9a:7d:fe:d9:8b:3b:c6:d9:6f:78:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:09:5E:AC:13:DD:1E:F3:07:B9:66:D1:0B:48:3E:5E:7D:D7:FB
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33382e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:30:4f:78:ce:de:9a:1d:06:d9:e6:47:55:f9:89:02:5b:07:
e1:7e:9c:6e:57:69:b9:88:7a:ef:6e:b0:e9:8d:07:9b:ff:8a:
cf:2a:4c:73:56:35:d7:cb:3a:bc:7c:3c:6a:05:fd:7f:25:0d:
fb:72:de:2e:25:23:9a:82:4c:c5:fb:50:1a:0d:f6:3e:a9:95:
87:41:e8:52:1a:33:ff:9a:fc:09:b4:21:09:f1:71:7a:4d:fb:
0a:3d:20:6f:58:08:eb:8e:d5:38:df:48:ee:d9:c1:d0:b6:ad:
b7:47:52:68:60:d2:96:5a:f7:7e:56:8c:b3:95:53:48:23:f3:
a2:7a:16:bd:48:11:88:4a:c1:78:7b:28:ff:01:dd:4d:84:d4:
c5:6e:78:b3:6f:8f:61:8f:36:7e:b5:de:dc:01:96:7a:f6:ce:
b9:33:73:a4:74:3e:10:d7:f8:9f:9b:3e:8b:89:f7:ef:6d:c5:
89:c0:77:4e:e6:f6:42:0d:47:8d:34:f9:82:5a:53:13:23:ef:
02:99:1d:e3:02:07:ef:44:a8:9c:bc:6a:15:06:34:3d:8c:38:
e8:03:07:22:c9:2c:34:47:3d:d5:dc:f1:40:38:db:68:ec:64:
f0:52:a6:5c:39:dc:15:b2:41:d5:0c:fa:0f:97:ff:42:17:86:
ef:76:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:07:00 2025 by rpki-client