Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e203330383630.roa
File: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (raw, json)
Hash identifier: OXb58XdJvFeTkl1pb8qqXtG1NjsRZSztJ+uUatv4+8w=
Subject key identifier: F3:33:6E:53:E5:A4:F5:E8:5A:D8:0C:D9:BD:1A:EF:A4:0D:DB:FC:77
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 3FACA44F33A030E9AF0C4B965FE2570422568ED3
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e203330383630.roa
Signing time: Mon 23 Dec 2024 13:53:02 +0000
ROA not before: Mon 23 Dec 2024 13:48:02 +0000
ROA not after: Mon 22 Dec 2025 13:53:02 +0000
asID: 30860
IP address blocks: 202.51.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ac:a4:4f:33:a0:30:e9:af:0c:4b:96:5f:e2:57:04:22:56:8e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Dec 23 13:48:02 2024 GMT
Not After : Dec 22 13:53:02 2025 GMT
Subject: CN=F3336E53E5A4F5E85AD80CD9BD1AEFA40DDBFC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:84:d5:a5:4c:fc:af:bc:e3:c0:a6:88:76:
f3:58:a9:2c:38:da:0c:1c:b6:6f:33:e4:f7:c0:09:
90:97:b5:55:c7:df:3f:e5:27:15:02:8a:3e:7d:15:
1c:15:cf:ed:c3:1e:d4:90:d4:b0:42:54:6f:26:59:
96:f2:67:d9:c7:62:11:bd:8d:b8:dc:d2:87:1f:2f:
62:ba:b6:0c:90:82:ad:37:5f:61:0a:6c:87:d3:65:
1e:44:4b:3e:6a:f1:af:de:5d:b6:1e:cf:a4:cf:47:
4c:51:ef:93:cf:51:11:e8:0d:be:99:79:bc:f0:af:
1a:60:27:9f:a2:0c:86:0f:c6:fe:84:0c:4b:1c:94:
44:a0:5e:25:ea:d0:c9:d5:ab:35:7d:5c:0a:29:d3:
c0:08:1f:4a:30:72:17:21:19:c4:ce:7d:10:fe:bf:
df:23:15:62:57:5c:41:4b:38:c5:94:a6:cd:99:2d:
54:09:1f:75:16:96:39:10:ec:12:36:7e:15:b3:08:
41:c9:90:53:0b:89:4c:69:ee:3a:af:b5:92:64:ef:
47:9c:fc:d6:e5:18:51:df:0a:0a:cc:c1:e8:91:08:
8a:0a:52:d0:39:ad:c2:0b:96:b4:23:aa:ef:c1:b5:
1e:a1:df:19:e2:85:d5:32:31:77:74:54:eb:6e:c0:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:6E:53:E5:A4:F5:E8:5A:D8:0C:D9:BD:1A:EF:A4:0D:DB:FC:77
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e203330383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.58.0/24
Signature Algorithm: sha256WithRSAEncryption
88:bd:18:90:f7:21:ce:fa:7e:c8:6d:c2:4b:34:21:7d:f1:be:
74:67:38:8c:51:68:aa:db:5c:a0:b9:98:55:6e:d0:97:79:dc:
75:0c:c3:04:2b:e3:bf:0e:a1:af:3c:a1:51:94:a5:2d:78:aa:
1b:2a:6b:6b:b6:63:a8:21:68:76:44:e1:94:fb:6e:76:11:79:
76:bb:55:e1:0d:f6:39:de:7d:44:81:66:7c:dd:d7:60:20:df:
0a:cb:e2:3c:2f:fc:1b:10:d1:23:4d:b7:fc:cd:1a:3f:d4:29:
7a:90:c7:4e:5a:25:16:10:a5:48:58:5d:7b:24:4e:bb:8f:94:
03:ab:4d:93:36:5d:b8:1e:38:dc:a4:98:fe:4f:4a:2e:6c:17:
70:c7:b6:7f:6b:c1:76:e8:b7:82:2b:c3:94:ce:73:fb:b3:60:
ee:63:e5:59:b4:1a:a1:04:69:fe:cb:27:74:e8:9e:1a:32:3d:
ed:40:b7:3d:fd:2a:5c:9f:79:ef:4d:23:e2:f5:89:f2:4e:0a:
2c:49:e5:e8:61:0c:34:73:3b:2c:82:10:a9:c6:cd:44:ac:9a:
d0:af:10:4b:cd:12:22:53:8e:27:fa:eb:0a:48:d7:c7:a3:4b:
5d:c7:da:22:98:3d:3a:20:da:f0:cb:41:25:4d:96:99:d3:7a:
e6:c0:2c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:56:11 2025 by rpki-client