Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa
File: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64=
Subject key identifier: C0:28:2C:E2:8C:2F:6B:3A:FF:72:7F:D8:36:D3:AB:A2:7F:4A:E9:C9
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 72FC57D65CD4858F5468B200E051171C3C093961
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa
Signing time: Wed 26 Mar 2025 06:00:58 +0000
ROA not before: Wed 26 Mar 2025 05:55:58 +0000
ROA not after: Wed 25 Mar 2026 06:00:58 +0000
asID: 201341
IP address blocks: 202.51.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fc:57:d6:5c:d4:85:8f:54:68:b2:00:e0:51:17:1c:3c:09:39:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Mar 26 05:55:58 2025 GMT
Not After : Mar 25 06:00:58 2026 GMT
Subject: CN=C0282CE28C2F6B3AFF727FD836D3ABA27F4AE9C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:5c:55:9d:88:98:c3:b6:85:0e:75:aa:2f:
43:a3:f4:41:91:77:82:01:4b:53:a9:1a:bd:d3:03:
da:04:05:7b:94:36:fc:c6:91:a5:49:2a:05:9c:d9:
5a:16:f2:70:c9:70:ce:a9:d1:44:13:14:5e:4d:5c:
f7:5c:2c:54:a5:f3:e9:0d:20:f3:a3:b7:4c:29:fa:
c7:dc:7b:30:e4:ae:c8:81:9f:60:15:aa:4c:b9:94:
98:96:f8:40:a8:e8:00:ef:8c:49:b3:3c:9e:07:0e:
05:18:d9:0c:6d:ac:04:8b:1c:4b:9b:2a:c0:c7:44:
ce:f2:e5:9c:d6:61:c5:cf:93:fc:59:d0:b4:13:40:
e5:91:f7:b1:98:1e:44:9e:ed:c6:cd:96:3d:10:38:
45:cd:ad:3f:ca:0f:7d:5b:04:6b:b0:be:a4:d6:96:
93:d6:01:e8:05:02:17:66:98:75:bb:0e:1e:35:55:
b8:2b:7c:6a:eb:5f:93:8a:2c:30:b2:5d:4e:91:40:
5f:3c:ea:9c:f7:a3:a8:b9:2d:d1:b1:22:77:18:48:
e3:8d:fb:9e:68:74:62:40:f1:7d:fb:b5:65:12:fc:
8b:00:2a:b0:8f:d9:93:ea:4b:e1:88:87:0c:4e:07:
24:42:e9:3f:e6:d3:3c:60:d9:20:57:a2:67:b3:02:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:28:2C:E2:8C:2F:6B:3A:FF:72:7F:D8:36:D3:AB:A2:7F:4A:E9:C9
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.60.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:0b:b1:3d:45:73:de:0d:72:fb:dc:f4:28:31:2b:a7:93:22:
18:86:fc:a8:b1:4f:9d:82:ef:d1:bd:68:71:cb:d5:b5:2b:67:
15:b1:7f:fb:14:98:7a:ee:ba:69:c5:1c:4d:7f:57:c4:5b:7d:
aa:bc:42:9d:4a:17:7c:cd:70:b8:f9:83:0a:b3:d9:d6:4b:2b:
32:fa:a3:ef:a6:6d:11:8c:a6:35:05:02:a3:5a:7b:24:d0:79:
fd:9d:cb:b8:2e:44:a5:fc:cf:c7:f8:db:c3:41:1b:bb:45:62:
7c:86:50:12:af:84:01:72:e1:78:3e:6a:48:36:f5:52:05:d1:
a1:ef:86:a3:44:0c:d1:6e:00:ca:a9:95:19:5d:36:75:a1:39:
05:da:ac:54:4b:34:90:ac:79:29:07:f8:39:b7:94:9f:9c:29:
f1:02:9e:4f:85:8c:20:61:66:d0:5b:be:57:f9:50:93:09:2a:
24:da:72:80:f6:93:36:8b:91:ad:12:2a:9d:4c:d0:37:65:35:
11:1d:fb:a9:63:4c:54:39:1a:d2:d3:89:9e:ec:e0:ef:ee:16:
b6:17:26:87:c8:3a:bc:e7:27:b0:75:15:68:bd:45:37:c7:6b:
48:da:99:7a:0a:95:f5:67:e8:96:33:7d:0a:a5:21:01:1f:3a:
de:04:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:05 2025 by rpki-client