Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36332e302f32342d3234203d3e20323031333431.roa
File: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: E7Xvq+98P7calV+Tra/HI6VBncPkJLZ2WfRUwzVpBzQ=
Subject key identifier: 67:C3:9F:95:FC:79:D1:46:36:D2:76:85:90:44:61:42:E8:23:7B:A5
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 70C63B97517ED0130D32CAABC130B9F3AA5873AB
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36332e302f32342d3234203d3e20323031333431.roa
Signing time: Wed 26 Mar 2025 06:00:58 +0000
ROA not before: Wed 26 Mar 2025 05:55:58 +0000
ROA not after: Wed 25 Mar 2026 06:00:58 +0000
asID: 201341
IP address blocks: 202.51.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c6:3b:97:51:7e:d0:13:0d:32:ca:ab:c1:30:b9:f3:aa:58:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Mar 26 05:55:58 2025 GMT
Not After : Mar 25 06:00:58 2026 GMT
Subject: CN=67C39F95FC79D14636D2768590446142E8237BA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:82:eb:84:c0:bb:b8:50:86:5d:6d:0f:a4:
f8:0b:b8:2d:3a:01:44:7a:28:12:dd:2e:85:5a:6a:
6d:c8:06:23:5f:e6:a8:3c:e0:6c:e6:94:67:43:17:
4e:35:a7:f2:b5:a4:62:c3:f3:b5:6b:8c:ae:53:58:
e6:ed:bd:78:41:3d:59:94:e3:2a:36:67:65:24:82:
3f:49:e8:65:4d:e1:17:e9:60:5f:48:ea:fc:99:0d:
de:c8:0c:a8:c1:1b:4f:73:61:1f:92:c8:33:5d:95:
e1:d0:9d:42:39:db:2a:a6:23:32:24:23:be:00:a1:
fb:dd:de:f8:3e:fc:af:02:49:ff:ba:4e:8a:d7:e9:
68:e5:1a:06:ed:df:af:1a:6c:e0:6a:1f:51:7a:21:
b5:f5:af:a1:55:c3:98:c3:a7:fc:ce:a2:58:55:22:
04:2d:01:9a:7b:76:51:f7:3f:f4:a3:5f:3d:c1:0d:
82:8d:20:ea:f1:55:38:9e:7d:e6:eb:c9:51:e8:f2:
5e:6e:34:e9:cc:af:c1:f0:d1:09:bb:a5:3b:f2:57:
7a:24:a5:0a:43:56:bf:39:86:5f:ca:ac:62:40:e8:
14:a2:b2:25:3b:99:0c:5d:b4:b9:92:b6:d4:56:f6:
3d:4a:3d:f4:bd:30:39:66:e5:a4:59:c8:0e:b0:33:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C3:9F:95:FC:79:D1:46:36:D2:76:85:90:44:61:42:E8:23:7B:A5
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36332e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:61:bb:f9:3b:b6:7f:fb:68:ae:08:27:37:c0:66:c1:5d:53:
a6:1c:ea:b6:84:9b:a9:d6:82:39:a8:d2:dc:bb:08:d7:14:bb:
5d:db:49:dc:3b:83:fc:9d:da:9b:b4:82:a5:cb:95:15:0e:46:
b4:38:3e:7d:b3:59:9e:0d:8f:97:80:66:86:51:e8:2b:03:85:
d8:43:6f:67:f3:b6:e6:44:a2:b1:58:5c:a0:61:75:33:d2:86:
d1:9c:4c:d9:0a:ee:1e:98:35:28:fc:4f:97:98:cd:7c:47:b8:
bd:26:44:e1:0d:94:7e:7a:19:e7:43:e8:3f:b3:a3:16:9f:e0:
e7:a7:0f:6c:08:25:c4:ea:6a:79:93:27:1f:53:2a:a1:2e:91:
a4:06:29:00:90:e5:3b:d5:7c:84:d7:8d:04:7b:13:08:1a:5c:
17:aa:e6:cb:01:c1:eb:84:ef:ee:ab:4c:f2:9f:17:6f:0e:22:
ae:40:82:4e:b0:e9:eb:75:cb:51:65:1a:73:e2:06:5c:47:42:
52:d6:fc:cd:76:cd:f2:9d:b7:59:cb:36:ed:5d:b1:e7:68:9c:
f0:dd:c0:0f:1a:df:51:96:ec:c0:41:8c:2c:b4:ba:f2:a5:d8:
e3:56:1a:db:cd:d0:17:7c:0f:4c:dc:b2:7b:66:06:4e:f5:07:
0a:3a:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:04 2025 by rpki-client