Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa
File: 3230322e31302e35342e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier: oY8PFSmRlK4Vr9dRAsrKJH2p/p9xJlr+E4F6IgwEYPg=
Subject key identifier: 56:79:B4:53:44:59:FF:B0:99:62:FA:69:9D:02:84:E1:54:84:4A:92
Certificate issuer: /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial: 56AD07055337CA7F5F3AE5D4AA961C2FFC4183DA
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa
Signing time: Wed 12 Mar 2025 02:04:51 +0000
ROA not before: Wed 12 Mar 2025 01:59:51 +0000
ROA not after: Wed 11 Mar 2026 02:04:51 +0000
asID: 140475
IP address blocks: 202.10.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ad:07:05:53:37:ca:7f:5f:3a:e5:d4:aa:96:1c:2f:fc:41:83:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Validity
Not Before: Mar 12 01:59:51 2025 GMT
Not After : Mar 11 02:04:51 2026 GMT
Subject: CN=5679B4534459FFB09962FA699D0284E154844A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:a7:a2:24:76:0e:78:5b:cd:45:8c:29:71:
34:88:83:48:52:ce:48:5f:8b:d1:bf:64:5e:5c:2b:
a6:d7:73:94:71:d3:ce:7c:8b:95:21:08:97:dd:39:
9a:62:b1:55:93:90:30:8a:88:a5:0a:2c:5a:fc:b4:
5a:73:2a:c9:96:06:de:73:94:38:46:c5:a6:31:e7:
f1:80:0c:b1:9b:d3:8a:af:f8:5b:0a:2e:af:81:97:
5a:d6:12:56:e7:63:0a:47:64:57:18:71:e2:3e:6e:
2f:ed:65:3f:df:f5:fc:45:a7:21:a8:e2:76:3c:af:
72:d8:90:b0:f7:a2:97:db:07:a2:be:1d:9a:27:f1:
51:9d:a6:e9:45:25:5f:e7:55:49:93:2e:cc:1e:a9:
21:2a:08:81:1a:d9:41:6b:fe:0b:8c:b6:50:6b:4a:
ff:8f:18:43:1c:7a:fc:67:dc:68:ca:5b:21:e5:cd:
ff:ab:c9:18:d6:fd:a9:49:f6:e5:7b:c4:a3:0e:e5:
e6:1b:a3:4b:c1:12:b3:8d:9b:20:ab:cb:a4:5f:8f:
bf:0f:ea:49:38:b9:c5:2b:45:d4:45:39:7a:b2:d1:
8a:76:61:83:f4:8c:77:c9:92:d6:f6:ec:df:38:39:
61:29:1e:0b:f8:73:fd:0d:2a:81:80:70:97:de:49:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:79:B4:53:44:59:FF:B0:99:62:FA:69:9D:02:84:E1:54:84:4A:92
X509v3 Authority Key Identifier:
keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.54.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:52:90:d9:4a:11:40:c7:ec:20:fb:d1:91:ce:02:97:0f:02:
a4:98:ce:a0:18:ca:db:5c:26:9d:61:79:0f:20:01:f1:e1:75:
a9:d4:61:cb:7e:57:8e:f3:30:f3:9c:ee:f2:f0:d2:8e:e4:21:
97:ed:27:39:b6:52:35:22:bf:42:00:fe:b7:a3:e9:cb:18:5e:
26:31:70:cc:62:46:73:15:14:be:03:c7:90:0d:35:c2:c7:7e:
11:c1:4c:ef:7b:65:e7:b3:57:94:05:0a:95:c3:75:3d:fb:b8:
f7:cd:ed:78:79:d3:4f:7b:5f:64:de:0b:39:72:c8:57:42:5a:
f5:2b:0c:8a:2a:2b:f7:b6:86:e6:85:88:f8:5d:c4:d5:5b:35:
06:65:97:e4:6f:c2:c1:d2:24:d3:97:8a:28:89:e1:d4:d7:2e:
01:ea:3d:d0:07:c7:af:32:42:1f:d6:68:02:13:d0:d1:57:f4:
c4:c3:3e:d6:5d:d4:87:5c:fd:b4:a4:85:99:fb:4b:51:d5:7f:
b3:d3:00:52:b0:6b:f0:8f:5a:4b:f0:5b:8c:37:e8:44:14:64:
a8:93:5e:b3:5b:23:10:4f:c4:61:bb:d5:80:59:02:13:fb:b8:
b2:cb:b8:13:85:7f:ff:2b:8e:35:86:a2:27:52:9c:d6:f4:20:
7f:84:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:51 2025 by rpki-client