Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230322e302f32342d3234203d3e203338343936.roa
File: 3131362e36362e3230322e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: dyaYHBv4qaVCsc0hchMbgrbcUgX7z3cASHvL7odAzRg=
Subject key identifier: 42:33:AE:6A:BA:13:5B:11:D9:AC:DA:8E:6F:57:F8:65:E5:45:80:79
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 486E39A88EE2267F3B8A3CF368EEFDF96AAB0256
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230322e302f32342d3234203d3e203338343936.roa
Signing time: Fri 24 May 2024 04:00:02 +0000
ROA not before: Fri 24 May 2024 03:55:02 +0000
ROA not after: Fri 23 May 2025 04:00:02 +0000
asID: 38496
IP address blocks: 116.66.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6e:39:a8:8e:e2:26:7f:3b:8a:3c:f3:68:ee:fd:f9:6a:ab:02:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: May 24 03:55:02 2024 GMT
Not After : May 23 04:00:02 2025 GMT
Subject: CN=4233AE6ABA135B11D9ACDA8E6F57F865E5458079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:e2:40:90:4b:fa:18:96:cc:1a:8b:05:f1:
c8:f6:69:4a:58:50:a8:83:b9:20:d9:9a:9c:aa:83:
a8:a5:b4:9e:2e:64:ec:83:c9:ce:b1:e3:19:9e:03:
7c:cc:58:fb:ff:94:b5:f1:2d:5d:4a:23:8e:76:14:
9a:af:2f:50:7e:f3:e6:71:56:57:5e:73:e6:71:dc:
68:da:88:e8:f4:57:82:ad:92:86:3f:90:a0:22:81:
e2:9a:87:b9:0f:93:2e:85:39:47:d8:44:03:5e:3b:
a7:ab:73:87:81:e0:34:c1:0d:d5:07:54:d4:15:b3:
2f:3a:ee:cc:a6:dd:66:16:1a:10:e4:ce:97:cc:f4:
2a:31:6a:d3:63:20:ff:0c:d3:b2:7a:f4:2f:1d:56:
54:5f:e3:46:ac:23:64:a6:d1:91:35:0a:44:0d:76:
b5:a2:23:dd:a3:4e:fb:46:b2:a8:c4:d2:7a:21:de:
62:e7:d0:78:03:1a:94:a0:02:0f:bc:1f:e9:0e:24:
d9:4a:47:2a:a7:ac:9d:22:6c:3b:f6:65:0b:b8:1d:
94:bf:9b:21:04:2c:1c:1f:eb:3f:04:6b:60:92:6e:
18:d7:37:41:71:61:99:ab:a7:ce:f8:cd:aa:14:7c:
94:5a:37:ed:0f:63:50:63:f5:fe:21:54:01:8f:4f:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:AE:6A:BA:13:5B:11:D9:AC:DA:8E:6F:57:F8:65:E5:45:80:79
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230322e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.66.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5f:2e:19:81:2e:69:30:e7:94:d5:bd:8b:a5:59:95:3b:f9:
02:04:c9:7e:21:6c:4a:42:75:5a:35:32:47:fb:ce:66:bf:8b:
8d:ea:d7:17:bf:78:83:c3:6a:51:92:ec:fa:ab:51:76:2a:d9:
07:08:d7:1f:b3:ed:fb:1e:88:ac:ae:d9:25:c9:0b:30:56:b7:
ef:bd:b1:3b:6b:ed:46:61:db:3c:18:f0:fd:68:2a:7f:a5:e6:
f0:db:21:50:6d:e5:6b:fa:42:cc:55:79:fa:dc:c6:26:48:1e:
79:17:6f:1d:22:58:0e:43:f0:95:50:1e:70:65:b1:9d:57:8d:
14:98:d5:e1:52:81:33:f0:d9:1c:b2:8c:e1:8f:6c:74:56:68:
9f:3e:92:a7:04:7d:f3:6a:46:5c:3d:0a:df:48:4a:a2:c1:a5:
f2:84:b2:e9:d2:ff:59:f1:14:7e:45:59:07:10:39:ed:4c:22:
ab:bd:62:5d:71:0f:ca:fa:c0:34:5a:1d:b3:97:10:cc:81:ff:
da:bf:47:9c:d5:28:ac:51:1d:ec:bf:fa:f7:e3:ae:27:d1:8f:
ab:9d:32:a8:ae:7a:a6:d0:b8:47:c9:12:66:43:b5:75:e7:76:
29:19:47:0b:73:71:5b:9f:2a:dd:2b:fa:a4:cd:e0:21:02:8b:
0c:bc:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:38 2025 by rpki-client