Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138352e302f32342d3234203d3e20313430343231.roa
File: 3230322e38372e3138352e302f32342d3234203d3e20313430343231.roa (raw, json)
Hash identifier: e6bwKVLrk/xH3iACpJor9f0w44lkzeWTyJ1wqxFpxCQ=
Subject key identifier: 84:BB:72:96:AA:06:68:FE:BD:C0:8A:D6:0D:1E:FC:8F:0D:12:60:DC
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 5B2358FA9DAD5FD37DD3C761ACBA9125D718B7BF
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138352e302f32342d3234203d3e20313430343231.roa
Signing time: Fri 14 Feb 2025 01:39:17 +0000
ROA not before: Fri 14 Feb 2025 01:34:17 +0000
ROA not after: Fri 13 Feb 2026 01:39:17 +0000
asID: 140421
IP address blocks: 202.87.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:23:58:fa:9d:ad:5f:d3:7d:d3:c7:61:ac:ba:91:25:d7:18:b7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Feb 14 01:34:17 2025 GMT
Not After : Feb 13 01:39:17 2026 GMT
Subject: CN=84BB7296AA0668FEBDC08AD60D1EFC8F0D1260DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:ec:c8:81:a4:a0:9a:be:5b:ca:b8:93:72:
ac:2e:e9:96:d2:f1:d0:0c:0f:05:d2:5b:8d:a4:78:
0c:aa:d9:8e:37:16:18:98:0b:9a:83:ee:4b:8c:85:
ad:33:88:9b:70:b2:34:56:e9:43:87:1a:36:cd:4e:
bd:e1:0c:59:67:79:7c:22:21:0a:3f:a1:0d:5e:a3:
c7:ce:ca:50:f9:58:e5:d0:f3:03:13:bd:5f:43:dc:
cb:9f:5c:6c:78:6b:c7:53:b1:1a:f9:a2:50:f3:95:
91:fa:e8:bb:84:23:b1:d1:c3:1a:6c:be:0a:74:ba:
39:96:b5:41:e6:96:31:19:c9:00:0b:81:43:e8:5a:
c4:af:5f:47:a1:3e:bf:c7:89:09:18:d1:7f:a1:53:
c0:66:dc:e5:38:d3:66:ab:46:38:81:d5:ad:aa:67:
d5:32:c7:c7:fa:24:90:96:b5:62:fd:39:aa:c8:9a:
a3:db:5a:49:51:c7:52:63:99:0b:2f:38:03:4a:8d:
07:0a:02:8a:8e:a3:76:96:27:bb:e9:46:ce:32:7e:
84:25:0c:6a:fb:fb:43:90:17:84:2b:e8:63:fd:68:
69:5f:aa:fa:4e:b9:27:7f:68:f1:e9:44:54:c4:ef:
12:e4:ee:a6:40:bc:c1:63:57:98:9d:02:81:dc:3d:
1a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BB:72:96:AA:06:68:FE:BD:C0:8A:D6:0D:1E:FC:8F:0D:12:60:DC
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138352e302f32342d3234203d3e20313430343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.185.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a3:58:f6:a3:f2:2d:b0:54:f2:53:18:db:c2:95:e0:be:cd:
2b:4c:16:0f:16:76:68:36:4e:7a:ac:8d:b5:4c:f7:70:81:52:
e6:27:a8:de:b2:d4:bd:47:6c:d7:57:0b:3f:d1:ce:68:de:e5:
09:32:2b:5e:81:fd:bc:33:61:5b:80:01:a4:2f:b0:13:35:f6:
37:44:4c:25:fd:4d:ae:d5:2c:94:ec:92:7c:32:f3:a2:67:37:
33:4c:6d:7f:b3:a5:5e:8b:cd:76:35:4f:c9:00:8c:19:5b:19:
ba:77:01:8f:77:40:f2:77:19:13:e2:9a:e6:96:2a:96:17:a9:
5f:b6:fd:6c:36:47:4c:4e:dc:a8:34:e8:c9:80:fb:5a:0c:3f:
b3:0a:b9:35:cf:a4:41:b3:f4:b9:ff:aa:7f:26:84:db:bb:02:
71:b6:99:39:6f:8a:25:a6:c4:a2:6c:ed:c8:51:9d:7d:0e:af:
8b:9e:a8:48:41:39:b4:98:17:87:d7:a2:42:19:97:cd:24:cf:
34:37:56:c4:83:2e:33:13:86:f6:82:70:60:e8:ae:61:01:10:
13:a5:a9:5d:53:40:7e:0d:b6:70:2f:15:51:33:a7:77:e7:b3:
4f:9e:c9:30:d2:10:3e:2f:0e:b1:cb:a6:9b:b1:bd:20:1c:e7:
df:ce:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:14 2025 by rpki-client