Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138352e302f32342d3234203d3e203338343936.roa
File: 3230322e38372e3138352e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: MZrcj9LKNIjal8co9c4jBJvJvs/OJ+0HXlNGWmfjEuk=
Subject key identifier: 68:89:3F:D0:28:4B:02:02:53:E8:CC:45:D1:5C:F4:69:40:57:BD:CA
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 5A29D75441FEBA1857A4535DC30A05DFE9803957
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138352e302f32342d3234203d3e203338343936.roa
Signing time: Sat 06 Apr 2024 04:02:03 +0000
ROA not before: Sat 06 Apr 2024 03:57:03 +0000
ROA not after: Sat 05 Apr 2025 04:02:03 +0000
asID: 38496
IP address blocks: 202.87.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:29:d7:54:41:fe:ba:18:57:a4:53:5d:c3:0a:05:df:e9:80:39:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Apr 6 03:57:03 2024 GMT
Not After : Apr 5 04:02:03 2025 GMT
Subject: CN=68893FD0284B020253E8CC45D15CF4694057BDCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cb:3c:7e:a5:d7:6f:4e:ef:68:84:aa:6a:38:
7a:60:0e:99:e8:ba:a1:f4:bd:23:f9:cd:37:23:48:
37:a5:db:36:29:24:10:77:15:23:b3:71:37:a2:3d:
d1:2d:fb:bc:5b:b6:e8:d8:c9:be:22:34:41:6b:2b:
b4:40:48:17:bc:ab:52:cd:77:e4:c5:78:0c:f2:e4:
bd:e0:f2:c1:88:f5:d0:65:c8:14:16:1a:0b:e0:ee:
4c:75:bd:ae:04:ca:ac:ab:ad:7f:0b:15:f8:f6:76:
3b:5a:ee:ea:8c:f6:5d:bf:3c:f2:25:21:dd:ce:c5:
d3:74:40:aa:2d:60:86:3d:46:ae:3f:e5:da:b0:41:
b3:d2:07:76:45:a1:45:c9:9a:92:bf:a5:4f:d4:0d:
74:7f:e7:96:24:29:27:71:f5:f3:38:68:cc:c3:b6:
fe:9f:56:54:27:29:08:bd:72:dd:15:66:6f:e5:65:
d8:17:0b:43:ff:b0:25:c8:de:ae:cb:24:50:b2:50:
61:dd:d3:65:96:d4:bf:6b:97:a4:46:8e:0c:83:b5:
cb:22:d2:14:9c:76:dd:da:3e:fd:41:6c:ee:10:18:
b4:55:70:a9:b2:87:1d:c0:83:b9:8a:46:1f:95:18:
17:03:7a:57:a3:5e:57:13:12:4e:14:50:14:13:9f:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:3F:D0:28:4B:02:02:53:E8:CC:45:D1:5C:F4:69:40:57:BD:CA
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138352e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.185.0/24
Signature Algorithm: sha256WithRSAEncryption
27:51:c7:52:90:c7:4b:60:a1:45:4b:8f:0c:38:99:12:e6:d7:
1f:70:ed:26:c0:f9:b5:5a:26:f0:14:a9:92:a8:16:3d:80:9d:
98:44:19:fe:19:a9:d4:f5:a1:4c:3d:6b:85:15:ee:d2:e3:3e:
4a:fb:d5:62:0b:08:35:58:ac:b8:0e:3e:0a:80:75:55:a8:95:
d5:ce:a6:40:3d:fa:9a:db:b9:0d:02:b7:d2:57:35:bd:c6:b2:
0d:96:d3:b9:b1:35:91:89:a8:a1:08:51:b0:89:8d:5b:a7:15:
de:0d:a6:ab:d0:0e:94:a8:78:5a:c0:e8:6c:8f:ba:80:ff:31:
7f:84:b0:7a:ef:5b:44:85:6b:bf:05:dd:9c:8b:88:96:46:ed:
e2:73:f5:33:ec:cc:f9:70:66:1d:c2:ac:3a:70:7a:91:67:45:
9a:81:29:4b:cf:a6:6a:da:f0:48:98:09:70:40:44:78:1b:1e:
19:53:50:48:2a:ce:49:af:09:47:16:12:c7:41:62:7c:c1:3c:
e2:a3:5e:24:89:76:c5:b8:60:5a:d0:b9:91:bb:55:d9:67:04:
6e:f6:1e:ad:94:99:c6:d7:0b:35:dd:01:3b:54:12:fd:51:ec:
41:3c:6d:15:7f:ce:c5:f1:47:d2:b9:bc:21:78:7b:e9:1b:4a:
e7:09:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:29 2025 by rpki-client