Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138362e302f32342d3234203d3e20313430343231.roa
File: 3230322e38372e3138362e302f32342d3234203d3e20313430343231.roa (raw, json)
Hash identifier: 6KQO3YFhPC45TAQkEMWTPOqwPgak8dIouZOqTpPj0Kk=
Subject key identifier: 62:54:DF:5C:2F:74:2C:3C:5C:2E:82:E4:DA:E1:E6:D5:F4:F0:39:4E
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 28D48C7D170DF1606AF072450C437C9A8FD1BD3B
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138362e302f32342d3234203d3e20313430343231.roa
Signing time: Tue 06 Aug 2024 09:57:18 +0000
ROA not before: Tue 06 Aug 2024 09:52:18 +0000
ROA not after: Tue 05 Aug 2025 09:57:18 +0000
asID: 140421
IP address blocks: 202.87.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d4:8c:7d:17:0d:f1:60:6a:f0:72:45:0c:43:7c:9a:8f:d1:bd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Aug 6 09:52:18 2024 GMT
Not After : Aug 5 09:57:18 2025 GMT
Subject: CN=6254DF5C2F742C3C5C2E82E4DAE1E6D5F4F0394E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:e8:c3:33:b9:4e:67:ad:b6:b1:49:52:dd:
3b:0c:cd:42:8b:ae:2b:f5:2e:bb:7d:51:07:dd:47:
a8:4c:66:90:4b:ac:ca:99:e4:4c:31:93:cc:9e:52:
89:70:28:1d:8e:47:e6:25:4d:a4:5a:62:e9:03:8d:
39:75:70:2f:5a:2b:cc:bd:7a:00:44:63:a5:cb:b7:
ab:be:e2:a2:27:e4:62:fe:8a:e3:62:b2:4f:b2:78:
85:0b:4b:8c:cd:55:2b:a8:79:ce:4a:58:c0:52:7d:
e2:47:ce:17:d5:95:6f:11:ea:76:ed:63:09:36:b0:
ed:50:7d:cc:33:6b:12:1f:30:bd:3a:d9:f0:10:70:
0c:07:6d:63:46:88:1f:7f:83:30:e8:a3:6a:a9:15:
11:e0:f6:2e:f2:30:8d:32:e5:70:f1:43:69:21:d8:
03:da:94:82:72:2c:71:2b:93:22:1b:25:91:b8:82:
c5:3a:12:40:34:0b:d0:27:ed:66:1e:70:8a:94:9e:
d7:a4:e1:e3:31:8d:aa:ec:95:46:c1:28:dd:d8:21:
cc:5f:24:6a:0a:15:e3:02:b0:49:c3:23:5c:8e:b4:
dc:49:2e:8d:cb:50:6d:ab:97:f0:a1:41:3a:bd:b4:
1f:53:fd:6a:dd:69:e8:6b:1e:1e:4b:37:e6:0c:b0:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:54:DF:5C:2F:74:2C:3C:5C:2E:82:E4:DA:E1:E6:D5:F4:F0:39:4E
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138362e302f32342d3234203d3e20313430343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.186.0/24
Signature Algorithm: sha256WithRSAEncryption
18:77:0b:4a:3c:f6:bf:66:93:1d:c7:a1:81:14:66:3d:83:12:
31:6f:4c:4e:b4:4b:21:5a:13:b4:d2:5a:55:4c:4c:2b:40:b8:
14:dd:6c:3c:30:e8:af:af:bb:8e:aa:30:49:c4:39:7d:a5:0e:
28:f5:65:42:4d:1d:a0:4c:46:d5:26:6f:a3:55:07:e5:f4:a8:
7d:55:15:33:f7:22:a3:3c:fd:4e:cc:85:e9:11:aa:bf:43:97:
d0:b5:16:34:38:ca:1d:48:3e:c8:68:96:ad:b7:74:7c:98:5f:
cc:5d:2e:e6:df:24:54:b3:9f:ac:6e:48:79:8e:2e:b8:06:4d:
09:14:35:da:1c:dc:19:6d:b0:ef:16:a2:48:43:93:67:c2:66:
fc:94:46:03:5f:66:5f:d9:48:4e:c2:b1:ee:26:3d:cf:f7:a7:
1a:1a:70:0f:8f:1d:0b:55:0a:34:c1:53:da:33:25:2d:20:97:
6a:1e:ef:2d:c4:b1:35:18:c0:d3:a5:da:f8:32:b7:d1:fc:d1:
93:5b:4d:a4:38:59:4a:23:8b:65:9f:0d:93:e2:48:bd:02:57:
e1:14:02:d6:1f:e9:15:eb:30:45:46:e3:75:c8:e9:95:45:8a:
9e:39:d5:fa:93:22:c2:9a:1c:e0:0f:87:f9:2a:3f:d6:1d:d4:
71:83:75:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:47 2025 by rpki-client