Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3139312e302f32342d3234203d3e203234353230.roa
File: 3230322e38372e3139312e302f32342d3234203d3e203234353230.roa (raw, json)
Hash identifier: Po0BccEcxzIiyYNNQVHmGTyw/u3FzVh0lCRJwmVau1o=
Subject key identifier: 03:58:86:AA:7D:4D:FA:C5:D8:CB:B0:CD:53:49:BB:94:E3:C0:C5:60
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 78E4A1F67067B36D37FD2E0A21B738D793C1FEAD
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3139312e302f32342d3234203d3e203234353230.roa
Signing time: Sat 08 Mar 2025 05:00:02 +0000
ROA not before: Sat 08 Mar 2025 04:55:02 +0000
ROA not after: Sat 07 Mar 2026 05:00:02 +0000
asID: 24520
IP address blocks: 202.87.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e4:a1:f6:70:67:b3:6d:37:fd:2e:0a:21:b7:38:d7:93:c1:fe:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Mar 8 04:55:02 2025 GMT
Not After : Mar 7 05:00:02 2026 GMT
Subject: CN=035886AA7D4DFAC5D8CBB0CD5349BB94E3C0C560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:dc:ec:5c:ee:5e:bc:70:0d:51:f0:b4:5c:
0c:7b:52:22:43:41:9d:08:00:70:a3:83:44:21:36:
78:f0:b7:ef:de:d8:cf:79:40:9d:8e:a1:34:ee:e7:
12:1f:2c:3d:d0:7a:10:62:b2:00:1f:46:0e:0c:0d:
4d:8a:ad:fc:85:0e:d9:a8:dc:b5:2e:a5:00:ce:f5:
b5:b9:b6:64:01:65:b2:a8:6f:00:0b:35:a1:af:39:
11:7a:70:e2:c2:0c:2a:c1:6e:37:ff:45:ea:d8:18:
2e:7e:55:c6:a8:b4:da:5a:9a:9d:84:82:e0:3a:90:
8d:8b:37:d9:d4:c8:e3:cb:39:61:0d:ac:47:c5:fd:
9b:f0:5c:be:b4:4a:5b:c3:2d:5f:f4:9f:f4:90:f5:
4a:62:cd:bf:3e:3c:71:db:aa:4d:b2:83:7e:2b:17:
ec:19:d8:5b:87:f1:6b:59:e9:e5:c6:8a:04:f8:c2:
0a:62:60:39:66:c1:6d:df:cc:ca:e1:cf:21:ed:40:
6d:29:6b:4c:a7:4e:15:c2:75:78:ca:2b:d6:b0:03:
94:5e:62:5f:45:d2:4c:98:a1:3d:ae:54:12:6e:59:
d7:ca:55:17:38:be:bb:f8:cd:6e:f4:45:fa:55:2a:
fa:74:09:31:ac:36:d4:fb:cf:e5:26:88:40:17:1d:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:86:AA:7D:4D:FA:C5:D8:CB:B0:CD:53:49:BB:94:E3:C0:C5:60
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3139312e302f32342d3234203d3e203234353230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:7d:56:ad:72:1a:f4:be:23:bb:30:d4:fa:f7:14:a3:2e:03:
4d:f3:dd:42:83:f2:b9:60:0d:db:e8:0a:25:77:20:44:81:01:
19:ac:6f:52:ee:2e:fd:5f:5d:4b:f2:b2:d3:32:1b:00:47:20:
1d:20:1b:6a:ee:6c:b1:18:52:8b:e6:47:31:b6:f7:e3:7a:62:
d7:9a:db:a9:e5:ee:8d:3d:34:4a:d9:21:ac:ad:07:b1:97:16:
c3:0d:fe:3c:cd:55:a3:a3:f0:1c:d4:9b:46:5b:0a:cb:98:6d:
9c:aa:7b:30:c5:bc:ee:2c:66:9b:bc:1f:fe:5a:ef:2e:34:36:
a0:cc:61:8a:61:a1:c9:21:d6:76:cd:df:66:b5:7c:fd:2c:5f:
97:e2:df:a0:13:37:8c:1c:57:3e:09:87:b6:bb:ca:4e:6a:26:
23:64:28:e6:05:a5:3d:d9:b6:15:6b:fa:e1:ee:73:8f:e7:e0:
7a:4f:bb:e3:93:7c:25:e0:2f:79:dd:e6:02:7e:90:86:8d:d3:
6c:62:bf:b3:da:5d:a6:aa:bd:cb:8b:fa:e4:4e:29:ac:86:89:
ce:ec:5b:50:6e:5d:d7:cd:18:d2:d6:1f:7a:05:8b:00:0c:fa:
fe:bc:d3:a7:0f:4c:94:7b:ea:ac:43:3a:7d:76:6d:e0:86:23:
21:0a:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:49 2025 by rpki-client