Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230332e3139312e34302e302f32312d3234203d3e203338343936.roa
File: 3230332e3139312e34302e302f32312d3234203d3e203338343936.roa (raw, json)
Hash identifier: XXWsgB0rERUOieMPGr9TYa1Cxy9uNhLg+NDPMy036Y0=
Subject key identifier: 08:5A:59:D0:E3:1E:82:50:EB:F8:44:B1:2A:F6:A1:33:76:C6:77:36
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 0483B37D4A31A978B04B167263B3995AA9F5BB08
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230332e3139312e34302e302f32312d3234203d3e203338343936.roa
Signing time: Mon 01 Jul 2024 01:05:32 +0000
ROA not before: Mon 01 Jul 2024 01:00:32 +0000
ROA not after: Mon 30 Jun 2025 01:05:32 +0000
asID: 38496
IP address blocks: 203.191.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:83:b3:7d:4a:31:a9:78:b0:4b:16:72:63:b3:99:5a:a9:f5:bb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Jul 1 01:00:32 2024 GMT
Not After : Jun 30 01:05:32 2025 GMT
Subject: CN=085A59D0E31E8250EBF844B12AF6A13376C67736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:43:c9:82:39:e8:44:0d:87:ce:04:0f:ac:
24:40:75:20:c3:d8:71:ec:7b:ce:04:c7:aa:3a:52:
82:80:0f:22:19:87:db:c6:2e:e7:5a:8e:41:89:21:
88:60:36:e8:ad:df:55:0e:44:2a:33:76:86:5d:1f:
83:f8:9a:10:1d:01:10:6b:83:0c:a1:57:c7:68:b5:
0c:00:2a:22:02:bc:db:27:cf:72:e2:cf:cb:51:64:
84:01:e4:54:64:70:67:f5:08:dc:aa:69:92:3c:a5:
b4:9d:dd:52:52:2a:a4:6a:a7:5b:89:28:5e:d2:b4:
c4:44:55:46:a2:6c:19:9b:1d:fd:1c:a6:7c:a9:c5:
e3:a5:6d:41:f9:13:72:d1:4c:b4:74:1c:bc:61:e8:
e7:96:14:7a:cd:1f:6d:4f:73:19:b6:8a:91:f1:0b:
c8:95:e7:0e:61:36:45:83:01:55:b3:d4:5d:36:19:
30:18:6c:52:93:fc:03:48:98:09:b1:a2:6c:44:66:
f8:31:4c:97:da:35:63:8a:59:b8:c1:17:a0:c6:bc:
05:34:3a:e1:52:5b:92:39:3b:2c:37:ad:b9:d7:09:
26:db:2e:54:ac:f7:6f:34:bf:35:cc:6d:f0:a5:3d:
98:55:c9:be:30:42:5f:4a:b3:95:63:e2:d3:46:22:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5A:59:D0:E3:1E:82:50:EB:F8:44:B1:2A:F6:A1:33:76:C6:77:36
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230332e3139312e34302e302f32312d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.191.40.0/21
Signature Algorithm: sha256WithRSAEncryption
53:9e:0c:82:43:f5:54:2f:b2:2a:bd:61:80:44:7e:83:27:04:
2d:3c:32:c6:90:5c:89:20:1a:eb:db:5f:29:49:19:69:d2:e8:
d1:68:f6:cc:65:3d:28:eb:0e:7d:c3:74:fb:a4:37:bf:b3:9d:
ce:6c:be:58:de:e6:8c:d1:0d:2e:65:63:81:2f:f6:d8:a0:00:
27:e4:1f:d0:9c:d9:ef:68:43:05:ed:1e:8a:a3:bf:d9:db:a6:
12:f7:98:ee:f1:e5:1e:44:df:34:7f:73:6a:f8:6a:80:1a:5d:
07:51:74:69:67:24:f9:1e:52:2d:58:ac:7e:50:b9:66:00:85:
09:2f:46:ef:62:00:dc:04:5a:0b:04:9d:e1:05:a2:69:b2:fd:
44:bf:84:c3:11:a4:72:36:c5:74:5d:08:f7:f0:59:ca:0b:14:
82:93:40:1f:85:02:a9:bc:a0:8b:a2:6b:e9:a0:61:9b:ff:cf:
94:17:d0:54:97:37:a7:77:8e:f1:96:7c:f0:b7:86:2d:dc:44:
f8:82:17:39:6b:72:63:68:ea:c0:c9:ca:f5:a7:0f:84:fb:ba:
50:d7:c3:a9:a8:95:89:ae:01:b5:4f:2c:df:37:5b:ac:fd:57:
e0:67:09:47:61:57:75:e1:29:1d:6f:fb:35:81:13:f8:69:1d:
37:7c:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:41 2025 by rpki-client