Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134362e302f32342d3234203d3e203338343936.roa
File: 3232332e32372e3134362e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: Otp614sWAYz8pRe5UkDa+JACWc43tXvLdEI5Bk7SsJM=
Subject key identifier: 6A:73:36:B1:B9:0B:5C:BA:25:70:5B:F4:46:2E:D7:AF:DB:30:98:69
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 248F46BCE653E74A2B2EE5D5C18C539A1B15BDE5
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134362e302f32342d3234203d3e203338343936.roa
Signing time: Fri 24 May 2024 04:00:02 +0000
ROA not before: Fri 24 May 2024 03:55:02 +0000
ROA not after: Fri 23 May 2025 04:00:02 +0000
asID: 38496
IP address blocks: 223.27.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8f:46:bc:e6:53:e7:4a:2b:2e:e5:d5:c1:8c:53:9a:1b:15:bd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: May 24 03:55:02 2024 GMT
Not After : May 23 04:00:02 2025 GMT
Subject: CN=6A7336B1B90B5CBA25705BF4462ED7AFDB309869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:63:c2:a2:7c:90:37:4e:79:da:33:80:6e:
cc:46:62:98:44:fa:07:fc:53:12:b8:19:dc:15:c7:
5a:de:62:f4:60:d6:a4:09:f7:62:b4:f6:42:df:e1:
b5:b9:08:ed:4b:20:77:ed:8a:a5:3a:ae:f3:b3:c3:
eb:bf:8a:72:ca:46:61:ec:33:8b:ca:94:3d:44:59:
07:b9:f4:af:5f:17:d9:ee:d8:5b:7f:3b:fe:81:38:
e2:26:a4:2f:b4:7e:b5:ba:7a:c0:f6:d4:92:2f:15:
e4:2f:57:08:e9:6c:4b:52:c8:f0:e1:fd:96:21:82:
91:ab:6f:de:74:6c:f6:f9:61:69:75:63:bc:92:b0:
0c:99:d0:b7:3e:d9:be:6b:93:cc:87:fb:66:45:09:
2c:7d:9f:0b:8a:14:67:4a:12:41:cf:f1:d9:de:70:
0b:e7:37:b2:b9:33:cf:2d:51:0a:5e:dd:07:53:af:
6e:c7:89:84:ff:40:f8:38:d1:31:8d:03:35:bd:3a:
cf:5f:01:e1:74:22:5d:13:d1:16:0a:1d:65:4f:78:
46:4a:da:21:15:df:b3:30:28:e7:66:02:52:08:fb:
a5:ff:0e:d7:7d:a1:16:89:a5:a2:21:f6:7e:1f:75:
2a:2f:03:58:03:b2:76:30:eb:69:85:88:40:3c:3e:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:36:B1:B9:0B:5C:BA:25:70:5B:F4:46:2E:D7:AF:DB:30:98:69
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3134362e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.146.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fb:b8:a2:dd:9d:7c:cf:91:1e:be:76:8f:12:3f:90:44:3e:
52:5e:d7:d7:84:55:86:64:8b:74:e4:3b:fc:2a:a8:b2:79:86:
e6:2f:d7:2c:d9:7f:16:f5:ea:c7:6f:af:5b:15:32:67:07:bf:
68:c5:f9:b7:87:3a:10:55:b8:2f:5f:0e:61:bd:e1:ae:c1:61:
c1:c4:50:59:0f:58:ea:97:4b:00:47:44:2c:2d:d4:be:fd:ac:
e9:c6:b4:ff:01:fe:e3:6e:ba:65:89:31:40:74:98:97:6c:27:
e9:2a:4e:b4:86:8a:3b:0a:3a:0d:1a:ae:2f:1f:72:c0:13:00:
ba:29:b8:13:85:28:68:1a:d9:35:1a:4c:31:ce:1d:53:cc:5d:
d7:36:4f:98:d6:dc:5a:ac:af:b0:3a:04:6c:31:de:05:da:1d:
87:d1:1d:ea:e8:39:8a:ae:99:b2:20:79:2d:c2:01:2b:d0:78:
b3:69:89:32:8d:68:36:cf:09:e5:44:5d:ea:ab:93:bd:a3:4c:
73:fb:ce:91:ff:c9:24:25:d3:b2:a9:78:c8:43:a2:00:ad:38:
c2:6d:7d:c3:8f:59:a8:eb:99:a0:95:ea:52:fe:fa:06:7f:47:
cc:ce:74:49:8c:6e:38:cd:b2:57:ec:67:30:e0:3c:fa:6c:97:
0d:33:6b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:21 2025 by rpki-client