Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135342e302f32332d3234203d3e203338343936.roa
File: 3232332e32372e3135342e302f32332d3234203d3e203338343936.roa (raw, json)
Hash identifier: GDlqvSPwJzmVJ8saWXaVEA8D/Q4dK98P38H2NfV/Lfg=
Subject key identifier: 4B:0F:50:CA:E0:D4:AF:34:16:8A:64:7D:ED:82:69:4B:85:BA:E5:41
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 0560F0A2F1B653D1B7A5F0C88DD2DEEA9B26A7CF
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135342e302f32332d3234203d3e203338343936.roa
Signing time: Thu 30 May 2024 02:00:47 +0000
ROA not before: Thu 30 May 2024 01:55:47 +0000
ROA not after: Thu 29 May 2025 02:00:47 +0000
asID: 38496
IP address blocks: 223.27.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:60:f0:a2:f1:b6:53:d1:b7:a5:f0:c8:8d:d2:de:ea:9b:26:a7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: May 30 01:55:47 2024 GMT
Not After : May 29 02:00:47 2025 GMT
Subject: CN=4B0F50CAE0D4AF34168A647DED82694B85BAE541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5a:a0:ce:d7:e8:26:aa:a6:6a:6b:b4:fc:f6:
e6:e2:57:44:30:9a:22:af:8c:1d:2a:7d:15:aa:47:
b9:d1:56:66:3b:63:e4:e5:d1:bb:4c:f2:1d:b7:81:
a3:2f:03:6e:3e:30:9f:49:0f:43:a5:2d:6e:5b:74:
99:a0:0d:d4:8c:6f:1e:64:6d:47:09:e5:76:46:0e:
9a:1e:f7:06:a1:c4:9a:c3:16:0b:33:6f:2a:62:b9:
d0:d0:98:67:3b:e9:00:8b:fd:57:df:b2:1a:96:bd:
c5:b4:37:54:44:27:9c:32:12:92:07:52:26:22:d8:
da:31:64:21:f4:28:0e:ce:f9:99:0d:ec:8d:64:c7:
46:45:72:3b:0e:28:4f:29:3d:c6:ee:14:b4:a8:91:
dc:d4:00:32:be:7b:dc:73:0f:e1:9d:50:6d:fb:4d:
1c:b9:b7:8d:07:b7:b2:46:bf:68:3c:1c:a2:77:10:
28:0d:44:bf:b0:74:c7:13:86:27:51:bd:65:0e:a8:
1c:65:a9:ef:4b:b0:d3:89:0a:3b:d3:75:79:3a:8c:
b6:fe:7c:76:e0:72:91:6d:cd:6f:83:8e:28:c0:f7:
52:a6:69:8f:7e:48:18:dd:d9:bc:80:40:88:64:5d:
50:3f:46:49:d0:b1:20:f8:8e:1c:9a:c2:9c:66:12:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0F:50:CA:E0:D4:AF:34:16:8A:64:7D:ED:82:69:4B:85:BA:E5:41
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3232332e32372e3135342e302f32332d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.27.154.0/23
Signature Algorithm: sha256WithRSAEncryption
85:32:70:b5:34:09:26:79:0b:5e:d8:9f:bc:46:0e:71:1c:3b:
a2:04:70:e1:c9:51:9a:11:f8:1f:c0:e2:13:df:8b:84:0f:f3:
cf:d6:74:2e:6a:6a:9c:a5:e6:b9:7e:a5:73:06:16:84:be:38:
34:65:9f:37:07:c3:af:6b:15:8c:ed:39:e6:2b:30:06:b4:0e:
ec:7c:d1:51:69:3c:3b:d7:47:3c:c3:3f:cf:c1:50:3a:21:dd:
a4:d1:ee:28:9f:50:f4:70:14:11:2f:b7:6e:c5:a1:d2:fc:e0:
8d:01:cb:1e:7f:2a:d2:dc:aa:d7:11:ff:d7:a1:dd:1e:38:d2:
8d:a5:ad:27:1e:32:b0:3c:b7:9e:d5:de:49:8b:b5:d7:a1:04:
75:7f:7a:a0:90:96:3d:db:b0:ea:41:b0:e7:d1:f8:10:09:e5:
29:18:36:91:fb:8c:26:cf:0d:87:84:aa:9f:a1:7e:48:30:e0:
00:9f:ef:3f:b8:ea:15:9e:be:9e:4d:fb:50:ab:ec:16:0b:11:
d4:8d:02:1f:9b:a4:92:2b:df:b5:52:e6:6d:bd:db:1d:9c:50:
1b:cf:61:ab:93:26:21:bc:23:3f:bd:5a:6c:e1:2b:ee:4f:b4:
d6:df:87:92:75:a1:67:48:20:ba:b2:80:4d:58:fe:39:fc:50:
1d:e3:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:44 2025 by rpki-client