Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3132352e36322e39322e302f32322d3234203d3e20313338383032.roa
File: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (raw, json)
Hash identifier: S3JK4araZ+jpsxXzLLDPElWiJVYLVpgzU14AHPJkLek=
Subject key identifier: D7:68:6A:C5:AC:2C:8C:44:9B:D6:9F:96:E5:B3:14:17:DA:10:7C:1F
Certificate issuer: /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial: 1CF1AC1F14B3A97157E061AECBE2B8AA0E7696AA
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3132352e36322e39322e302f32322d3234203d3e20313338383032.roa
Signing time: Mon 01 Jul 2024 01:04:37 +0000
ROA not before: Mon 01 Jul 2024 00:59:37 +0000
ROA not after: Mon 30 Jun 2025 01:04:37 +0000
asID: 138802
IP address blocks: 125.62.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f1:ac:1f:14:b3:a9:71:57:e0:61:ae:cb:e2:b8:aa:0e:76:96:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Validity
Not Before: Jul 1 00:59:37 2024 GMT
Not After : Jun 30 01:04:37 2025 GMT
Subject: CN=D7686AC5AC2C8C449BD69F96E5B31417DA107C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:7b:a1:1f:ec:83:a9:98:f2:f7:cc:41:dc:
ea:79:95:0b:6b:71:76:80:d0:24:99:09:39:f1:c6:
53:76:27:3f:a3:52:51:4b:0e:a6:22:e7:47:c1:32:
76:52:a9:cc:be:30:af:a4:3d:4b:83:36:bb:f0:40:
b9:53:86:9d:5c:9f:d3:39:29:62:06:1f:e8:48:b7:
6d:3e:95:3d:fa:e1:0a:17:71:f7:a4:b2:a0:87:d4:
d6:ad:06:99:9c:55:55:c6:40:a1:ba:bf:21:a9:52:
d1:ea:e0:27:bc:b4:a2:ba:f4:92:ba:39:23:c6:92:
b8:aa:8a:31:f5:f6:de:53:0d:2f:ce:08:59:26:48:
4b:3d:de:91:31:79:40:8d:0d:20:0e:8d:6f:96:3e:
1a:8a:c7:92:1d:43:d7:6b:00:e0:56:20:7c:51:8d:
ee:b2:07:5b:a9:7b:5e:7e:95:a4:8d:c3:10:1a:63:
14:64:ad:fc:6c:99:36:bb:bb:29:69:b3:0c:79:b8:
84:07:72:c4:a1:d0:bd:e8:c7:d9:6d:7d:ff:e2:6c:
bc:33:31:d4:2c:ef:57:e2:40:e9:8c:76:09:7b:16:
b5:bc:2c:c6:7c:cc:f3:d5:57:bc:b8:3f:69:78:87:
d2:2f:ff:a0:24:a2:a2:b0:21:ab:b2:f2:e5:96:ab:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:68:6A:C5:AC:2C:8C:44:9B:D6:9F:96:E5:B3:14:17:DA:10:7C:1F
X509v3 Authority Key Identifier:
keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3132352e36322e39322e302f32322d3234203d3e20313338383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.62.92.0/22
Signature Algorithm: sha256WithRSAEncryption
53:90:db:62:d4:ea:77:78:40:f8:1e:6e:71:e9:b2:33:20:75:
d9:ef:0e:b2:fa:a5:bb:bd:4f:be:00:51:5f:de:79:00:f7:ac:
92:67:5e:25:7f:5a:56:ef:53:14:bf:8a:cf:99:d5:42:e2:fc:
02:15:c4:ca:f5:45:89:b7:01:b9:3a:6f:3e:59:89:c2:ec:85:
1a:9c:6d:c2:a4:f5:70:b9:79:f1:d5:26:59:6b:8a:7a:d2:8a:
ec:ce:05:e2:a4:3d:16:42:e6:7c:78:fc:55:c7:bc:9c:19:20:
d5:77:41:21:03:0d:61:c6:00:83:b4:5b:84:5a:20:f1:f3:f5:
09:4e:61:5d:48:d4:27:21:85:e9:87:34:16:a9:e6:c7:b4:b3:
36:03:5a:ac:15:5d:3f:b8:26:d1:12:16:e8:9e:28:9b:69:20:
18:9d:b9:32:95:39:01:67:59:a4:03:df:e2:b4:7c:33:f8:44:
09:27:ef:62:b5:11:db:33:41:51:9e:3e:3a:89:50:ae:fb:aa:
b7:db:e0:46:e2:a0:d1:23:f8:18:c4:0c:e5:e5:28:f8:70:6d:
f6:e5:f8:56:cc:ff:0c:5d:98:4c:cf:e6:6a:05:61:ca:b6:6b:
ca:bc:8a:df:35:3e:dc:93:22:05:6e:ed:94:5c:5d:93:b5:a8:
01:2a:7c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:12 2025 by rpki-client