Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa
File: 3131302e3233322e36372e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: 59YLEHz1fquLI5L4peB6biUsteRVK/+91Ajwy4p4e0M=
Subject key identifier: 08:00:61:A2:CB:37:69:EA:B2:36:AA:1F:45:CA:4A:7A:4F:8D:31:CA
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 61C30D283DFED05554C5462C3814DAC6C82102E5
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa
Signing time: Fri 09 Aug 2024 10:02:23 +0000
ROA not before: Fri 09 Aug 2024 09:57:23 +0000
ROA not after: Fri 08 Aug 2025 10:02:23 +0000
asID: 23679
IP address blocks: 110.232.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c3:0d:28:3d:fe:d0:55:54:c5:46:2c:38:14:da:c6:c8:21:02:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Aug 9 09:57:23 2024 GMT
Not After : Aug 8 10:02:23 2025 GMT
Subject: CN=080061A2CB3769EAB236AA1F45CA4A7A4F8D31CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:8a:a5:0c:cb:e0:dd:00:d2:eb:d1:fb:ac:
94:cb:00:75:56:80:d9:7a:8b:c0:a1:b0:48:bf:fd:
7d:e0:c0:21:26:4b:4d:bb:30:a2:f4:60:fe:8a:be:
2c:ba:af:9c:95:4f:3e:85:44:c5:a8:bf:ca:ae:26:
ad:47:85:8d:5e:3a:07:7e:47:f4:37:04:ac:be:7c:
9f:92:a0:52:1c:0b:23:58:6b:79:ba:49:c1:71:bc:
74:65:d9:f1:46:3d:d1:5e:46:c6:74:7a:11:4b:82:
37:42:88:4a:8a:4d:d8:83:f4:ea:96:87:ef:e4:09:
82:3a:df:dc:9e:ee:1a:a9:37:d8:c4:10:8b:2a:c4:
ad:c3:81:40:7e:84:0d:cb:7b:df:b7:07:7e:84:9a:
bb:e1:92:91:66:7d:11:7d:15:c6:34:7e:b8:27:63:
d8:88:12:68:3c:c9:6e:87:64:6a:10:85:02:01:05:
33:e3:cf:38:66:ae:19:e6:21:4f:95:da:55:bd:f9:
06:47:6d:16:39:83:12:c7:a5:32:b3:da:9b:82:a4:
28:88:28:30:45:60:3e:83:72:d3:4f:9f:9f:0b:6f:
fe:e9:a3:7d:f2:60:60:ac:93:b7:c7:8a:4f:1e:26:
3d:68:12:0e:b6:1e:4d:09:8b:dd:ca:70:82:1a:5b:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:00:61:A2:CB:37:69:EA:B2:36:AA:1F:45:CA:4A:7A:4F:8D:31:CA
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.67.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0b:e3:4b:6f:62:f9:ed:49:61:83:79:16:d2:a9:0d:ba:0c:
a8:76:7a:1b:c2:b9:c5:b2:fc:40:3d:ba:7f:21:78:54:5f:ff:
1e:89:0f:4a:a2:58:98:9a:dd:63:56:c0:92:c6:4d:d8:65:4d:
2e:e9:df:7b:13:e3:f0:ab:82:04:b8:9b:09:36:5f:bc:d0:85:
21:c0:68:f5:11:17:2b:79:6b:08:af:84:c0:12:7e:e3:96:67:
29:47:fe:40:0b:f2:4c:1c:fd:39:0c:8b:4b:24:0b:f1:a1:9f:
a8:7a:7c:5e:95:d1:4b:20:2d:45:2e:fd:88:0c:3f:98:2c:e3:
ec:1e:29:7e:2b:2e:d6:d0:fa:c2:63:82:70:58:ab:12:c0:7b:
85:fa:5f:11:82:4b:1a:87:f9:80:3d:7c:6a:39:62:96:3c:c6:
ca:52:e2:4c:fc:aa:25:db:38:62:42:11:bd:1f:01:aa:10:b9:
b4:bb:81:26:3a:b1:ef:57:9a:52:c4:59:0a:0b:04:93:ab:a6:
4a:b7:4b:3f:4d:bc:2e:94:c1:54:04:44:29:9a:7b:3b:1f:17:
8c:c8:93:63:63:4c:9c:1b:d7:eb:04:38:00:ab:07:54:01:b6:
54:b4:0d:69:56:78:36:3f:55:dd:40:af:ac:96:a0:c8:9e:93:
55:59:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:24:13 2025 by rpki-client