Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e312e302f32342d3234203d3e20313532303630.roa
File: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (raw, json)
Hash identifier: oj9chbs5OVG53Fer0emzdLkJa1HgsbB46XHGonJX/no=
Subject key identifier: 88:69:F9:2B:1C:F5:5E:32:96:DE:8F:55:2A:8F:43:70:29:C2:03:C4
Certificate issuer: /CN=8762A545785B5A6352FB7DA20689CECA8A47432E
Certificate serial: 7B64AA23AAB6550BC3DF375C700DB2A0D11D8E91
Authority key identifier: 87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e312e302f32342d3234203d3e20313532303630.roa
Signing time: Tue 10 Dec 2024 10:00:01 +0000
ROA not before: Tue 10 Dec 2024 09:55:01 +0000
ROA not after: Tue 09 Dec 2025 10:00:01 +0000
asID: 152060
IP address blocks: 113.192.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:64:aa:23:aa:b6:55:0b:c3:df:37:5c:70:0d:b2:a0:d1:1d:8e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8762A545785B5A6352FB7DA20689CECA8A47432E
Validity
Not Before: Dec 10 09:55:01 2024 GMT
Not After : Dec 9 10:00:01 2025 GMT
Subject: CN=8869F92B1CF55E3296DE8F552A8F437029C203C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:a9:52:44:11:18:7b:af:5c:de:02:3f:8a:
a9:94:1d:cd:1d:e3:fd:ee:22:53:b5:c3:9d:2e:4f:
70:79:d4:63:02:4c:d0:c8:89:a2:e1:40:e8:e9:76:
a3:be:72:19:4a:a5:33:c8:e8:aa:a6:dd:c5:5c:cc:
7e:c2:c0:cc:23:36:63:bd:73:dc:31:7e:e9:c2:0f:
d4:f6:dd:89:c3:f8:8c:38:3e:fc:30:e7:44:f3:70:
c9:58:9a:f6:a4:25:c9:4c:5f:81:d2:ca:42:37:32:
70:b1:19:43:c0:60:51:f5:ce:6a:40:10:6a:a7:f7:
51:91:46:12:87:5c:d4:57:87:2d:3c:37:92:28:b5:
4e:72:c4:9f:31:af:12:4e:c5:15:2d:35:f9:ab:56:
99:8c:62:56:84:a3:71:31:d7:2c:b9:f3:b8:bf:10:
aa:e2:df:e7:d9:a6:95:e8:c0:6e:4f:8b:8d:65:16:
39:cf:ed:7f:35:24:ab:00:f9:ce:0d:a1:3d:10:9c:
61:c6:89:dd:a6:2f:bf:e9:b3:37:d5:dc:e5:84:b3:
a9:23:40:43:3a:73:33:6d:fc:81:be:2e:c3:c6:d0:
1f:79:2a:f9:1c:27:d6:0b:8e:67:84:85:ef:c4:4b:
8e:75:4e:c3:60:13:08:6e:e6:f7:46:e3:af:9f:86:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:69:F9:2B:1C:F5:5E:32:96:DE:8F:55:2A:8F:43:70:29:C2:03:C4
X509v3 Authority Key Identifier:
keyid:87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e312e302f32342d3234203d3e20313532303630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e2:97:95:5e:33:30:c4:20:24:fb:e3:75:43:bc:c5:36:ba:
84:1d:e1:bb:55:83:c1:1f:b1:c5:88:6a:4d:f6:8d:54:c1:fb:
bf:73:a3:c6:c2:e9:c4:f2:ab:0b:d9:68:1c:d0:b4:10:78:e8:
e3:53:c8:45:12:d3:34:d3:b3:15:04:e2:0f:e7:74:38:7b:3b:
ce:04:7b:ad:04:43:a4:13:18:20:44:ed:48:74:c8:dd:18:b8:
6c:03:32:0e:47:cc:4f:77:7b:26:9e:3e:d0:24:56:c4:73:10:
23:cf:54:d5:b9:fa:63:02:bc:c2:ed:39:35:e9:82:b8:9f:30:
ec:3f:6b:ab:a1:03:69:06:73:a5:f7:fd:ac:c2:64:94:6b:9c:
52:a7:46:12:9e:f7:58:03:a3:01:e8:10:ae:e7:61:cb:0a:e3:
f6:e2:27:32:34:6f:fe:2c:48:75:66:9f:e5:cf:71:20:21:7c:
25:3a:6e:91:63:4f:31:7f:61:3f:73:a4:ab:8a:dd:10:ee:95:
5b:be:3a:4f:bc:58:f6:f1:62:12:6f:8c:89:76:61:c6:52:21:
8f:6e:15:58:13:65:3b:b3:a1:ec:b7:0c:e3:8e:03:a1:ba:87:
d7:48:49:26:4f:71:f4:9d:2f:7c:b7:52:7f:6c:fe:a0:d9:5d:
12:ee:ba:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:02:59 2025 by rpki-client