Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: iMXs7GfY5u7bngjr3iOEFH0msWvdsFxg4ue+MtZVsMU=
Subject key identifier: BB:BD:56:21:C0:22:EE:4C:1A:FC:90:6D:C2:2F:75:05:EE:03:FD:0E
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 6C577A72350452B36A194BA9A00ED90A7AB1DF98
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa
Signing time: Sun 21 Apr 2024 06:00:01 +0000
ROA not before: Sun 21 Apr 2024 05:55:01 +0000
ROA not after: Sun 20 Apr 2025 06:00:01 +0000
asID: 9341
IP address blocks: 119.252.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:57:7a:72:35:04:52:b3:6a:19:4b:a9:a0:0e:d9:0a:7a:b1:df:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 21 05:55:01 2024 GMT
Not After : Apr 20 06:00:01 2025 GMT
Subject: CN=BBBD5621C022EE4C1AFC906DC22F7505EE03FD0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:13:de:d9:a3:48:ca:78:a5:d4:ee:ab:9e:
60:65:b0:f9:fd:23:dc:1e:fe:3f:80:e2:59:4d:f8:
40:91:63:58:e0:53:d2:b4:56:90:b0:b8:98:3c:c1:
68:c9:37:0b:6b:73:af:03:9e:a8:03:8d:13:b6:56:
54:57:9b:7e:1e:27:7f:a6:c8:7a:e5:22:0d:f2:80:
a7:ea:6c:3c:fc:4c:98:0d:3b:5a:d9:9d:99:ac:fb:
18:f7:38:6f:ac:20:f0:d7:e1:d9:01:37:43:3f:d5:
34:19:9e:b9:de:3d:5a:41:a1:30:dc:67:ab:50:02:
2b:2d:26:ff:23:52:ee:8b:4f:1a:1e:33:f0:cc:12:
3a:bd:d9:13:d1:9b:a6:69:61:e5:ee:dd:5a:88:69:
c3:43:3f:94:1c:f0:83:95:52:9d:21:92:e9:0c:11:
ed:2a:d4:3c:7f:d4:92:b8:a7:11:29:49:bd:be:d1:
3d:b2:77:70:91:84:bd:7d:c8:60:e8:b4:56:34:84:
99:cb:ad:52:0e:23:f8:c3:ac:db:47:71:e1:09:9a:
98:11:c6:d0:13:3a:27:e9:5a:95:e2:7e:e9:85:c9:
cc:b4:87:b9:09:42:f7:80:52:f8:6b:17:f4:88:f0:
97:35:1c:d2:8a:85:7d:00:22:51:62:75:31:13:0f:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:56:21:C0:22:EE:4C:1A:FC:90:6D:C2:2F:75:05:EE:03:FD:0E
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d1:4a:11:ed:28:82:69:38:87:9d:88:51:10:a0:1a:e0:fa:
87:50:0e:ab:f6:4d:a6:10:c3:54:50:c4:1a:ef:b9:72:93:39:
15:66:19:2e:67:80:d9:ba:b5:05:d9:27:45:67:94:ef:fc:a2:
e0:b1:71:ff:9f:3f:03:2d:8e:ae:0a:bc:66:50:39:a8:d9:e3:
b1:fc:5e:05:d8:37:da:bd:25:b4:1d:fa:e0:bc:37:ed:79:35:
8d:43:f1:28:05:01:a4:74:c4:c9:c8:1c:b9:a2:e7:5b:60:d5:
f0:8b:dc:c7:54:d7:95:7a:69:85:05:36:c3:42:37:da:5b:4d:
28:98:7f:c4:c5:00:78:5c:a4:c0:8b:39:fb:2a:ba:39:b2:2e:
61:3c:3f:a5:e4:58:87:de:10:d7:7b:33:dc:e8:e3:80:1c:a2:
46:f7:26:23:60:67:4b:74:a5:c3:e1:2b:f9:61:52:52:c5:08:
f7:e7:d4:02:3f:0b:42:55:6b:93:0c:b0:99:31:e7:60:e2:19:
18:b4:a3:2f:a0:da:06:de:f5:d5:95:50:c0:c4:d7:56:69:29:
6e:42:9e:93:58:0b:0b:f5:86:ac:44:16:c4:54:25:fc:0e:58:
3b:11:64:d4:38:bb:eb:82:b7:a6:4f:c1:ec:15:7f:61:11:f8:
4d:da:bc:27
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbFd6cjUEUrNqGUupoA7ZCnqx35gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNDA0MjEwNTU1MDFaFw0yNTA0MjAwNjAwMDFaMDMxMTAvBgNV
BAMTKEJCQkQ1NjIxQzAyMkVFNEMxQUZDOTA2REMyMkY3NTA1RUUwM0ZEMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUxPe2aNIynil1O6rnmBlsPn9
I9we/j+A4llN+ECRY1jgU9K0VpCwuJg8wWjJNwtrc68DnqgDjRO2VlRXm34eJ3+m
yHrlIg3ygKfqbDz8TJgNO1rZnZms+xj3OG+sIPDX4dkBN0M/1TQZnrnePVpBoTDc
Z6tQAistJv8jUu6LTxoeM/DMEjq92RPRm6ZpYeXu3VqIacNDP5Qc8IOVUp0hkukM
Ee0q1Dx/1JK4pxEpSb2+0T2yd3CRhL19yGDotFY0hJnLrVIOI/jDrNtHceEJmpgR
xtATOifpWpXifumFycy0h7kJQveAUvhrF/SI8Jc1HNKKhX0AIlFidTETD11ZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUu71WIcAi7kwa/JBtwi91Be4D/Q4wHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8pzANBgkqhkiG
9w0BAQsFAAOCAQEAP9FKEe0ogmk4h52IURCgGuD6h1AOq/ZNphDDVFDEGu+5cpM5
FWYZLmeA2bq1BdknRWeU7/yi4LFx/58/Ay2Orgq8ZlA5qNnjsfxeBdg32r0ltB36
4Lw37Xk1jUPxKAUBpHTEycgcuaLnW2DV8Ivcx1TXlXpphQU2w0I32ltNKJh/xMUA
eFykwIs5+yq6ObIuYTw/peRYh94Q13sz3OjjgByiRvcmI2BnS3Slw+Er+WFSUsUI
9+fUAj8LQlVrkwywmTHnYOIZGLSjL6DaBt711ZVQwMTXVmkpbkKek1gLC/WGrEQW
xFQl/A5YOxFk1Di764K3pk/B7BV/YRH4Tdq8Jw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:30 2025 by rpki-client