Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: lnzYb3o32JzLmLh0jnxBUN0b8SRS5jjaBrljKWPG6Qo=
Subject key identifier: A8:7F:A5:58:FA:18:FF:21:D0:E4:8B:40:10:8B:66:16:A9:EF:72:79
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 6DA2B8B0BE02658AF20F165C590BC278692E98B2
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa
Signing time: Sun 21 Apr 2024 05:00:01 +0000
ROA not before: Sun 21 Apr 2024 04:55:01 +0000
ROA not after: Sun 20 Apr 2025 05:00:01 +0000
asID: 9341
IP address blocks: 119.252.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a2:b8:b0:be:02:65:8a:f2:0f:16:5c:59:0b:c2:78:69:2e:98:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 21 04:55:01 2024 GMT
Not After : Apr 20 05:00:01 2025 GMT
Subject: CN=A87FA558FA18FF21D0E48B40108B6616A9EF7279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:85:7c:63:9b:4d:75:87:de:0a:ee:69:23:
c4:f7:2d:9e:8c:db:35:a9:cf:27:d0:48:a2:da:92:
49:cc:d3:1a:7b:f7:ed:7b:87:7e:36:74:30:ef:27:
14:8d:9d:16:e7:ba:1b:7a:9d:35:d3:d7:bb:4f:c7:
7b:0a:67:f2:54:93:7f:57:62:73:da:4e:0f:eb:28:
84:06:dd:2a:6a:c3:6d:72:75:aa:70:ff:9f:f7:ea:
42:b0:bc:ac:94:d1:ee:19:a8:48:74:8c:73:e1:2e:
1d:9f:e4:be:f8:40:af:c5:98:47:b5:af:4b:32:b2:
8b:34:a5:98:47:b6:42:3d:27:d8:44:ef:f8:7e:7a:
0a:40:50:96:9b:d5:51:0f:57:1f:2a:dd:da:5d:08:
06:af:fc:5d:42:e6:bf:76:d8:a0:4e:4d:fd:00:5a:
f4:78:fc:d6:49:26:c7:fe:0e:59:11:91:23:e8:91:
6d:41:91:1c:44:9e:46:85:d1:fd:6b:68:01:b2:0f:
43:99:3e:1d:32:e2:dc:ad:86:6e:5d:12:d0:ba:e0:
60:44:d0:52:74:8d:b3:3a:4d:a7:3b:fc:d6:ef:0e:
27:a9:e2:09:88:46:79:2d:de:34:5a:1c:94:32:55:
97:39:38:43:b8:70:2c:0d:05:29:2e:6b:24:9f:11:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:A5:58:FA:18:FF:21:D0:E4:8B:40:10:8B:66:16:A9:EF:72:79
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137312e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.171.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a3:fc:23:93:f8:ac:8d:fc:52:32:6e:f0:14:4b:96:31:10:
9f:6f:be:91:fd:76:a7:06:b4:ba:e1:62:ab:5c:7a:b6:3f:02:
bc:72:0e:1a:9b:42:72:d3:92:23:f0:2e:c8:c3:c5:b1:20:d7:
4f:97:78:28:e7:4a:d6:41:af:4b:fa:4c:fe:54:1a:2f:f8:b8:
27:b1:d1:ff:78:3d:81:89:1c:0a:7d:00:d6:5a:ec:ca:9d:a3:
f7:3e:87:9f:37:52:84:82:6e:f6:d9:7b:d0:f2:e1:de:cb:85:
ca:4f:e3:a9:f5:bd:d1:77:0e:f4:67:1d:c0:d3:58:0b:7b:ea:
a6:4b:fe:1f:fc:01:42:5a:50:be:4e:7a:04:f9:c6:ce:f7:b2:
ff:e9:f4:70:d0:79:33:59:8f:94:54:41:70:09:cb:79:8f:14:
ad:a4:46:04:9f:17:ef:0e:51:ac:01:6b:2c:42:41:54:aa:6e:
97:d0:81:37:6c:dc:ef:e1:32:a1:98:94:14:76:9c:97:5b:b8:
86:06:0a:1f:68:c8:b2:e6:f9:9e:01:34:ef:bd:81:f3:3e:36:
6f:45:ac:b0:0e:6e:84:fa:61:ab:7c:48:24:d5:72:18:5b:a0:
7b:0f:c5:bd:de:e2:09:48:7b:29:eb:80:89:83:67:8a:e2:5b:
b0:ef:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:26 2025 by rpki-client