Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e34372e39312e302f32342d3234203d3e2039333431.roa
File: 3131392e34372e39312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: epuwo9lMPS8bS02F9swSvwYSMUUP1aTxbp2ZBiUd7RA=
Subject key identifier: 5B:D0:6B:31:3F:A7:43:90:FF:DE:85:5E:4A:12:7F:90:28:86:02:E4
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 69DAC2849EB5544CB92C364F6D330DCB13BDCCFC
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e34372e39312e302f32342d3234203d3e2039333431.roa
Signing time: Wed 11 Sep 2024 12:00:02 +0000
ROA not before: Wed 11 Sep 2024 11:55:02 +0000
ROA not after: Wed 10 Sep 2025 12:00:02 +0000
asID: 9341
IP address blocks: 119.47.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:da:c2:84:9e:b5:54:4c:b9:2c:36:4f:6d:33:0d:cb:13:bd:cc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Sep 11 11:55:02 2024 GMT
Not After : Sep 10 12:00:02 2025 GMT
Subject: CN=5BD06B313FA74390FFDE855E4A127F90288602E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:85:48:10:58:05:30:86:2b:08:2c:25:0a:
f8:95:17:5f:72:88:5e:bf:b4:23:e2:e5:af:d4:f4:
62:ca:90:23:46:26:01:49:a0:fa:17:63:09:48:55:
e1:95:4c:a7:18:4d:ff:64:e2:64:97:82:0e:4d:3c:
65:23:07:80:d3:58:22:09:62:3b:0d:f1:6b:42:7f:
d0:c7:41:0f:35:a0:56:fb:51:31:50:00:0f:9f:6f:
91:d2:34:ed:84:96:49:ba:94:29:e2:ca:5d:af:71:
9c:cc:be:e8:6c:a7:c8:03:31:ef:68:ca:60:ad:3d:
1d:f3:29:f8:58:fa:7f:f0:87:93:db:b6:fa:1f:e5:
dc:b1:0b:f7:db:22:ff:7e:08:81:84:86:90:8b:99:
83:79:76:b6:dc:64:48:62:10:d5:01:fe:29:87:2e:
29:48:dc:1b:1a:84:43:2f:04:26:45:da:5e:1c:81:
dd:94:a1:bc:76:31:d4:b4:ef:a8:ab:f3:9b:a2:1b:
5e:15:49:38:0d:38:a8:5f:c1:6b:8b:83:2e:a6:0f:
3b:5d:74:af:9f:0f:72:d9:c2:2c:15:aa:9b:2e:15:
af:f9:a4:09:41:76:7a:1d:31:27:2d:40:1a:38:39:
71:f1:be:0e:61:4d:5b:e4:2b:af:d2:9c:7b:c6:1e:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:6B:31:3F:A7:43:90:FF:DE:85:5E:4A:12:7F:90:28:86:02:E4
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e34372e39312e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
15:81:00:fe:2a:da:b6:52:a6:08:cd:4a:07:6d:92:5b:3f:76:
6f:59:0c:c5:a5:59:ba:09:17:8b:37:6e:a3:5d:e3:70:b8:56:
3f:0f:00:75:48:77:21:8c:55:6c:1b:36:56:80:14:d7:dc:61:
48:ff:1b:83:5e:35:5f:21:c7:7e:48:81:60:b8:01:96:28:1e:
d3:91:8c:7a:6d:0f:6f:55:2a:be:68:fa:f6:e2:92:05:30:29:
ef:0e:b9:bb:60:0a:7f:e4:5f:9a:08:46:1f:e0:61:33:aa:c1:
16:70:f0:58:d6:ce:84:77:35:45:a1:e0:33:aa:01:bf:55:af:
a6:21:19:d1:82:79:b0:93:01:fb:54:16:5a:66:48:d5:0e:68:
08:d8:04:89:78:d5:70:15:c2:32:20:72:dd:09:3e:73:6f:e7:
88:d8:cb:80:69:58:30:82:f3:60:87:40:a3:e4:21:c3:da:ed:
28:60:f2:26:88:1f:84:a1:f1:0e:be:e3:ca:d8:4b:7b:f8:75:
55:2f:ad:18:50:79:c0:53:24:d6:ba:d9:60:56:92:1e:9f:9b:
f0:01:aa:eb:0a:c2:28:7d:65:2c:ff:40:da:b8:fb:4f:1f:05:
e1:7f:1e:3d:1c:fe:17:8d:f0:17:76:1d:7f:6b:6f:20:a0:3f:
c9:16:a4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:15:52 2025 by rpki-client