Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3232203d3e2039333431.roa
File: 3132312e3130302e31362e302f32322d3232203d3e2039333431.roa (raw, json)
Hash identifier: nMVU72Fqoz2B+qguRP4HTY/V1arlGMbz+thQRe2Hvq4=
Subject key identifier: 6A:43:34:BD:A2:D6:8A:93:2D:63:34:A7:0B:3F:93:1D:E4:14:86:64
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 601196DEA8802ABF765F323DCBF8616A32EA5F25
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3232203d3e2039333431.roa
Signing time: Tue 04 Jun 2024 05:01:56 +0000
ROA not before: Tue 04 Jun 2024 04:56:56 +0000
ROA not after: Tue 03 Jun 2025 05:01:56 +0000
asID: 9341
IP address blocks: 121.100.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:11:96:de:a8:80:2a:bf:76:5f:32:3d:cb:f8:61:6a:32:ea:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Jun 4 04:56:56 2024 GMT
Not After : Jun 3 05:01:56 2025 GMT
Subject: CN=6A4334BDA2D68A932D6334A70B3F931DE4148664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:b1:1a:8c:da:7a:0e:20:31:60:a9:9a:0d:
db:9c:fa:3c:2d:9f:01:e7:6c:3a:e8:d6:d0:06:7e:
c0:d7:54:ac:69:28:30:c5:ed:2d:ba:46:6f:10:46:
c6:af:4b:20:c0:7e:29:99:40:9c:f8:3f:88:4c:0f:
29:c0:ae:17:4f:8e:00:bb:8e:cc:29:ab:81:d7:18:
00:90:af:55:2b:e6:fd:01:52:c2:88:21:3b:9f:73:
86:a4:d6:63:35:76:87:5d:0b:1b:0c:47:66:25:e2:
a7:75:84:a3:85:bd:e5:ec:c0:90:89:ba:75:8f:ee:
a6:68:7d:e3:55:bb:00:f0:73:6c:eb:cb:1d:ef:8d:
d6:1c:98:2f:71:6c:ba:64:39:e4:6d:f6:aa:66:b8:
9e:d3:b2:41:be:20:7a:81:fb:48:a0:15:92:f4:f3:
20:8d:d4:b4:53:e9:a4:6b:52:20:de:4b:27:b5:1a:
c8:f3:9a:da:29:f1:88:73:1a:21:65:1f:f9:5c:ae:
c0:79:8b:b2:37:dd:0c:c5:5e:69:5e:bc:8e:ef:74:
8e:28:d4:38:c7:49:10:8b:f9:f6:23:50:ef:63:23:
fa:a7:c7:7c:c5:e3:21:62:74:7f:a7:30:3b:94:73:
ee:85:7f:54:9b:46:1f:5f:6b:b5:fd:2b:9c:f1:f5:
5f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:34:BD:A2:D6:8A:93:2D:63:34:A7:0B:3F:93:1D:E4:14:86:64
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e31362e302f32322d3232203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.100.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:d5:a1:a2:86:52:a4:02:83:36:72:6b:7b:43:36:00:a1:2c:
9a:b3:7c:01:d5:51:d1:07:9e:1a:05:1d:64:29:de:15:8e:6d:
0c:69:c7:39:33:7b:41:af:be:f8:40:46:cf:8a:21:b7:a5:2a:
3a:c3:d4:b6:a0:6d:57:21:91:bb:a4:de:b4:b4:ab:f5:8a:61:
a4:8b:55:6f:b3:8d:88:03:1d:13:fe:f0:2a:81:34:1d:1c:05:
0b:2e:e5:4f:a9:aa:f9:f8:51:98:63:d3:01:24:ae:1f:01:d9:
35:60:b4:4e:96:43:c3:02:42:53:b7:28:6f:d3:e3:40:5e:68:
aa:3c:62:2c:56:77:01:13:1e:4a:24:53:51:9e:fc:f8:e8:3f:
df:a9:d2:f5:9c:b8:bf:16:ca:b0:ee:8c:7a:cb:66:0a:88:ab:
b3:ce:35:ff:23:c4:ac:75:f1:63:10:5d:a1:e9:2f:c5:1f:80:
fe:19:20:17:81:97:ad:09:06:df:88:2d:59:30:85:c3:c6:2a:
46:97:30:20:5c:c1:ad:6b:86:78:2f:bf:85:e2:05:6a:c0:e6:
26:8a:2d:8e:ae:31:c3:f7:33:34:fe:55:75:fb:03:9b:ca:98:
06:f3:f6:95:5a:2d:17:34:41:1e:f3:e0:5c:9a:97:2e:30:39:
eb:4c:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:52 2025 by rpki-client