Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3234203d3e2039333431.roa
File: 3132312e3130302e32322e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier: JfJZ2FvThWe2NlbmaUSmIxpMvfHt8n5T+tb99NohYe4=
Subject key identifier: 6B:01:73:F5:28:73:78:E2:0E:35:68:4D:BE:E8:63:F4:76:11:33:D3
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 2578E05E1128191CFD3175FDCC1A34F206674226
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3234203d3e2039333431.roa
Signing time: Tue 23 Apr 2024 03:00:01 +0000
ROA not before: Tue 23 Apr 2024 02:55:01 +0000
ROA not after: Tue 22 Apr 2025 03:00:01 +0000
asID: 9341
IP address blocks: 121.100.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:78:e0:5e:11:28:19:1c:fd:31:75:fd:cc:1a:34:f2:06:67:42:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 23 02:55:01 2024 GMT
Not After : Apr 22 03:00:01 2025 GMT
Subject: CN=6B0173F5287378E20E35684DBEE863F4761133D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:fc:37:ce:fe:76:db:81:24:c0:5d:fe:bb:
d8:42:a5:ab:55:aa:ab:ce:07:f9:84:94:c0:a3:49:
84:7d:ae:9e:22:eb:c5:bc:9b:f4:22:cd:5b:86:da:
06:61:30:98:71:3d:15:3e:76:28:1a:38:ce:bd:92:
84:37:f6:39:68:26:05:b1:0f:23:0a:2b:c0:51:54:
b9:87:d3:a6:fb:0d:68:8f:6f:bd:11:fb:7c:35:5a:
95:0c:c8:99:13:5e:9a:4c:fa:2a:d5:ea:ab:75:f9:
17:74:b3:93:5a:cf:ea:e7:53:b9:a1:81:3e:05:24:
be:53:b5:91:6c:c4:13:4f:65:d6:f1:dd:08:51:1a:
7a:40:d3:3d:9d:f7:22:6c:5a:db:ec:f6:93:46:5b:
97:35:dd:81:a6:7c:45:ff:61:e3:66:e9:76:86:9b:
c1:d0:5a:00:0e:02:57:68:c7:f7:11:b6:24:69:34:
eb:ba:29:54:5b:7d:a9:2a:24:be:c0:8d:23:1d:02:
88:92:25:ad:f4:bc:ed:a7:ca:f5:b2:ec:bc:7c:95:
24:6d:dd:17:5a:20:2a:61:63:49:03:5d:67:29:18:
e9:63:b7:5f:3f:9a:e3:71:d6:9e:73:a0:1b:73:37:
23:d2:b9:b3:91:fb:ff:e9:80:69:97:17:01:ea:9e:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:01:73:F5:28:73:78:E2:0E:35:68:4D:BE:E8:63:F4:76:11:33:D3
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132312e3130302e32322e302f32332d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.100.22.0/23
Signature Algorithm: sha256WithRSAEncryption
05:21:df:7c:23:50:c5:de:68:c0:be:53:47:fd:20:70:e2:80:
36:cc:74:23:62:df:29:a5:d3:17:fb:45:a4:40:3f:17:9a:22:
1d:2f:96:76:e5:54:df:37:c7:88:77:5c:9c:d7:5f:80:e3:9d:
eb:c5:f4:e5:58:53:fa:14:f9:ff:a2:e3:91:06:6a:4c:cb:91:
90:6b:8c:6d:03:1c:3d:8d:08:ed:b9:36:a6:cb:3c:f2:3d:5f:
2d:c4:ea:06:f5:1a:e8:4d:01:ac:e9:24:3e:77:5d:08:9e:50:
b4:cb:b5:2d:3c:95:b6:ad:44:a6:24:70:6e:97:07:91:76:b8:
72:76:87:fe:2e:c2:25:35:7b:3c:77:30:40:8f:b0:3d:93:e6:
87:3c:80:cf:90:f5:2c:3b:61:af:e9:e4:45:03:04:87:bf:62:
c1:b1:04:18:a0:11:c8:5f:76:a8:d2:99:72:e8:33:84:2b:cf:
c3:36:7b:9b:60:3e:bc:74:3c:5b:86:be:34:85:4e:bf:2b:85:
01:7e:ae:ad:f4:5c:b9:23:2b:89:3e:93:fe:22:f8:73:68:62:
5c:44:de:fb:b1:7f:80:b2:95:ae:0f:1d:91:ee:88:cf:ee:10:
de:ee:b8:f5:c0:1c:bd:b5:d8:14:7e:e4:ad:d4:1e:d5:b8:cc:
96:03:ca:8e
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUJXjgXhEoGRz9MXX9zBo08gZnQiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNDA0MjMwMjU1MDFaFw0yNTA0MjIwMzAwMDFaMDMxMTAvBgNV
BAMTKDZCMDE3M0Y1Mjg3Mzc4RTIwRTM1Njg0REJFRTg2M0Y0NzYxMTMzRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhPvw3zv5224EkwF3+u9hCpatV
qqvOB/mElMCjSYR9rp4i68W8m/QizVuG2gZhMJhxPRU+digaOM69koQ39jloJgWx
DyMKK8BRVLmH06b7DWiPb70R+3w1WpUMyJkTXppM+irV6qt1+Rd0s5Naz+rnU7mh
gT4FJL5TtZFsxBNPZdbx3QhRGnpA0z2d9yJsWtvs9pNGW5c13YGmfEX/YeNm6XaG
m8HQWgAOAldox/cRtiRpNOu6KVRbfakqJL7AjSMdAoiSJa30vO2nyvWy7Lx8lSRt
3RdaICphY0kDXWcpGOljt18/muNx1p5zoBtzNyPSubOR+//pgGmXFwHqnobPAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUawFz9ShzeOIONWhNvuhj9HYRM9MwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzIzMTJlMzEzMDMwMmUzMjMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF5ZBYwDQYJKoZIhvcN
AQELBQADggEBAAUh33wjUMXeaMC+U0f9IHDigDbMdCNi3yml0xf7RaRAPxeaIh0v
lnblVN83x4h3XJzXX4DjnevF9OVYU/oU+f+i45EGakzLkZBrjG0DHD2NCO25NqbL
PPI9Xy3E6gb1GuhNAazpJD53XQieULTLtS08lbatRKYkcG6XB5F2uHJ2h/4uwiU1
ezx3MECPsD2T5oc8gM+Q9Sw7Ya/p5EUDBIe/YsGxBBigEchfdqjSmXLoM4Qrz8M2
e5tgPrx0PFuGvjSFTr8rhQF+rq30XLkjK4k+k/4i+HNoYlxE3vuxf4Cyla4PHZHu
iM/uEN7uuPXAHL212BR+5K3UHtW4zJYDyo4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:51 2025 by rpki-client