Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3232302e3234372e3136382e302f32312d3234203d3e2039333431.roa
File: 3232302e3234372e3136382e302f32312d3234203d3e2039333431.roa (raw, json)
Hash identifier: CYnj2JT+yIuLvoZ1IZRRScO6hHoNIqZloJPAC8Ya/1A=
Subject key identifier: 97:26:F1:FA:36:5D:1C:83:2F:84:FE:B4:E4:CE:3B:E1:04:D3:C7:51
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 11B7473C7052D34057BD211518CF58C5503A01FE
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3232302e3234372e3136382e302f32312d3234203d3e2039333431.roa
Signing time: Tue 23 Apr 2024 04:00:01 +0000
ROA not before: Tue 23 Apr 2024 03:55:01 +0000
ROA not after: Tue 22 Apr 2025 04:00:01 +0000
asID: 9341
IP address blocks: 220.247.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b7:47:3c:70:52:d3:40:57:bd:21:15:18:cf:58:c5:50:3a:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 23 03:55:01 2024 GMT
Not After : Apr 22 04:00:01 2025 GMT
Subject: CN=9726F1FA365D1C832F84FEB4E4CE3BE104D3C751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:d3:db:3a:21:42:92:de:0b:21:86:7d:e1:
60:ad:25:e2:03:a0:68:9d:bc:ec:8f:77:cb:1b:81:
38:3b:cb:c3:0f:7a:55:69:cd:a1:41:b6:88:44:80:
db:95:0a:ca:7b:f5:a6:1d:97:e8:31:37:27:36:d1:
76:ad:d7:4c:84:24:83:5e:52:64:5f:51:bf:a3:67:
3d:b0:f2:a3:96:2d:1e:be:53:93:62:02:06:cb:90:
91:8a:3f:f8:0e:61:b6:94:1c:87:3c:e1:13:d3:ae:
68:ee:d3:3d:a4:3f:06:dc:c6:9b:11:b3:2b:8e:a9:
c7:a3:b3:7d:2c:0a:fa:36:fb:dc:0b:59:b8:9e:0c:
e4:c3:c1:24:6a:7d:3c:a1:b3:f8:81:cc:fb:46:48:
54:11:ed:4e:cf:d3:8a:ff:7f:12:c9:98:ca:7d:98:
47:29:14:58:03:46:6d:a3:93:d2:ea:fb:ec:0d:e4:
af:12:56:df:55:9d:d4:87:44:09:49:19:96:28:8e:
7c:ea:72:21:26:9a:b7:aa:50:97:9a:7e:3c:09:bb:
d9:21:25:20:59:ae:5e:76:9e:00:c6:c8:9d:25:70:
90:d7:26:22:fd:f7:dd:87:b1:32:5c:dd:05:99:80:
5b:7f:d6:7e:49:25:19:e4:d9:a4:e8:16:7f:b6:ed:
98:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:26:F1:FA:36:5D:1C:83:2F:84:FE:B4:E4:CE:3B:E1:04:D3:C7:51
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3232302e3234372e3136382e302f32312d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
220.247.168.0/21
Signature Algorithm: sha256WithRSAEncryption
54:9a:f8:29:fa:0b:a0:32:38:c7:0d:b3:01:93:73:b7:98:90:
bb:97:2f:0c:50:95:4c:82:3b:26:c3:e6:c1:a8:b8:f0:c5:a8:
9c:0b:d6:ca:0d:e2:8e:cc:ce:40:63:f8:10:9a:2a:7c:c5:76:
c4:18:e6:56:48:11:7c:d0:cf:7c:d2:8a:d0:fc:9e:e0:33:1b:
5a:fd:39:a7:06:1a:a5:2c:b0:da:21:d2:42:8a:73:ca:15:dc:
75:90:01:89:de:95:76:02:3c:ca:a0:c8:38:eb:b1:70:d6:c5:
59:8e:35:24:b9:9a:74:75:16:a7:b8:2d:30:58:91:aa:29:71:
36:ee:6e:3c:2b:58:96:4d:be:ce:73:a0:d7:89:62:99:f4:99:
0c:9d:c3:c8:34:a5:05:75:04:ed:14:8b:ca:ab:13:45:dc:88:
c8:cd:bc:be:dd:df:3f:7b:4d:9e:b7:68:38:d1:6b:55:92:e8:
9d:99:0b:79:5a:7e:2c:18:bd:77:34:18:72:bd:7f:81:b3:7d:
99:87:13:c3:46:39:4c:77:b7:81:f6:52:7b:be:2d:f7:45:5d:
18:fe:9f:a4:3d:30:2e:34:02:b4:03:83:58:bb:de:36:2d:e3:
0a:28:8e:30:86:45:ca:95:fb:59:25:17:0b:3d:0c:f6:15:f1:
cb:7f:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:31 2025 by rpki-client