Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3131332e32302e32382e302f32322d3234203d3e203435373331.roa
File: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (raw, json)
Hash identifier: /798wirB7VjrPdG56qUfoHVeq59TUF+7Mz2oarXKArA=
Subject key identifier: 59:B3:BD:E6:BA:C8:52:FE:CF:09:35:67:B6:8E:F6:1A:AB:69:5B:85
Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
Certificate serial: F53B38DC78A78E661CA786006940B549C345E7
Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3131332e32302e32382e302f32322d3234203d3e203435373331.roa
Signing time: Mon 12 Aug 2024 09:00:02 +0000
ROA not before: Mon 12 Aug 2024 08:55:02 +0000
ROA not after: Mon 11 Aug 2025 09:00:02 +0000
asID: 45731
IP address blocks: 113.20.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f5:3b:38:dc:78:a7:8e:66:1c:a7:86:00:69:40:b5:49:c3:45:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
Validity
Not Before: Aug 12 08:55:02 2024 GMT
Not After : Aug 11 09:00:02 2025 GMT
Subject: CN=59B3BDE6BAC852FECF093567B68EF61AAB695B85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:98:48:d7:d3:93:e1:51:65:a9:57:f0:5e:10:
d1:96:a0:4f:63:c7:f1:5b:e3:17:b1:0b:73:38:d4:
46:ff:a8:45:2f:73:a6:ea:1d:a2:b9:a6:ee:fa:5c:
f1:2a:55:d2:56:71:0b:56:7f:34:9c:c3:4f:a0:4b:
f3:59:27:1e:cd:d8:b7:f8:db:60:94:ac:0b:22:0e:
8a:5a:8c:84:a8:81:3c:35:d4:78:ec:98:db:7d:4a:
14:2e:7c:dc:61:28:08:e4:83:0b:34:c9:87:2f:12:
c6:76:e6:f2:bd:c7:8b:8c:ad:6f:9e:65:79:17:fb:
71:11:8b:a9:78:1c:6c:9d:01:66:ce:cb:e3:cd:eb:
2a:9c:c5:76:3a:4d:86:bf:7c:70:6a:b1:f5:1b:58:
56:d1:74:7d:b4:e1:88:7c:1e:74:af:f8:77:86:04:
47:e2:2f:d6:c1:f3:f1:d3:b0:fa:fb:4c:e6:c8:93:
c3:57:57:0b:2b:ae:6e:c9:59:07:44:34:8c:9b:3c:
8e:e5:dd:73:fb:cb:6b:a7:de:1b:b3:19:0d:b6:fd:
75:af:5d:8b:bf:e9:3d:41:4f:be:21:12:dd:41:d9:
9e:58:5a:8b:b0:5e:f9:90:4a:9b:38:c3:a0:2a:61:
0c:c8:af:8f:50:a9:4f:0a:3f:16:c7:b3:ab:2f:ad:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B3:BD:E6:BA:C8:52:FE:CF:09:35:67:B6:8E:F6:1A:AB:69:5B:85
X509v3 Authority Key Identifier:
keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3131332e32302e32382e302f32322d3234203d3e203435373331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.20.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:22:dc:bc:d0:ec:80:97:1e:af:17:7d:59:69:9e:f9:b2:6c:
0d:49:d6:27:28:16:8e:cf:bd:17:36:d9:30:83:1c:a7:94:61:
5e:21:db:15:c7:ad:e0:8c:7a:c0:d9:d6:0b:a6:66:7a:26:8d:
ff:ff:08:c2:58:78:41:df:80:ea:1e:de:39:9d:9c:28:06:a4:
7c:cd:7f:4b:ab:b3:2f:34:c4:ba:66:b8:7f:15:c5:84:41:8b:
20:e2:eb:4f:ce:0a:ed:e1:4f:cb:26:b9:78:82:76:53:dc:ba:
89:c4:3f:c9:d0:1c:bc:0e:53:51:f8:c0:f9:fa:72:e7:57:83:
78:57:93:bf:a5:78:12:ae:b3:f5:92:46:5c:62:42:c9:b6:13:
be:dd:77:8b:9a:40:17:54:96:96:06:95:19:5a:d4:8b:27:c2:
70:f9:3b:37:4d:3d:77:01:3f:b6:ba:dc:77:cb:80:8c:b7:27:
16:47:07:e4:05:af:32:87:1b:75:75:63:d3:51:15:4a:81:32:
60:22:a8:0d:16:fe:43:33:6c:99:5a:7f:41:90:1c:26:3b:44:
ad:db:0e:ec:c8:5d:f6:a0:58:2b:16:be:3b:1a:a9:84:83:05:
29:d8:22:87:21:d3:85:c8:86:c4:c5:b8:5a:0d:06:7d:67:27:
e8:a2:d7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:49 2025 by rpki-client