Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3232203d3e203633353031.roa
File: 36312e31342e3234382e302f32322d3232203d3e203633353031.roa (raw, json)
Hash identifier: 8ipLlntRcAgzxP5NkTTo5hrXyepoS087CiJmQYhl9m8=
Subject key identifier: EC:9D:C1:D2:18:C4:A5:2A:3E:45:43:E9:9C:CC:3C:06:AB:28:D3:FF
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 378387F90115AD4C8E179E6C54208C9EB8ECE402
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3232203d3e203633353031.roa
Signing time: Sun 23 Jun 2024 18:00:01 +0000
ROA not before: Sun 23 Jun 2024 17:55:01 +0000
ROA not after: Sun 22 Jun 2025 18:00:01 +0000
asID: 63501
IP address blocks: 61.14.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:83:87:f9:01:15:ad:4c:8e:17:9e:6c:54:20:8c:9e:b8:ec:e4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Jun 23 17:55:01 2024 GMT
Not After : Jun 22 18:00:01 2025 GMT
Subject: CN=EC9DC1D218C4A52A3E4543E99CCC3C06AB28D3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:b4:3e:f0:d8:ed:ad:28:d8:5c:eb:e3:9f:
8d:c7:2c:c0:64:11:0e:b1:08:c7:f6:f2:30:ae:7c:
63:db:fd:7e:69:62:81:89:1d:d3:f2:a6:d9:0e:02:
fe:59:8b:11:25:7f:99:47:5f:d9:08:97:5d:6d:22:
39:10:26:7a:4e:39:64:09:ac:37:a2:ca:d3:93:d2:
bf:aa:2c:ee:bc:0a:cc:e3:dc:73:9d:16:82:a0:99:
5d:e6:2a:92:7a:00:fd:bc:2c:1d:d7:5c:32:0e:20:
6d:f8:40:6b:c9:04:cc:65:3e:26:af:2a:d6:2a:21:
d7:3f:ee:eb:92:af:c5:d6:ca:bb:07:2d:01:8c:c5:
5c:93:97:55:2e:e2:e8:4d:1e:95:ae:da:11:98:e4:
5a:0e:02:9d:28:7f:8b:9d:4f:fc:d3:90:de:fc:4d:
ff:e9:80:06:07:89:b4:4a:2d:0c:3a:aa:35:f2:e0:
2b:b3:b2:2b:cd:f7:77:11:1a:4f:90:22:cb:77:79:
84:3e:61:14:03:f3:d6:4a:68:c2:85:b7:d2:fe:30:
e5:fa:42:d8:4d:47:35:5d:3e:02:04:ff:a1:91:a8:
0c:c1:37:0e:6a:a7:63:92:a3:d9:cf:f1:68:ed:87:
a8:73:3d:51:32:02:58:f8:9e:29:af:47:70:8e:24:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9D:C1:D2:18:C4:A5:2A:3E:45:43:E9:9C:CC:3C:06:AB:28:D3:FF
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3232203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.248.0/22
Signature Algorithm: sha256WithRSAEncryption
35:91:8b:19:cd:4f:3a:ea:66:5b:c0:70:92:80:5b:72:5f:23:
40:5f:f1:57:25:b9:21:eb:b0:cb:7e:2c:49:5e:c0:64:75:36:
00:36:5a:3f:49:eb:2f:23:3e:cc:d6:91:52:c9:1e:07:77:63:
1b:75:81:ee:1b:31:34:6f:ab:d7:db:4a:a4:cc:7f:aa:36:e0:
9e:c3:15:09:56:96:c2:89:d6:a8:3a:ec:5f:a0:2f:06:86:1d:
5a:18:91:d9:f3:bf:d8:39:b2:81:25:7e:a5:16:79:28:07:64:
40:50:73:90:dc:12:fe:02:67:e0:e7:66:25:9a:83:c6:81:74:
31:0f:51:32:8c:13:f9:2d:dd:50:4d:b2:39:6a:b6:ce:02:8a:
23:b6:df:b4:4b:a7:f4:32:c0:96:59:5e:14:31:85:a8:d0:18:
c9:7a:ea:9c:09:07:d4:da:38:9d:8b:b8:be:e7:76:c4:2b:0b:
6e:7b:56:4a:0c:cc:68:2a:be:4d:0a:71:9e:2c:1f:a0:b9:bb:
8e:27:04:d6:54:e0:18:e1:eb:dc:84:31:c9:33:1d:08:e4:ac:
76:c3:c3:0a:df:04:cf:4b:0e:7c:0e:d1:7d:a4:e6:29:3c:39:
9f:70:88:17:61:ca:3d:a6:ac:cb:40:93:a4:cc:4c:d6:f0:c1:
de:b6:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:10:27 2025 by rpki-client