Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa
File: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier: M4G3+2ND4JNQkzKKiPu/TTGwUpDm4YJaaeAdjCfIIk4=
Subject key identifier: CB:DC:5C:B3:97:56:82:AD:2C:C0:14:33:0B:F6:3F:EE:C4:55:D2:DE
Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial: 425CE31947751E0C5AFCB3A3946DC36C8833E1FB
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa
Signing time: Wed 17 Apr 2024 03:00:01 +0000
ROA not before: Wed 17 Apr 2024 02:55:01 +0000
ROA not after: Wed 16 Apr 2025 03:00:01 +0000
asID: 138818
IP address blocks: 114.141.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5c:e3:19:47:75:1e:0c:5a:fc:b3:a3:94:6d:c3:6c:88:33:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Validity
Not Before: Apr 17 02:55:01 2024 GMT
Not After : Apr 16 03:00:01 2025 GMT
Subject: CN=CBDC5CB3975682AD2CC014330BF63FEEC455D2DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:f5:b2:5d:8f:f5:91:cc:4a:61:20:db:1a:
12:86:16:26:0c:ff:3e:69:ed:02:09:eb:ef:fc:3f:
c0:98:c1:48:a2:4e:d5:03:ba:dd:ac:a1:f7:e8:73:
81:6a:44:cc:27:34:93:96:3e:5e:9e:37:f8:fd:78:
6b:e8:d6:88:bb:ad:81:6b:50:37:69:fd:66:4a:fa:
60:56:a1:ac:67:a4:f8:74:d9:fa:09:b6:38:82:f1:
eb:99:08:f3:43:aa:d7:40:c1:4c:7a:3d:fe:93:4d:
d9:02:82:b8:22:2a:4b:9b:de:85:a3:8f:06:bb:4b:
83:a6:35:01:2d:f8:72:63:e0:3b:5b:55:d8:69:fa:
99:59:36:83:06:df:02:ee:22:b8:e8:c7:52:89:57:
83:81:cd:4c:50:f2:b3:06:f6:e0:94:df:c4:63:91:
56:e4:7b:cd:f6:9f:ef:ba:8a:4e:b3:48:16:13:9d:
a2:d0:ef:63:b9:ad:78:93:c2:32:42:3e:43:ca:5d:
6e:f9:2c:11:aa:32:80:a4:47:42:62:d5:f1:c6:c7:
51:2b:17:15:10:a7:8d:fa:69:15:4c:e3:69:37:69:
06:4d:8a:0e:bc:70:c7:bb:6f:c3:e9:52:f4:71:af:
d0:69:71:9a:84:10:f5:57:c6:79:81:09:8b:2b:7d:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:5C:B3:97:56:82:AD:2C:C0:14:33:0B:F6:3F:EE:C4:55:D2:DE
X509v3 Authority Key Identifier:
keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.94.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a0:13:fa:cd:c6:11:30:ea:c5:88:6e:8f:4e:76:5e:09:b9:
09:9c:c1:67:50:01:d9:52:f5:df:c8:26:c1:f8:e5:f9:40:44:
cc:9d:7c:14:16:17:82:8a:77:17:f5:87:c5:70:b5:e8:c8:cc:
44:a2:e7:e2:32:fe:71:df:25:7b:6b:39:8a:71:be:ac:a7:da:
66:e3:2b:66:69:0e:19:29:99:f2:fd:90:5f:26:7f:70:5a:11:
df:de:5d:52:ee:1a:b5:cc:2a:2a:1a:0b:a8:38:e9:2c:ce:99:
45:73:81:5c:34:c5:99:21:50:75:5d:45:a5:10:b5:ab:aa:ab:
a8:e9:76:3a:4c:1f:bd:ac:98:51:fd:68:ef:05:e3:d1:e5:33:
12:ac:38:af:c5:49:61:7c:f7:9f:94:e2:e4:35:df:c0:13:26:
ef:e2:6d:b5:8f:3c:12:a0:42:1e:ab:d4:15:0e:ce:51:fc:44:
82:66:57:47:e8:96:f7:ca:c2:81:91:20:b5:f5:77:15:cf:03:
1a:8b:73:19:1b:3a:52:84:b0:20:a6:1b:6c:37:c9:0e:8f:9d:
5a:b0:21:aa:7a:06:ae:63:8d:d4:27:1b:ab:21:19:9b:9b:18:
a9:a7:ab:09:78:fc:8f:1a:31:ee:1d:3f:88:52:97:81:64:d7:
5d:d3:80:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:08 2025 by rpki-client