Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: CPX2zGxczIBZE+tY4YWlOCgNZWhoz3xx6u4S2M5GO+8=
Subject key identifier: 82:B5:7F:6A:FA:D5:F1:9D:C0:AF:52:31:77:1F:43:11:0E:67:52:73
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 760A4D0E2B392BC2DDCF58CAFA9871B6D66A95DB
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa
Signing time: Sat 01 Jun 2024 08:01:00 +0000
ROA not before: Sat 01 Jun 2024 07:56:00 +0000
ROA not after: Sat 31 May 2025 08:01:00 +0000
asID: 24525
IP address blocks: 114.199.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:0a:4d:0e:2b:39:2b:c2:dd:cf:58:ca:fa:98:71:b6:d6:6a:95:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: Jun 1 07:56:00 2024 GMT
Not After : May 31 08:01:00 2025 GMT
Subject: CN=82B57F6AFAD5F19DC0AF5231771F43110E675273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:85:6d:1c:3a:67:bc:e8:64:b4:09:95:0a:
19:f5:de:6a:55:53:90:0c:64:c2:66:3c:dc:5c:16:
77:8a:46:a0:07:33:47:25:64:f3:77:9f:ad:3a:2f:
06:fa:11:b1:77:71:bf:90:fb:0a:30:69:89:ca:f1:
62:90:8f:6b:ec:4e:9b:52:16:34:87:ba:99:79:d9:
05:77:f8:50:ee:66:90:dd:b7:e5:2c:a5:bf:0e:90:
9c:70:80:b3:5e:95:5d:62:ac:f0:8c:37:c1:f2:4c:
99:5c:56:e9:be:d2:51:b9:b0:6e:57:30:c9:11:be:
3d:bf:ea:d6:55:90:94:3d:3c:18:cd:2f:9d:1e:12:
06:cf:95:48:28:81:a7:3c:a7:b3:fd:f8:45:51:53:
f9:bd:cf:0c:48:76:79:ed:39:f0:c0:56:65:6a:20:
e5:0d:2b:3c:29:96:17:61:5b:95:0a:26:2c:34:e0:
32:10:65:d6:ba:8c:a4:40:0f:c2:2e:21:0f:a3:5b:
4a:af:48:79:f1:ad:7a:e0:e1:b4:56:ca:e0:a9:f1:
6d:4a:7c:31:9c:b3:de:28:31:e4:53:47:c0:fb:ea:
cf:fb:28:bc:e3:f3:9e:7b:df:23:d5:08:fd:bb:6e:
56:e7:28:4d:c7:2a:37:a5:d5:48:92:5d:c2:4e:60:
91:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B5:7F:6A:FA:D5:F1:9D:C0:AF:52:31:77:1F:43:11:0E:67:52:73
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.100.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c4:36:da:95:f5:35:e0:0b:5f:b4:93:5a:d3:13:b7:66:04:
0d:a4:1f:ce:67:cf:67:fd:8d:c1:b6:1d:29:16:f4:69:36:61:
4c:6e:04:aa:e4:fa:2e:41:a1:07:d8:79:79:04:cb:d4:91:41:
57:31:ae:7e:64:0f:f4:a3:ac:c7:4b:e3:11:37:dd:9e:ef:33:
d3:9c:a9:1c:46:46:8b:8b:8c:17:a8:05:30:ed:c8:c4:20:75:
6e:34:d4:37:d2:e0:19:61:7c:b1:60:6b:4c:d5:d4:fc:93:3c:
81:61:cc:75:02:8e:d5:dd:a0:f8:fa:68:81:14:46:e9:8a:42:
18:82:da:32:07:59:0a:27:28:0f:dc:07:9c:59:3f:16:ef:1f:
c5:94:e3:91:e3:02:7d:32:ab:d3:ae:dc:25:c0:db:16:7e:0f:
8f:62:3c:b1:d0:54:2c:62:ff:23:90:b4:0d:ac:9e:a7:3c:5c:
3b:a8:64:c4:05:9f:2c:45:cb:4c:87:6d:9e:ac:f3:c5:29:62:
41:2a:56:c7:5c:6a:aa:fa:12:17:21:71:77:dd:e3:a8:d2:b7:
ca:1d:59:0e:89:92:3e:53:8c:77:dc:29:87:5f:cf:54:22:a2:
97:f1:fc:ad:f9:cc:a5:37:28:d3:4a:d7:2d:f3:32:d7:67:98:
62:b3:79:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:13 2025 by rpki-client