Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32312d3231203d3e203234353235.roa
File: 3131342e3139392e3131322e302f32312d3231203d3e203234353235.roa (raw, json)
Hash identifier: WMurO1UBr8/MkF2o5AKCsHU++ZtjExyukJrdNwm+thg=
Subject key identifier: C2:96:04:60:4D:A7:12:C1:FB:54:09:CB:5A:B4:BE:AB:FA:DD:0C:C8
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 5C2BCF620BFC678D7D7B3405D24712E7847746C0
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32312d3231203d3e203234353235.roa
Signing time: Tue 21 May 2024 08:02:40 +0000
ROA not before: Tue 21 May 2024 07:57:40 +0000
ROA not after: Tue 20 May 2025 08:02:40 +0000
asID: 24525
IP address blocks: 114.199.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2b:cf:62:0b:fc:67:8d:7d:7b:34:05:d2:47:12:e7:84:77:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: May 21 07:57:40 2024 GMT
Not After : May 20 08:02:40 2025 GMT
Subject: CN=C29604604DA712C1FB5409CB5AB4BEABFADD0CC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:21:2e:52:4a:36:ad:6f:ae:4b:8f:41:b3:
1d:9c:1b:48:88:98:d1:af:ef:df:12:94:e0:44:d6:
b6:eb:20:86:b6:9a:dd:7f:65:e4:ef:b3:43:bb:c6:
4c:4e:2c:a9:4e:88:51:8e:d4:f5:28:30:5b:5a:4d:
38:b7:3d:2d:0a:a6:a2:40:94:34:2b:0a:9a:5f:61:
73:e1:79:0f:84:3a:12:b0:b5:97:0e:66:41:32:b1:
25:f9:f5:01:60:60:20:9c:75:4e:68:43:83:1a:bd:
38:6d:5e:aa:79:c4:fa:57:53:e1:09:39:11:3c:ed:
49:22:23:0f:82:16:cf:e0:fd:7c:46:09:a6:c1:a3:
b3:3d:1e:2e:6b:2b:11:98:10:fb:30:b7:b1:90:51:
56:87:72:69:fe:ee:1a:b8:95:d0:33:54:f9:67:04:
3f:69:a5:cd:10:d3:eb:0c:46:a3:05:52:50:64:ff:
2c:12:da:64:42:88:aa:0e:3b:d1:42:96:24:40:b5:
a6:ce:e4:32:54:1f:a9:58:22:e5:13:f4:c0:b6:08:
0f:0f:5d:e4:61:d9:8b:4e:bd:e5:05:0a:de:1c:03:
3c:dc:69:0f:30:f8:80:8b:94:dc:67:9e:70:2a:33:
c0:51:7f:af:b5:d7:e4:0c:f6:9e:2a:5a:25:65:9d:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:04:60:4D:A7:12:C1:FB:54:09:CB:5A:B4:BE:AB:FA:DD:0C:C8
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32312d3231203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.112.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:35:26:bb:53:2d:09:86:d6:b0:bb:b3:ea:ac:2a:52:e9:b2:
2d:63:56:26:e6:05:35:19:90:72:bb:e1:db:8e:ad:67:44:39:
25:67:c0:03:0e:55:0e:76:77:a3:79:99:b6:eb:90:25:c4:91:
74:05:1e:c5:60:e8:84:6d:bb:b6:66:8e:28:c6:bc:93:99:62:
b0:75:76:2b:e8:e2:9c:9a:6b:b3:5f:30:5d:ef:d2:f7:d6:54:
c2:dd:f1:ff:35:c9:4a:47:87:8f:ee:53:73:4f:9b:18:e3:1f:
b8:9e:40:00:87:c6:e8:9d:c9:06:86:19:60:aa:68:10:63:ba:
cc:9a:ae:fb:8f:8d:c4:eb:15:af:fc:69:dd:6f:e1:78:31:70:
46:ff:09:5e:d2:23:6b:79:1b:1f:2a:9b:4f:40:fd:1e:e8:b5:
15:83:6a:88:76:8f:0d:67:51:29:16:c0:b4:7e:66:59:88:66:
2b:43:61:a5:45:43:29:bb:6e:c9:96:de:ae:12:b6:18:58:6f:
ab:5b:73:2f:2b:39:7f:33:aa:db:c6:ce:07:1d:2d:ce:8d:b1:
29:a8:07:bf:fb:f3:82:74:29:74:70:b3:61:db:d4:53:ed:36:
fd:1a:6f:4b:43:59:76:4e:7d:aa:70:a8:b5:96:fa:63:d7:e1:
3d:84:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:22 2025 by rpki-client