Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa
File: 3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier: XRb2eO5mVbF5mMvV7WuUQ2M5B28bUJLqBZFEPLw0M5g=
Subject key identifier: 79:62:CC:C2:05:EB:0C:9B:59:49:F6:F1:BE:AD:A0:84:EA:B1:AE:50
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 33AD4CCD9A6E694A974C60D0703A1595DC02F5AE
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa
Signing time: Tue 21 May 2024 07:00:01 +0000
ROA not before: Tue 21 May 2024 06:55:01 +0000
ROA not after: Tue 20 May 2025 07:00:01 +0000
asID: 24525
IP address blocks: 114.199.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ad:4c:cd:9a:6e:69:4a:97:4c:60:d0:70:3a:15:95:dc:02:f5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: May 21 06:55:01 2024 GMT
Not After : May 20 07:00:01 2025 GMT
Subject: CN=7962CCC205EB0C9B5949F6F1BEADA084EAB1AE50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:8b:e8:81:c9:c0:a3:ae:0c:a4:48:4d:05:
00:c3:12:f9:fe:d4:fb:bc:0d:08:3f:0e:36:b6:5f:
a5:e4:b8:35:91:ce:fd:1a:62:b4:44:6e:38:ec:f8:
08:58:fe:a3:6f:00:04:71:4f:a9:b3:77:32:cc:eb:
a6:f6:78:70:c9:d6:f1:e3:96:01:24:14:43:30:35:
97:b0:fe:8b:e1:e2:bf:0e:12:3c:0f:50:fa:8e:44:
8d:bd:6d:07:79:30:40:ce:e9:71:64:72:34:79:9c:
7b:09:97:f6:4e:01:9f:98:85:96:0d:c8:48:09:12:
7a:94:c5:cd:ac:4c:da:ab:87:89:29:5b:ee:9b:87:
65:b1:93:3b:e0:8d:87:3e:00:b7:6c:31:71:f7:2a:
cd:28:3f:00:09:19:fb:a0:b1:1f:99:49:c2:bd:df:
f9:43:ef:f6:85:3a:0d:71:79:23:da:39:2c:33:05:
2d:2a:97:11:87:1c:48:4f:6f:9f:56:a7:39:cb:7a:
33:f6:ad:64:67:b9:d8:54:82:ab:7d:76:d0:14:ae:
44:a1:98:73:8b:85:ca:7c:65:96:15:14:bd:60:e6:
d7:c6:1d:a4:f2:8a:40:ba:d9:3c:1b:ff:b4:81:2d:
95:de:02:d5:42:23:76:f4:79:35:9b:dd:0e:05:7d:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:62:CC:C2:05:EB:0C:9B:59:49:F6:F1:BE:AD:A0:84:EA:B1:AE:50
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132302e302f32332d3233203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.120.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:3d:2e:ce:86:94:cd:21:14:d9:d2:b3:d6:a1:08:e1:ff:f6:
2d:c7:e4:a0:88:c3:ab:f2:58:47:c9:8e:a7:d8:fd:e1:0a:22:
f4:40:da:c6:70:f4:7a:95:61:81:50:b8:4a:19:2c:5d:19:0e:
28:4a:e9:02:60:0f:76:51:7c:01:03:43:f5:04:22:11:db:28:
5c:4e:ef:3a:59:ea:b0:44:26:f1:6c:e6:7b:a1:b4:58:94:31:
1a:24:59:00:4e:58:6f:06:1b:f5:8b:4c:6c:57:3b:76:56:0f:
27:f9:20:92:40:02:6e:e2:56:76:39:b0:ed:d2:92:e7:2b:3a:
e4:1d:d3:cf:28:4f:38:8b:54:ad:06:7c:de:24:4f:03:d4:4d:
6e:0f:96:84:f5:24:2e:e5:a5:4a:b3:47:29:7d:7a:14:ba:0a:
b2:06:33:36:bf:fa:02:32:38:9b:99:02:de:b4:c2:66:34:1b:
8f:85:ea:1d:b0:46:7d:59:4e:22:a5:db:bc:4d:4b:88:ff:31:
25:73:bf:41:dd:f6:c2:e5:5e:2b:95:68:13:44:d6:db:4b:1a:
4e:62:7d:1b:68:ce:4b:35:b7:1e:13:5c:68:1c:8c:2d:83:41:
6a:db:1d:24:7b:c4:8d:cc:13:b0:f4:44:72:73:94:60:48:52:
21:e2:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:46 2025 by rpki-client