Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa
File: 3131342e3139392e39362e302f32322d3232203d3e203234353235.roa (raw, json)
Hash identifier: nohWrGirFkLwEtrfdUxI4SBLNspq9xlkeLn+H4NotVE=
Subject key identifier: 4E:7D:F1:42:BB:C5:CD:F7:E6:0A:75:54:09:E3:62:E0:F4:B1:44:9B
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 32DD8A93AD514938AB29123738BAC41E6AD53733
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa
Signing time: Tue 21 May 2024 08:02:40 +0000
ROA not before: Tue 21 May 2024 07:57:40 +0000
ROA not after: Tue 20 May 2025 08:02:40 +0000
asID: 24525
IP address blocks: 114.199.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:dd:8a:93:ad:51:49:38:ab:29:12:37:38:ba:c4:1e:6a:d5:37:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: May 21 07:57:40 2024 GMT
Not After : May 20 08:02:40 2025 GMT
Subject: CN=4E7DF142BBC5CDF7E60A755409E362E0F4B1449B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:65:0c:4c:ba:8e:d5:30:10:bb:60:39:55:7c:
65:ed:ae:c0:96:b7:3d:25:e1:b0:30:68:80:88:bd:
af:84:07:cb:fe:f8:d3:ff:b6:d6:dd:d1:9f:5f:d3:
97:a7:f1:9d:bc:8d:49:df:1c:8a:8f:83:01:6b:d8:
4e:93:75:d4:d7:27:a7:b2:59:07:a0:59:b1:32:89:
ae:79:42:8a:54:13:df:ac:40:d0:ac:70:0f:40:ac:
d9:99:5b:22:c1:0e:1b:f3:3b:5e:81:4b:0d:06:a2:
97:89:69:81:a3:aa:54:73:4a:51:90:f1:61:e4:60:
cc:c6:1b:23:54:8a:93:38:21:fc:06:6e:e1:d8:36:
45:9e:7f:5a:1f:73:66:20:c1:de:2b:29:61:fa:19:
78:95:a6:93:6a:85:79:70:05:a9:3f:52:3e:52:c3:
bf:ba:4d:ea:9d:28:9c:bb:25:93:4b:39:9c:67:3a:
a4:ca:43:b7:82:9e:0e:0e:c7:ca:dd:8f:d8:0b:29:
59:e3:02:a4:d9:c7:d1:b6:10:3b:ae:e2:ad:46:3c:
af:2d:f8:5a:fe:4c:ae:09:30:ea:c8:25:0b:5c:a9:
c1:6f:58:e5:da:6a:73:3d:dc:3f:76:8b:02:fb:86:
7d:20:b7:01:d0:36:76:5f:a9:fb:d0:d0:3b:6f:04:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7D:F1:42:BB:C5:CD:F7:E6:0A:75:54:09:E3:62:E0:F4:B1:44:9B
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:31:f2:66:cf:1f:31:31:bc:e3:3e:57:65:82:b2:60:d2:4c:
c8:df:02:3b:cb:b1:33:0c:ef:df:ee:51:ce:6f:69:c7:4e:5e:
cb:c8:fa:ac:a5:01:3c:31:0f:41:b8:c1:ed:75:c1:39:13:94:
d1:0e:14:c4:e7:7e:43:14:7e:2a:d4:f9:08:4a:65:3f:e8:72:
cf:5a:17:65:a1:2d:50:5f:03:98:b6:83:5d:83:88:3d:6b:2d:
79:0b:c1:37:9d:07:02:3f:27:46:c9:05:0c:2b:7b:58:f7:34:
26:07:e3:c8:7c:c0:63:1f:25:db:f1:21:8f:2e:14:40:31:5a:
33:b3:47:51:e5:16:62:48:6a:ee:86:f5:ff:4f:a8:8a:65:a7:
b1:9b:b7:1c:b7:39:31:f0:f3:7c:02:7f:c9:be:20:79:8c:cf:
65:f3:2a:42:8e:d5:e2:ce:09:7b:c0:17:41:f3:86:a0:cf:66:
07:2a:76:ea:ef:52:64:e9:24:80:e9:f5:9a:9a:e3:3d:03:cd:
3e:e9:e7:d4:72:fb:d5:2a:f5:88:89:84:17:09:20:a8:d0:ca:
d4:e5:5b:55:d7:e5:e0:c2:1a:eb:66:01:f1:58:66:7a:73:a5:
7e:ba:ac:0f:0c:c8:d2:39:dc:6a:a6:4c:ff:08:a2:08:5a:68:
86:2c:b3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:54 2025 by rpki-client