Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa
File: 3131342e3139392e39362e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier: V/KQbOytcX3c/LxHltJWPGSmP8eWgCVwm4tttKnVw1M=
Subject key identifier: E5:30:E4:6D:32:57:91:44:C5:7E:AE:27:5E:11:A6:49:77:40:02:CC
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 17D1817A8CFA06A7E9D86CBC3F0CCC97E9072F07
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa
Signing time: Tue 21 May 2024 08:02:40 +0000
ROA not before: Tue 21 May 2024 07:57:40 +0000
ROA not after: Tue 20 May 2025 08:02:40 +0000
asID: 24525
IP address blocks: 114.199.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d1:81:7a:8c:fa:06:a7:e9:d8:6c:bc:3f:0c:cc:97:e9:07:2f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: May 21 07:57:40 2024 GMT
Not After : May 20 08:02:40 2025 GMT
Subject: CN=E530E46D32579144C57EAE275E11A649774002CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:8e:00:12:9b:10:65:03:6e:f4:9f:62:43:
24:72:48:ea:dd:a3:e3:2e:33:fd:4e:ff:20:8d:ca:
58:0a:8b:1f:c4:cf:30:18:71:3a:67:53:a2:0f:3f:
56:fb:95:6f:13:35:15:54:f2:31:c2:ad:3d:08:d5:
03:6e:d4:61:d2:56:2d:f1:12:df:f8:6a:ba:c4:2e:
77:6c:cf:6c:46:31:de:e5:21:a4:ea:14:4c:04:f8:
90:2c:3b:1e:ee:85:03:1f:7f:e9:45:60:f0:98:59:
0e:af:97:7c:e4:6d:5d:0f:6e:b2:88:46:a9:8a:41:
55:59:5f:2e:00:f9:75:a9:a3:36:57:4f:52:02:24:
37:bb:2e:11:35:41:48:ca:a5:2e:16:ed:66:d7:45:
f4:34:9e:2c:85:37:17:76:20:8c:43:aa:20:92:1a:
7e:f1:5b:d8:d3:41:82:c3:a2:95:02:9e:4e:7d:ca:
8b:ca:be:f4:ea:56:55:90:c5:f2:f6:5e:17:ae:7e:
05:e7:c0:f6:e2:98:13:1a:11:cf:15:88:4f:1d:31:
28:30:61:cd:df:57:4f:4d:b9:ca:f1:b4:34:8a:e9:
3f:18:26:a5:07:c2:d9:79:38:c9:73:01:f5:40:58:
83:a3:72:76:3c:6b:36:9c:5e:76:4a:fc:14:aa:02:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:30:E4:6D:32:57:91:44:C5:7E:AE:27:5E:11:A6:49:77:40:02:CC
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.96.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:4a:62:3e:41:f2:60:ca:9d:22:22:27:b0:db:71:00:fa:97:
3b:73:ef:5f:64:05:7a:83:f5:b0:47:a1:b3:3f:aa:20:48:80:
a5:01:d9:1b:24:12:a3:3f:4c:5e:ec:46:07:72:96:f1:35:65:
8d:29:6e:51:4a:1c:60:ac:be:75:a2:92:eb:3a:81:16:8c:5d:
94:3a:80:0f:c0:7c:09:c5:82:5d:eb:29:bc:eb:4e:1a:31:71:
49:51:fd:27:f7:ae:d6:89:e8:a4:6f:55:11:73:ba:37:ca:9b:
0c:18:99:33:78:43:c3:8b:0a:73:6b:6a:6f:7b:b0:4c:15:3e:
af:b0:8a:9f:4c:e6:ea:4d:d0:24:eb:7c:34:f4:9c:b4:dd:90:
b6:34:24:45:0e:84:ee:fa:68:8c:8d:fd:70:d4:05:0e:57:3d:
87:1f:3f:09:05:b7:4d:e4:7f:82:62:11:62:23:bc:53:5a:e9:
2a:25:b4:1b:e1:44:b9:7c:00:5b:84:d5:06:e1:ce:50:bc:fc:
98:c1:89:ff:11:5d:31:3d:f8:aa:0f:f6:5b:2c:ba:ac:d9:0a:
9c:49:37:16:f1:45:97:d6:50:1f:e0:a9:53:57:20:6b:81:9d:
c3:d5:bd:5e:30:bf:9e:a9:5f:c9:f0:8a:fb:07:2a:7e:47:f3:
b8:f5:fa:34
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUF9GBeoz6Bqfp2Gy8PwzMl+kHLwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0
NkE4MzcwMjAeFw0yNDA1MjEwNzU3NDBaFw0yNTA1MjAwODAyNDBaMDMxMTAvBgNV
BAMTKEU1MzBFNDZEMzI1NzkxNDRDNTdFQUUyNzVFMTFBNjQ5Nzc0MDAyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZXY4AEpsQZQNu9J9iQyRySOrd
o+MuM/1O/yCNylgKix/EzzAYcTpnU6IPP1b7lW8TNRVU8jHCrT0I1QNu1GHSVi3x
Et/4arrELndsz2xGMd7lIaTqFEwE+JAsOx7uhQMff+lFYPCYWQ6vl3zkbV0PbrKI
RqmKQVVZXy4A+XWpozZXT1ICJDe7LhE1QUjKpS4W7WbXRfQ0niyFNxd2IIxDqiCS
Gn7xW9jTQYLDopUCnk59yovKvvTqVlWQxfL2XheufgXnwPbimBMaEc8ViE8dMSgw
Yc3fV09NucrxtDSK6T8YJqUHwtl5OMlzAfVAWIOjcnY8azacXnZK/BSqAqRDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5TDkbTJXkUTFfq4nXhGmSXdAAswwHwYDVR0j
BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1
NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4
MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzOTM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXLHYDANBgkqhkiG
9w0BAQsFAAOCAQEAP0piPkHyYMqdIiInsNtxAPqXO3PvX2QFeoP1sEehsz+qIEiA
pQHZGyQSoz9MXuxGB3KW8TVljSluUUocYKy+daKS6zqBFoxdlDqAD8B8CcWCXesp
vOtOGjFxSVH9J/eu1onopG9VEXO6N8qbDBiZM3hDw4sKc2tqb3uwTBU+r7CKn0zm
6k3QJOt8NPSctN2QtjQkRQ6E7vpojI39cNQFDlc9hx8/CQW3TeR/gmIRYiO8U1rp
KiW0G+FEuXwAW4TVBuHOULz8mMGJ/xFdMT34qg/2Wyy6rNkKnEk3FvFFl9ZQH+Cp
U1cga4Gdw9W9XjC/nqlfyfCK+wcqfkfzuPX6NA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:23 2025 by rpki-client