Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa
File: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (raw, json)
Hash identifier: qGPJ+XMPsIDxszHxtVxQgv1keGrpyfKPesLoUAaiQWU=
Subject key identifier: 6D:FE:17:8B:5A:F9:77:20:6B:11:F7:56:D1:39:F1:D3:5F:62:75:5B
Certificate issuer: /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial: 0896109306B8754FA9A1E870EEEB4FE922EB8FC1
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa
Signing time: Mon 01 Jul 2024 01:04:55 +0000
ROA not before: Mon 01 Jul 2024 00:59:55 +0000
ROA not after: Mon 30 Jun 2025 01:04:55 +0000
asID: 45295
IP address blocks: 113.212.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:96:10:93:06:b8:75:4f:a9:a1:e8:70:ee:eb:4f:e9:22:eb:8f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Validity
Not Before: Jul 1 00:59:55 2024 GMT
Not After : Jun 30 01:04:55 2025 GMT
Subject: CN=6DFE178B5AF977206B11F756D139F1D35F62755B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:9f:d0:9c:5d:e0:e7:88:d6:67:98:af:c7:
e7:7e:33:0f:f3:a2:84:44:5e:e9:65:b1:66:63:08:
96:d7:24:5f:f2:fa:25:38:e0:c6:89:10:31:ab:95:
f2:1e:b5:20:3d:58:35:a6:48:a5:f8:ae:d5:4c:7b:
97:ca:6f:7a:1e:47:e5:2d:dc:45:f3:76:e5:69:53:
e6:b6:0f:9d:95:c4:5c:9e:88:14:90:b3:c0:82:0a:
12:f3:b2:83:ef:9e:7f:ef:67:c1:d8:b3:a8:05:7f:
5e:7f:dd:a2:d3:6f:2f:9e:5d:f1:b3:36:7b:63:8a:
3a:83:03:ff:64:04:17:05:22:95:7c:13:13:c5:82:
46:b6:40:9a:36:a4:4c:66:37:4c:91:ff:f4:4c:d7:
1d:80:d7:4d:da:2d:55:26:57:3b:71:b8:1e:97:0e:
9c:3e:f4:16:2a:6b:5f:f1:01:a5:72:6e:29:eb:39:
56:be:bd:74:82:c5:7f:56:34:8d:ea:11:38:82:85:
2a:b8:2c:74:09:73:cf:c6:ef:dc:58:14:f7:30:00:
d6:a8:77:40:68:40:76:15:34:79:5b:15:f0:36:d0:
cb:53:8a:b2:4f:09:fb:68:4d:09:0f:84:96:7d:8e:
30:c3:29:d2:ea:03:bb:92:95:05:78:86:cf:f6:6e:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FE:17:8B:5A:F9:77:20:6B:11:F7:56:D1:39:F1:D3:5F:62:75:5B
X509v3 Authority Key Identifier:
keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.212.160.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:73:8c:d4:b3:19:23:f7:92:f7:81:0a:23:f3:f7:99:9e:97:
66:fd:40:f4:31:84:cd:3f:e3:b0:42:a7:1d:8c:6d:a0:f4:2a:
18:d8:74:bd:2c:6a:be:d0:e0:7f:61:0e:a1:49:8a:06:a1:3a:
a5:bd:7c:92:b6:7c:cc:d3:90:22:37:91:0e:8d:68:3f:19:e3:
be:8e:69:fb:d3:a1:54:72:8d:1d:57:ba:ec:cc:8c:5e:6d:75:
1c:89:54:4d:7c:2f:cd:06:44:e7:13:97:84:c0:d3:04:f4:db:
66:ad:4d:a9:85:94:e6:09:c7:ac:7b:bf:ef:03:ea:ca:3d:d3:
f3:6c:be:dc:30:9e:0d:c8:ec:cb:56:9a:cf:58:45:bc:11:8b:
7e:b3:b2:c7:4c:c3:ed:c8:13:7a:8b:d3:89:85:79:c6:bf:e1:
83:c8:1e:90:1a:f5:3c:f4:39:25:94:b4:f7:cf:9f:89:11:77:
4f:97:ac:8e:dd:04:9a:50:6e:ed:43:a3:99:fa:a2:f0:4d:dd:
24:71:60:16:a6:de:68:d7:f2:bc:52:9d:77:93:a4:7f:f8:e5:
fb:6f:01:69:f3:40:c5:39:ac:bc:9c:a7:b4:24:ee:b7:a2:22:
dc:e1:93:85:6f:74:7a:6a:f4:ec:27:e8:7b:f9:78:04:9c:fb:
13:3b:2e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:09:14 2025 by rpki-client