Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234312e302f32342d3234203d3e203338343936.roa
File: 3131342e33312e3234312e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: XqE8xfu2hX9Q9RSk2CKWorNS0Ss9P6LFJhMSs9JiGmY=
Subject key identifier: EA:31:4D:3B:1B:88:D6:98:4C:98:16:B3:D6:65:B5:97:BA:11:49:01
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 16D67D91BB20E71F20EECAC2A5CDA32FD0EC268C
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234312e302f32342d3234203d3e203338343936.roa
Signing time: Tue 02 Apr 2024 05:03:16 +0000
ROA not before: Tue 02 Apr 2024 04:58:16 +0000
ROA not after: Tue 01 Apr 2025 05:03:16 +0000
asID: 38496
IP address blocks: 114.31.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d6:7d:91:bb:20:e7:1f:20:ee:ca:c2:a5:cd:a3:2f:d0:ec:26:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Apr 2 04:58:16 2024 GMT
Not After : Apr 1 05:03:16 2025 GMT
Subject: CN=EA314D3B1B88D6984C9816B3D665B597BA114901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:e0:cb:70:db:ae:cc:90:bd:ce:70:87:7c:
94:86:ed:ee:f6:58:ad:1b:27:eb:33:d6:39:8f:db:
02:de:c8:13:a8:ce:e3:71:db:73:41:ce:2c:56:8f:
34:31:fe:47:93:9a:30:4c:0f:b3:ec:37:c3:ab:84:
4b:99:5d:0a:21:bc:09:a6:c8:4f:46:9f:e6:1c:8f:
a3:78:8d:fd:c3:83:d9:09:31:5b:0c:88:b9:d3:01:
2a:c0:86:48:ad:c5:63:76:11:33:41:8b:91:e5:dd:
71:8e:e1:28:90:93:f5:9e:d6:e7:ca:b6:5a:7b:07:
ff:d6:38:a1:6c:4d:d2:81:b1:39:32:92:9f:17:43:
c8:44:7b:ce:0f:99:2a:3d:ef:2a:47:9f:1f:a4:7a:
31:56:22:ee:82:1b:a8:b1:33:4f:74:50:5b:16:e4:
f2:22:a6:62:78:9c:1a:8f:6a:7f:31:84:78:cc:8a:
a4:39:e6:8e:b3:31:04:b8:6c:d7:b0:72:2b:51:17:
3d:33:08:39:d3:2b:55:b1:19:d4:5f:3c:53:47:38:
b3:a2:8f:3c:74:d8:bf:65:1c:81:0a:7b:01:41:34:
0d:99:93:3e:74:15:3d:ab:82:be:c6:83:17:d0:00:
f5:c8:4b:4e:15:4c:21:61:bd:37:e7:12:47:0e:74:
62:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:31:4D:3B:1B:88:D6:98:4C:98:16:B3:D6:65:B5:97:BA:11:49:01
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234312e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.31.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7c:d2:a3:a8:e4:29:ba:bc:ed:8f:17:bf:78:ec:81:26:a4:
52:4b:e8:5f:a7:e8:c9:25:36:10:dc:4b:1f:1f:5c:55:71:f1:
a7:9a:21:d1:65:28:e3:4f:26:9e:a2:a0:43:b7:ed:b7:61:9a:
dc:a7:6b:92:48:eb:0f:49:16:e3:d7:2e:82:3b:35:cc:ba:af:
8b:0e:cc:5d:02:28:7c:38:18:33:94:ea:85:74:a1:65:aa:4d:
7d:1b:52:f3:00:6f:2f:1f:b1:d6:d6:c5:dc:f7:4b:2b:66:4d:
6a:aa:31:12:84:e4:94:34:f3:7c:26:f9:7c:3c:d1:4b:fc:ad:
7d:80:64:68:6d:2d:2d:8d:41:6c:e5:f4:f0:1c:b1:df:3f:70:
25:12:e7:fc:22:82:91:6d:ae:17:e3:80:13:05:57:2e:c6:51:
f5:d5:7b:92:70:be:9c:90:a3:e1:8b:a1:85:ed:e6:1c:ee:f8:
1a:19:e3:cf:e4:fb:0b:f7:9e:34:5a:28:3a:9a:c6:24:07:25:
fd:e1:90:6e:6c:3e:02:ab:5e:34:49:b7:f8:b0:20:05:1e:f7:
f3:22:45:bf:1d:cd:c7:3f:9b:6c:f3:8f:83:ac:96:f4:85:e4:
39:b9:8b:23:1e:d5:5a:73:bc:fa:82:05:7d:6e:dd:3b:a6:f6:
68:1c:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:46 2025 by rpki-client